GDPR Notice
Effective date: July 4, 2026
1. Introduction & Scope
Quantum AI WebApps Digital LLC ("we", "us", "our") is committed to protecting the personal data of the individuals we interact with. This GDPR Notice explains how we collect, use, share, and safeguard personal data, and it sets out the rights available to individuals under European and United Kingdom data-protection law.
This notice applies to individuals located in the United Kingdom, whose personal data is protected by the UK General Data Protection Regulation ("UK GDPR") and the Data Protection Act 2018, and to individuals located in the European Union and wider European Economic Area ("EU/EEA"), whose personal data is protected by the EU General Data Protection Regulation (Regulation (EU) 2016/679) ("EU GDPR"). Where we refer collectively to these regimes in this notice, we use the term "GDPR".
This notice supplements, and should be read together with, our Privacy Policy. Where this notice and the Privacy Policy address the same subject in relation to individuals in the UK or EU/EEA, this notice provides the additional detail required by the GDPR. Your use of our website and services is also governed by our Terms. If there is any conflict between this notice and the Privacy Policy on a matter specific to UK or EU/EEA data-subject rights, this notice governs for those individuals.
This notice describes rights and processes that apply to individuals protected by the UK GDPR or the EU GDPR. If you are located outside the UK and EU/EEA, please refer to our Privacy Policy for information about how we handle your personal data.
2. Data Controller & Contact
For the purposes of the GDPR, the data controller responsible for your personal data is Quantum AI WebApps Digital LLC, a limited liability company organized under the laws of the State of Wyoming, United States, and located in Sheridan, Wyoming, USA. A data controller is the entity that determines the purposes and means of the processing of personal data.
You can contact us about any data-protection matter, including to exercise your rights or to ask a question about this notice, using the following details:
- By email: support@quantumaiwebapps.com
- By phone: +1 (307) 216-5724
- By post: Quantum AI WebApps Digital LLC, Sheridan, Wyoming, USA
- Website: https://quantumaiwebapps.com
We are a United States–based company. We do not currently have a designated Data Protection Officer, and we have not appointed a representative in the EU or the UK under Article 27 of the GDPR. Where the appointment of a Data Protection Officer or an Article 27 representative is legally required, we will appoint one. In the meantime, individuals may contact us at support@quantumaiwebapps.com for any data-protection matter, and all such enquiries will be handled by the team responsible for privacy at our company.
3. Categories of Personal Data We Process
Depending on how you interact with us, we may process the following categories of personal data:
- Identity & contact data — such as your name, email address, and phone number.
- Professional & business data — such as your company or organization, your role, portfolio links, and, for job applicants, your CV or résumé.
- Communications content — such as the messages you send us through forms, support requests, and chat messages, including any personal data you choose to include in them.
- Investor inquiry data — such as your organization, your area of interest, and an indicative check size, where you contact us about investment.
- Technical & usage data — such as your IP address, device and browser information, and the pages you visit, collected through cookieless analytics.
Where we work with a business as its service provider, we may also process contact details of that business's leads or customers that the business provides to us, for the purpose of delivering the services that business has engaged us to provide.
4. Sources of Personal Data
We obtain personal data from the following sources:
- Directly from you — when you contact us, submit a form, make a booking, request support, apply for a role, send an investor inquiry, or communicate with us through our website chat assistant or other channels.
- Automatically — when you visit our website, through cookieless analytics that record technical and usage data such as your IP address, device and browser information, and the pages you visit.
- From businesses we work with — where a business engages us as its service provider, that business may provide us with the contact details of its leads or customers so that we can deliver the agreed services on its behalf.
5. Purposes & Legal Bases for Processing
Under the GDPR, we must have a valid legal basis for each processing activity. The table below is expressed as a list, mapping each purpose to the legal basis or bases on which we rely.
Responding to enquiries, bookings, support, applications, and investor inquiries
We process your personal data to respond to enquiries, to manage bookings, to provide support, to consider job applications, and to respond to investor inquiries. Our legal basis is the performance of a contract with you, or taking steps at your request prior to entering into a contract, and/or our legitimate interests in operating and administering our business and communicating with the people who contact us.
Business-to-business outreach
Where applicable, we process professional and business contact data to conduct business-to-business outreach. Our legal basis is our legitimate interests in promoting our services to relevant organizations. We conduct a balancing test before relying on this basis, and you have the right to object to this processing at any time.
SMS and marketing communications
Where we send you SMS or other marketing communications, we do so on the basis of your consent. You may withdraw your consent at any time, and withdrawing it will not affect the lawfulness of any processing carried out before you withdrew it.
Security, fraud prevention, rate-limiting, and legal compliance
We process personal data to keep our website and services secure, to prevent and detect fraud and abuse, to apply rate-limiting, and to comply with our legal obligations. Our legal bases are our legitimate interests in protecting our business, our users, and the integrity of our systems, and compliance with a legal obligation to which we are subject.
6. Our Legitimate Interests
Where we rely on legitimate interests as a legal basis, we have considered whether those interests are overridden by your interests, rights, and freedoms. Our legitimate interests include operating, administering, and promoting our business; communicating with the people and organizations who contact us; keeping our website and services secure; and preventing fraud and abuse. We only rely on legitimate interests where we consider that our interests are not outweighed by the impact on you.
You have the right to object to processing that is based on our legitimate interests. If you object, we will stop the processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or unless the processing is necessary for the establishment, exercise, or defense of legal claims. To object, contact us at support@quantumaiwebapps.com.
7. Consent & How to Withdraw It
Where we rely on your consent to process your personal data — for example, to send you SMS or marketing communications — you have the right to withdraw that consent at any time. Withdrawing consent is as easy as giving it.
You can withdraw consent to SMS messages by replying STOP to any message you receive from us, or by contacting us at support@quantumaiwebapps.com. You can withdraw consent to marketing communications by using any unsubscribe mechanism we provide or by contacting us at the same address. Withdrawing your consent does not affect the lawfulness of any processing we carried out before you withdrew it, and it does not affect processing that we carry out on a different legal basis.
8. Recipients & International Transfers
Recipients
We share personal data with a limited number of service providers who process it on our behalf and under our instructions. These providers are contractually bound to protect your personal data and to use it only for the purposes for which we engage them. The categories of recipient we use include:
- Website hosting & infrastructure — Vercel.
- Transactional email — Postmark.
- Database & file storage hosting — providers that host our databases and stored files.
- SMS and voice telephony — providers that deliver SMS and voice communications.
- AI service providers — providers that power our website chat assistant.
- Cookieless analytics — Vercel Web Analytics and Vercel Speed Insights.
We do not sell personal data. We may also disclose personal data where we are required to do so by law, or to protect our rights, users, or systems, as described in our Privacy Policy.
International Data Transfers
We are based in the United States. As a result, personal data relating to individuals in the UK and the EU/EEA is transferred to, and processed in, the United States, both by us and by the service providers described above. Transfers of personal data outside the UK and the EU/EEA are subject to the safeguards required by the GDPR.
To protect your personal data when it is transferred internationally, we rely on appropriate safeguards, including the European Commission's Standard Contractual Clauses for transfers of personal data from the EU/EEA, and the UK International Data Transfer Addendum (or the applicable UK transfer mechanism) for transfers of personal data from the UK. Where appropriate, we also take supplementary measures to protect transferred data. You may contact us at support@quantumaiwebapps.com for more information about the safeguards we apply to international transfers.
9. Data Retention
We retain personal data only for as long as is necessary to fulfil the purposes for which we collected it, including to satisfy any legal, accounting, regulatory, or reporting requirements, and to establish, exercise, or defend legal claims. The appropriate retention period depends on the nature of the personal data and the purpose for which it is processed.
When personal data is no longer needed for these purposes, we delete it or anonymize it so that it can no longer be associated with you. Further information about the periods for which we retain particular categories of personal data is set out in our Privacy Policy, and you may contact us at support@quantumaiwebapps.com for more detail.
10. Your Rights Under GDPR
Subject to the conditions and exceptions set out in the GDPR, you have the following rights in relation to your personal data:
- Access — request confirmation of whether we process your personal data and, if we do, a copy of that data and information about how we process it.
- Rectification — request correction of inaccurate personal data and completion of incomplete personal data we hold about you.
- Erasure ("right to be forgotten") — request deletion of your personal data where there is no good reason for us to continue processing it.
- Restriction — request that we restrict the processing of your personal data in certain circumstances, for example while we verify its accuracy.
- Data portability — request that we provide the personal data you gave us in a structured, commonly used, and machine-readable format, or that we transmit it to another controller, where technically feasible.
- Objection — object to our processing of your personal data where we rely on legitimate interests, and object at any time to processing for direct-marketing purposes.
In addition to the rights above, you also have the right to withdraw consent at any time where we rely on your consent to process your personal data, and rights in relation to automated decision-making, including profiling, as described in section 12 of this notice.
11. How to Exercise Your Rights
To exercise any of your rights, please contact us at support@quantumaiwebapps.com. We will respond to your request without undue delay and in any event within one month of receiving it. Where your request is complex or you have made a number of requests, we may extend this period by up to two further months, and we will let you know within one month of receiving your request if we need to do so and why.
You will not usually have to pay a fee to exercise your rights. However, we may charge a reasonable fee, or refuse to act on a request, if the request is manifestly unfounded or excessive. We may need to request specific information from you to help us confirm your identity before we act on a request; this is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it.
12. Automated Decision-Making & Profiling
We do not make decisions that produce legal effects concerning you, or that similarly significantly affect you, based solely on automated processing of your personal data, including profiling. If this changes in the future, we will update this notice and, where required, put in place appropriate safeguards and inform you of your rights in relation to such processing.
13. Data Security
We have put in place appropriate technical and organizational measures designed to protect personal data against unauthorized or unlawful processing and against accidental loss, destruction, or damage. These measures include working with reputable infrastructure and service providers that maintain their own security controls, limiting access to personal data to those who need it, and applying measures such as security monitoring and rate-limiting to help protect our systems.
While we take the security of personal data seriously, no method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee absolute security. Where we are legally required to notify you or a supervisory authority of a personal-data breach, we will do so in accordance with our obligations under the GDPR.
14. Right to Lodge a Complaint
If you have a concern about how we handle your personal data, we would welcome the opportunity to address it, and we ask that you contact us first at support@quantumaiwebapps.com so that we can try to resolve it.
You also have the right to lodge a complaint with a supervisory authority. If you are in the United Kingdom, you may complain to the Information Commissioner's Office (ICO), the UK supervisory authority for data-protection issues, at ico.org.uk. If you are in the EU/EEA, you may complain to the supervisory authority in the member state of your habitual residence, your place of work, or the place of the alleged infringement. Exercising this right does not affect any other administrative or judicial remedy available to you.
15. Changes to This Notice
We may update this GDPR Notice from time to time to reflect changes in our practices, our services, or applicable law. When we make changes, we will revise the effective date shown at the top of this notice. We encourage you to review this notice periodically to stay informed about how we process personal data. Where changes are significant, we will take additional steps to inform you where required to do so by law.
16. Contact Us
If you have any questions about this notice or about how we process your personal data, please contact us:
- Data controller: Quantum AI WebApps Digital LLC
- Email: support@quantumaiwebapps.com
- Phone: +1 (307) 216-5724
- Address: Sheridan, Wyoming, USA
- Website: https://quantumaiwebapps.com