Privacy Policy

1. Data we collect

• •Account data: your name, email address, password (stored only in hashed form by our authentication provider) and the language you signed up in.
• •Google sign-in data: if you choose Continue with Google, Google shares your name, email address and profile picture with us. We request only these basic profile scopes, we use them only to create and secure your account, and we do not access your Gmail, Drive, contacts, calendar or any other Google data.
• •Course and learning data: courses you create or buy, your progress, quiz answers and results, the learning level you choose, and the messages you send to the AI tutor and the answers you receive.
• •Creator data: course content, landing page copy, pricing, payout status and the details Stripe tells us about your payout account (we do not store your bank details).
• •Payment data: Stripe processes your payment. We receive confirmation of the payment, the amount, a payment reference and limited information such as the card brand and last four digits. We do not receive or store your full card number.
• •Technical data: IP address, browser and device type, and basic logs created when you use the site. On the public demo, we store a hashed form of your IP address to limit abuse.
• •Messages you send us, for example support requests or refund requests.

2. Why we use your data and our legal bases

If you are in the European Economic Area, the United Kingdom or Switzerland, we rely on these legal bases under the GDPR:

• •To provide the service you asked for (contract): create your account, deliver courses, run the AI tutor, process payments and pay creators.
• •To keep the service safe and working (legitimate interests): prevent fraud and abuse, secure accounts, fix errors and understand how the service performs.
• •To meet legal obligations: keep payment and tax records and respond to lawful requests.
• •To send you service emails such as login links, receipts and notices about your account (contract and legitimate interests).
• •With your consent where the law requires it. You can withdraw consent at any time, which does not affect what happened before.

3. AI processing

To generate course content and to answer tutor questions, we send the relevant text (for example a creator's course idea, lesson text, or a student's question and the lesson it relates to) to our AI provider, Anthropic, through its API. Please do not put sensitive personal data into prompts or tutor messages. We do not use your content to train our own models.

4. Who we share data with

We do not sell your personal data. We share it with service providers who process it for us, and with creators where needed to deliver their course:

• •Supabase: database and authentication.
• •Google: only if you choose Continue with Google, to verify your identity.
• •Netlify: website hosting.
• •Cloudflare: domain name services and bot protection (Turnstile).
• •Stripe: payment processing and creator payouts.
• •Anthropic: AI models used to generate content and power the tutor.
• •Resend: sending service emails.
• •Trigger.dev: running background jobs such as course generation.
• •Creators: if you buy a campus, the creator can see that you are enrolled and your name and email address, and may see aggregate learning activity for their course.
• •Authorities, advisers and successors: where the law requires it, to protect our rights, or in a merger or sale of the business, under confidentiality.

Google user data

QuantCampus's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use Google sign-in data only to provide and improve the sign-in feature and your account, we do not sell it, we do not use it for advertising, and we do not allow people to read it except where you ask for support, for security or abuse investigation, or where the law requires.

5. International transfers

Some of these providers are in the United States or other countries outside your own. Where the law requires it, we rely on safeguards such as the European Commission's Standard Contractual Clauses or an adequacy decision to protect your data.

6. Cookies and similar technologies

We use only the cookies and storage the service needs to work: a login session so you stay signed in, a language preference cookie so the site opens in your language (kept for up to one year), and security checks to tell people from bots. We do not currently use advertising or third-party analytics cookies. If that changes we will update this policy and ask for consent where the law requires it.

7. How long we keep data

• •Account and learning data: while your account is open, and then deleted or anonymised within a reasonable period after you close it, except what we must keep.
• •Payment, invoicing and tax records: as long as the law requires, which is often several years.
• •Demo abuse-prevention data (hashed IP address): a short period.
• •Backups and logs: they are overwritten on a regular cycle.

8. Your rights

Depending on where you live, you may have the right to access your data, correct it, delete it, restrict or object to our use of it, receive a copy in a portable format, and withdraw consent. To use these rights, email us at the address above. We may need to verify your identity first.

If you are in the EEA, the UK or Switzerland, you can complain to your local data protection authority. If you are in California or another US state with a privacy law, you have similar rights to know, delete and correct your data, and we do not sell or share your personal data for advertising.

9. Children

QuantCampus is for people aged 18 and over. We do not knowingly collect data from children. If you think a child has given us data, contact us and we will delete it.

10. Security

We use reasonable technical and organisational measures to protect your data, including encrypted connections, access controls and trusted providers. No system is perfectly secure. If a breach affects you, we will notify you and the authorities as the law requires.

11. Changes to this policy

We may update this policy. If a change is material we will tell you, for example by email or a notice on the site. The date at the top shows when it was last updated.

12. Contact

Qubitty, ul. Ludwika Waryńskiego 2, 45-047 Opole, Poland. Privacy questions and requests: privacy@quantcampus.io.