1. Who we are
Quantum9 is the trademark of Quantum9 Tech LTDA, CNPJ 30.323.500/0001-25. We are a software factory that provides development, prototyping, integration and optimization services for digital products. Our goal is to accelerate the creation of value for companies through high-quality technology and design.
2. What data we collect
We only collect the data necessary to provide services and for administrative and commercial purposes:
- Contact details: name, email, telephone, company;
- Information provided in the forms, such as title, subject, message, project context and diagnostic responses;
- Visit source data associated with the submission, such as page, reference and campaign parameters;
- In the newsletter: email, origin of registration, consent, confirmation and cancellation status;
- Login data and credentials where applicable (securely stored);
- Payment data when processed for billing (generally via third-party payment gateways);
- Website usage and analytics data (cookies, IP, browsing behavior);
- Technical data related to integrations and APIs, when necessary to deliver the service;
- In Webmail: domain, professional address, alternative email, headers, senders, recipients, message content, attachments, contacts and preferences;
- Identifiers and status of the subscription processed by Mercado Pago; Quantum9 does not store complete card data.
3. What we use your data for
We use the data for the following purposes:
- Provide and improve our services, delivering projects, integrations and support;
- Commercial communication and service through channels informed by the holder, when consented or contracted;
- Sending editorial content to confirmed registrations, with the option to cancel;
- Payment processing and invoicing (where applicable);
- Website improvement and analytics, including conversion optimization and UX;
- Compliance with legal obligations and protection of the rights of Quantum9 and third parties.
4. Legal basis
We process personal data based on the following legal hypotheses: execution of a contract, consent of the holder, compliance with legal obligations and legitimate interest (for example, security and fraud prevention, improvement of services and communication with customers). When we base processing on consent, you may revoke it at any time without prejudice to the legality of previous processing.
5. Cookies and similar technologies
We use essential storage for preferences and security. Optional analytics tools are only loaded after acceptance in the cookie banner. Rejection does not prevent the use of the website's essential pages and forms.
5.1. Forms and newsletter
The data sent in public forms is stored in a restricted environment to allow service, request qualification and contact monitoring, even if there is temporary unavailability in sending the internal notification. Subscription to the newsletter requires explicit consent and confirmation via a link sent to the address provided. The token for this link is stored in hash format only and can be used to unsubscribe.
6. Sharing with third parties
We may share data with service providers (e.g. hosting, payment processing, analytics, CRM) when necessary for contractual execution or service provision. We require these partners to process data as per our instructions and in compliance with applicable legislation (including LGPD).
To operate our services, we use authentication, database and storage providers (Supabase), hosting (Vercel), transactional email transport (Resend and configured email providers) and payments (Mercado Pago). These services may process data in other countries, with contractual and technical mechanisms compatible with applicable legislation.
7. Roles in Webmail processing
The client organization decides who can use its boxes and for what purposes. For the content of messages and attachments processed at the Customer's direction, Quantum9 acts as operator. For registration, billing, security, abuse prevention, support and fulfillment of its own obligations, Quantum9 acts as controller.
8. Security and retention
We adopt technical and administrative measures to protect personal data, such as encryption in transit, access controls and backups. We will retain data for as long as necessary to fulfill legitimate purposes, legal obligations or for legitimate business purposes in accordance with our internal retention policy.
Messages and attachments are associated with the corresponding box and are not automatically deleted when simply canceling the renewal. After termination, data may be kept for the period necessary for support, security, exercise of legal rights and obligations and then deleted or anonymized in accordance with applicable policy.
9. Rights of holders
You have the right to access, correct, port, delete or limit the processing of your data, in addition to opposing processing and revoking consent. To exercise your rights, use the contact form indicated below. We will respond within the applicable legal deadlines.
10. Contact
For questions, requests related to personal data or to exercise your rights, please contact:
- Channel: privacy and personal data form
- Operational base: Florianópolis, SC — remote national service
11. Changes to this policy
We may update this Privacy Policy periodically. We will notify you of material changes by email or by posting a notice on the website. The latest version will always be available on this page with the revision date.