Privacy Policy
1. Introduction
This Privacy Policy governs how we collect, use, disclose, and protect your information.
QuantumCert ("Company", "we", "us", "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy applies to all users of our website, mobile applications, and quantum computing education services.
By accessing or using QuantumCert services, you consent to the data practices described in this policy. If you do not agree, please do not use our services.
2. Information We Collect
- Account Information: Name, email address, phone number, password, profile picture
- Educational Data: Course progress, quiz scores, certificates earned, learning history
- Payment Information: Billing address, payment method (processed by Stripe/PayPal)
- Communication Data: Support tickets, forum posts, chat messages
- IP address, browser type, device information, operating system
- Pages visited, time spent, referral sources
- Cookies, local storage, session data
- Newsletter subscription preferences
- Course recommendation preferences
- Event registration details
3. How We Use Your Information
- Provide access to quantum computing courses and track learning progress
- Process payments and manage subscriptions
- Send educational updates, certificates, and course recommendations
- Improve platform functionality through analytics
- Prevent fraud, abuse, and unauthorized access
- Respond to support requests and technical issues
- Conduct research and develop new quantum learning features
- Comply with legal obligations and enforce our Terms of Service
4. Legal Basis (GDPR Compliance)
- Contract: Providing course access and certificates
- Consent: Marketing emails and analytics cookies
- Legitimate Interest: Fraud prevention, platform security
- Legal Obligation: Tax records, regulatory compliance
5. Data Sharing & Disclosure
We DO NOT SELL your personal data. Data sharing is limited to:
- Service Providers: AWS (hosting), Stripe/PayPal (payments), SendGrid (email), Google Analytics
- Certificate Partners: LinkedIn, universities (with explicit consent)
- Legal Requirements: Court orders, law enforcement, regulatory authorities
- Business Transfers: Mergers, acquisitions (with notice)
6. Data Retention Periods
- Account data: Duration of account + 2 years after deletion
- Payment data: 7 years (tax compliance)
- Learning progress: Permanent (certificates)
- Cookies: 13 months maximum
- Analytics data: 26 months aggregated
7. Security Measures
- TLS 1.3 encryption for all data transmission
- AWS enterprise-grade cloud security (SOC 2 compliant)
- Regular penetration testing and vulnerability scans
- Two-factor authentication (2FA) required
- Role-based access control (RBAC)
- Encrypted backups with geographic redundancy
- GDPR, CCPA, ISO 27001 compliant infrastructure
8. International Data Transfers
Data is stored on AWS servers in US-East (N. Virginia) and EU-West (Frankfurt) regions. We use Standard Contractual Clauses (SCCs) and adequacy decisions for international transfers.
9. Your Privacy Rights
- Access: Request copy of personal data (within 30 days)
- Rectification: Correct inaccurate data
- Deletion: Right to be forgotten (subject to legal holds)
- Restriction: Limit processing during disputes
- Portability: Receive data in machine-readable format
- Objection: Object to marketing and analytics
10. Children's Privacy
QuantumCert is not intended for children under 13 years. We do not knowingly collect data from children. Parents/guardians may contact us to delete child's data.
11. Cookies & Tracking Technologies
- Essential: Session management, login state (1st party)
- Analytics: Google Analytics, Hotjar (opt-out available)
- Functional: Progress tracking, preferences
- Advertising: None used
12. California Privacy Rights (CCPA)
- Right to know what personal information is collected
- Right to delete personal information
- Right to opt-out of sale (we do not sell data)
- Non-discrimination for exercising rights
13. Contact Information
For privacy concerns, data requests, or complaints:
Data Protection Officer
QuantumCert Inc.
Chanda, Maharashtra, India
Privacy Support Line
Mon-Fri 9AM-6PM IST
14. Changes to This Privacy Policy
We may update this policy. Material changes will be posted here with a new effective date and notified via email or site banner. Continued use after changes constitutes acceptance.
15. Governing Law
This Privacy Policy is governed by the laws of India and the European Union's GDPR. Disputes shall be resolved in the courts of Mumbai, Maharashtra, India.