Privacy Policy

1. Data controller

The controller of the personal data of users of quantfusion.ai and of services on related domains, including asystent.quantfusion.ai, is QuantFusion sp. z o.o., VAT ID: 5273134156, ul. Jana Kochanowskiego 30/27, Warsaw, 01-864, Poland, e-mail: ceo@quantfusion.ai, phone: 606 108 448 (the Controller).

2. Processing of personal data

Personal data is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data (GDPR).

3. Purpose of processing

The personal data collected will be processed for the following purposes:

• providing services by electronic means through quantfusion.ai,
• handling questions directed to the AI assistant (chatbot) on the Controller’s websites,
• verifying the user’s identity,
• performing a service agreement,
• communicating with the user (including answering enquiries),
• marketing of the Controller’s products and services (where the user has given consent),
• website analytics and statistics for the purpose of optimisation,
• providing access to industry news and educational materials, where the user has given consent.

4. Legal bases for processing

Personal data will be processed on the basis of:

• the user’s consent (Article 6(1)(a) GDPR),
• performance of a contract (Article 6(1)(b) GDPR),
• the legitimate interests of the Controller (Article 6(1)(f) GDPR).

1. How long data is processed

Personal data will be processed for the period necessary to achieve the purposes, including for as long as the user uses the services of quantfusion.ai. After the use of the services ends, data may be retained for the purpose of pursuing claims or protecting rights for a period no longer than 3 years. Specific retention periods for AI assistant conversations are set out in section IV.

2. Consent to processing

Data processed on the basis of the user’s consent will be retained until that consent is withdrawn. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

1. Collecting contact data

When using contact forms, newsletter sign-ups, subscriptions, account registration or other services available on quantfusion.ai, users may be asked to provide contact data such as first name, surname, e-mail address, telephone number, links to social media profiles and similar.

2. Purpose of processing contact data

• Communication with the user: answering enquiries, resolving problems, customer support.
• Sending the newsletter and marketing information: where the user gives consent, contact data will be used to send newsletters, special offers, industry news, promotions and other marketing materials concerning the products and services of the Controller or its Partners.
• Notifications about new materials: where the user signs up for courses, webinars or other educational services, contact data will be used to send information related to those services.

3. Legal bases for processing

• For sending the newsletter, offers and marketing materials, data will be processed on the basis of the user’s consent (Article 6(1)(a) GDPR).
• For answering enquiries or performing a contract, data will be processed on the basis of that contract (Article 6(1)(b) GDPR).

4. Consent to processing

• Users may voluntarily consent to receiving marketing messages (for example by ticking the relevant box in the newsletter sign-up form).
• The user may withdraw consent to receiving marketing materials at any time, which does not affect the lawfulness of processing carried out before the withdrawal.
• Every marketing e-mail contains an option to unsubscribe from the newsletter (opt-out).

5. Data protection

The Controller applies appropriate security measures to protect contact data against unauthorised access and unauthorised use. Contact data will not be disclosed to third parties, except in the cases set out in this Privacy Policy.

6. Booking a meeting online (Cal.com)

In the contact section of the website the Controller offers a calendar for booking a free introductory call. The calendar is an embedded frame provided by a third party — Cal.com, Inc., established in the United States — and it loads only after the user chooses the booking tab. Until that moment no data is sent to the provider.

Booking a meeting involves processing:

• the name and e-mail address entered in the booking form,
• the chosen time slot and the time zone read from the browser settings,
• the content of any note attached to the booking, if the user writes one,
• technical data required to display the calendar and handle the booking.

The purpose of processing is to arrange and hold the introductory call, and the legal basis is Article 6(1)(b) GDPR — steps taken at the request of the data subject prior to entering into a contract. A confirmation is sent to the e-mail address provided and the slot is saved in the Controller’s calendar; the meeting takes place over Google Meet.

Cal.com, Inc. is a recipient of this data and processes it outside the European Economic Area. This form of contact is never required — the contact form, e-mail and telephone remain available and involve no transfer of data to that provider.

1. Scope

An AI assistant (chatbot) answering questions about the offer operates on the Controller’s websites, including asystent.quantfusion.ai. This section describes the processing of data in connection with its use.

2. What data is processed

• the content of messages entered by the user in the chat window and the content of the assistant’s replies,
• contact data provided voluntarily during the conversation (first name, telephone number or e-mail address), if the user chooses to leave it,
• the date and time of the conversation and the technical data necessary to handle it.

Providing any data in the chat window is voluntary. Using the assistant does not require providing personal data.

3. Purposes and legal bases

• answering questions about the offer – the legitimate interest of the Controller in serving people interested in the offer (Article 6(1)(f) GDPR),
• passing on contact data in order to answer an enquiry – steps taken at the request of the data subject prior to entering into a contract (Article 6(1)(b) GDPR),
• improving the quality of the assistant and the security of the service – the legitimate interest of the Controller (Article 6(1)(f) GDPR).

4. Recipients of the data

The content of the conversation is transferred to the provider of the language model that generates the replies: Anthropic PBC, acting as a processor under a concluded agreement. Contact data collected during the conversation is transferred to the e-mail delivery provider: Resend. Conversation data is stored on servers located within the European Union.

5. Retention period

The content of conversations is stored for 90 days from the day of the conversation and is then permanently deleted. Contact data provided by the user for the purpose of a reply is stored for the period necessary to handle the enquiry, no longer than 24 months.

6. Automation

The assistant’s replies are generated automatically by a language model on the basis of a knowledge base prepared from the content of the offer. The assistant does not take decisions producing legal effects concerning the user, nor does it profile users within the meaning of Article 22 GDPR.

7. Please do not provide special category data

The chat window is not intended for providing health data, financial data, passwords or other special categories of data within the meaning of Article 9 GDPR. Please do not include such information in the conversation.

8. User rights

The user has the rights described in the “User rights” section, including the right to request deletion of the conversation. Requests can be sent to ceo@quantfusion.ai.

1. Recipients of the data

Personal data may be shared with:

• entities cooperating with the Controller (for example hosting services, online payments),
• entities providing analytics services (for example Google Analytics),
• providers of artificial intelligence services processing the content of conversations with the AI assistant,
• the provider of the online meeting booking system (Cal.com, Inc.),
• providers of e-mail delivery services,
• entities providing courier or postal services.

2. Transfers outside the EEA

Personal data may be transferred to entities located outside the European Economic Area (EEA) where external tools are used that provide appropriate data safeguards.

1. User rights

Users have the right to:

• access their personal data,
• rectify their data,
• erase their data (the right to be forgotten),
• restrict processing,
• data portability,
• object to processing,
• withdraw consent at any time (without affecting the lawfulness of processing carried out before the withdrawal).

2. Complaint to the supervisory authority

The user has the right to lodge a complaint with the President of the Personal Data Protection Office if they consider that the processing of their data infringes their rights and freedoms.

1. Changes to the policy

The Controller reserves the right to amend this privacy policy. Users will be informed of any changes by an appropriate notice on quantfusion.ai.

2. Effective date

Changes to the privacy policy take effect on the day they are published on quantfusion.ai.