Privacy Policy

1. Introduction

Quiotech Technologies ("Quiotech," "we," "our," or "us") is an AI and software development company. We serve clients in the United States, United Kingdom, Canada, Australia, and other countries. This Privacy Policy explains how we collect, use, share, and protect personal information when you visit www.quiotech.com, contact us, book a call, or work with us.

If you do not agree with this policy, please do not use our website or services.

2. Information We Collect

2.1 Information You Provide

We collect information you choose to share with us when you:

• Submit our contact form
• Book a consultation through our scheduling tool (Calendly)
• Email us or message us on WhatsApp
• Request a proposal or sign an agreement with us
• Apply to work with us as a freelancer or partner

This may include:

• Name and email address
• Company name and country
• Phone or WhatsApp number, if you contact us that way
• Details about your project, goals, and requirements
• Billing details needed to invoice you, if you become a client

2.2 Information Collected Automatically

When you visit our website, we collect limited technical information:

• Analytics: We use Vercel Web Analytics to understand page views, referring sites, and general location (country level). It is designed to work without cookies and does not identify you personally.
• Device and log data: Browser type, operating system, device type, and IP address, processed by our hosting provider for security and performance.

2.3 Client Project Data

When we build software, AI agents, or automations for you, we may need access to your systems or data (for example, CRM records or documents used to train a knowledge assistant). We process this data only on your instructions and only to deliver the project. On request, we will sign a Data Processing Agreement (DPA) that sets out how we handle it.

3. How We Use Your Information

• To respond to inquiries and schedule calls
• To prepare proposals and deliver the services you request
• To send project updates, invoices, and service communications
• To improve our website and understand how visitors use it
• To send occasional updates about our services, only where you have agreed or where permitted by law (you can opt out at any time)
• To protect our website against fraud, spam, and abuse
• To comply with legal, tax, and accounting obligations

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We do not use your data or your project data to train AI models.

4. Legal Bases for Processing (EEA and UK)

If you are in the European Economic Area or the United Kingdom, we process your personal data under the GDPR and UK GDPR on the following legal bases:

• Contract: to take steps before entering into, or to perform, a contract with you
• Legitimate interests: to respond to inquiries, run and secure our website, and grow our business
• Consent: where required, for example for certain marketing emails (you can withdraw consent at any time)
• Legal obligation: to meet tax, accounting, and other legal requirements

5. How We Share Information

We share personal information only with service providers that help us run our business, and only as needed:

• Vercel: website hosting and analytics
• Google (Gmail / Google Workspace): receiving and managing email, including contact form submissions
• Calendly: scheduling consultations
• WhatsApp (Meta): if you choose to message us there
• Content delivery networks: to load images and assets quickly
• AI and cloud providers: when delivering a client project that uses them, under that client's instructions

We may also disclose information if required by law, to protect our rights, or as part of a merger, acquisition, or sale of our business. Each third party's use of your data is governed by its own privacy policy.

6. International Data Transfers

We are based in India and work with service providers in the United States and other countries, so your information may be processed outside your home country. Where the law requires it, we rely on appropriate safeguards such as Standard Contractual Clauses for transfers of personal data from the EEA and UK.

7. Data Retention

• Inquiries and contact form messages: up to 3 years, or sooner if you ask us to delete them
• Client project and billing records: up to 7 years, for legal, tax, and accounting purposes
• Client project data (such as system access or datasets): deleted or returned at the end of the engagement, unless otherwise agreed
• Analytics data: kept in aggregated, non-identifying form

8. Your Privacy Rights

Depending on where you live, you may have some or all of the following rights:

• Access: request a copy of the personal data we hold about you
• Correction: ask us to fix inaccurate or incomplete data
• Deletion: ask us to delete your personal data
• Restriction and objection: limit or object to certain processing
• Portability: receive your data in a portable format
• Withdraw consent: where we rely on consent
• Opt out of marketing: at any time, using the unsubscribe link or by emailing us

8.1 United States (including California)

Residents of California and other US states with consumer privacy laws may have the right to know what personal information we collect, to request deletion or correction, and to opt out of the sale or sharing of personal information. We do not sell or share personal information as those terms are defined under the CCPA/CPRA. We will not discriminate against you for exercising your rights.

8.2 EEA and United Kingdom

You have the rights listed above under the GDPR and UK GDPR, and you may lodge a complaint with your local data protection authority.

8.3 Canada, Australia, and India

We handle personal information in line with Canada's PIPEDA, the Australian Privacy Principles under the Privacy Act 1988, and India's Digital Personal Data Protection Act, 2023, including your rights to access and correct your information.

To exercise any of these rights, email us at quiotechh@gmail.com. We may need to verify your identity, and we will respond within 30 days or the period required by applicable law.

9. Cookies

Our website does not use advertising or tracking cookies. Third-party tools we embed, such as the Calendly scheduling widget, may set their own cookies when you interact with them. You can control cookies through your browser settings.

10. Data Security

We use reasonable technical and organizational measures to protect personal information, including encryption in transit (HTTPS/TLS), access controls based on least privilege, and reputable hosting infrastructure. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

11. Children's Privacy

Our website and services are intended for businesses and are not directed to anyone under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and change the "Last updated" date above. Significant changes will be highlighted on our website.

13. Contact Us

If you have questions or requests about this Privacy Policy or your personal data, contact us: