Privacy Policy

Data Controller

The data controller for personal data processed through Quantarell is TLTDSH Limited (or the successor Hong Kong-registered entity operating Quantarell), with registered office in Hong Kong SAR. For privacy inquiries, contact privacy@quantarell.com.

Information We Collect

Account Information: When you sign in with Google, we receive your name, email address, and profile picture. We store this to create and manage your account.

Payment Information: Quantarell does not collect or process payment information for contributions. Contributions happen off-platform via the payment providers creators choose. For Premium subscription billing, card details are handled by Stripe and never stored on Quantarell's servers.

Goal Data: We store the goals you create, including titles, descriptions, target amounts, and contribution data.

Usage Data: We collect basic analytics such as pages visited, features used, and error logs to improve the platform. We do not use third-party tracking services.

Legal Basis for Processing

Performance of a contract: processing necessary to provide your account and host the goals you create.

Legitimate interests: platform security, fraud prevention, and service improvement.

Consent: optional communications where you have opted in, which you may withdraw at any time.

Legal obligations: tax, accounting, and regulatory requirements where applicable.

How We Use Your Information

To provide, maintain, and improve the Quantarell platform.

To communicate with you about your account, goals, and platform updates.

To detect and prevent fraud, abuse, or security issues.

We never sell your personal information to third parties.

Information Sharing

Stripe (Premium billing only): if you subscribe to Premium, Stripe processes the billing transaction and receives only the data needed for that purpose.

Google OAuth: used only for sign-in; we do not receive access beyond your name, email, and profile picture.

Public goal pages: your display name and goal details are visible publicly. Your email address is never shown publicly.

Legal Requirements: we may disclose information if required by law, legal process, or government request.

We do not sell, share for advertising purposes, or transfer personal data to data brokers.

International Data Transfers

Quantarell operates from Hong Kong and uses infrastructure (Cloudflare, Google Cloud) that may transit data internationally. For transfers of EU, UK, or Swiss residents' data outside those regions, we rely on Standard Contractual Clauses and equivalent safeguards. A copy of the clauses is available on request.

Data Security

We use industry-standard security measures to protect your data, including HTTPS encryption for all data transmission, secure authentication via Google OAuth, and regular security reviews.

While we take reasonable measures to protect your information, no method of electronic transmission or storage is 100% secure.

Data Retention

Account data is retained while the account is active and deleted within 30 days of account deletion.

Server logs are retained for up to 90 days.

Analytics data is aggregated or anonymized.

Financial records for Premium subscriptions are retained as required by applicable tax law, typically 7 years.

Your Rights

Access: you may request a copy of the personal data we hold about you.

Rectification: you may correct inaccurate or incomplete information.

Erasure: you may request deletion of your account and associated personal data.

Restriction of processing: you may ask us to limit how we process your data in certain circumstances.

Data Portability: you may request your data in a portable, machine-readable format.

Object to processing: you may object to processing based on our legitimate interests.

Withdraw consent: where processing is based on consent, you may withdraw it at any time.

Right to lodge a complaint with the data protection supervisory authority in your country of residence.

Cookies

We use essential cookies for authentication and session management. We do not use advertising or tracking cookies. See our Cookie Policy for details.

Automated Decision Making

We do not use automated decision-making or profiling that produces legal or similarly significant effects on users.

Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "last updated" date.

Contact

If you have questions about this privacy policy or our data practices, please contact us at privacy@quantarell.com.