Privacy Policy

1. Who we are

Quantum9 is the trademark of Quantum9 Tech LTDA, CNPJ 30.323.500/0001-25. We are a software factory that provides development, prototyping, integration and optimization services for digital products. Our goal is to accelerate the creation of value for companies through high-quality technology and design.

2. What data we collect

We only collect the data necessary to provide services and for administrative and commercial purposes:

• Contact details: name, email, telephone, company;
• Information provided in the forms, such as title, subject, message, project context and diagnostic responses;
• For partner program applications: city/state, business name, CNPJ, type of work, relationship segments, professional background, and privacy notice acceptance record.
• Visit source data associated with the submission, such as page, reference and campaign parameters;
• In the newsletter: email, origin of registration, consent, confirmation and cancellation status;
• Login data and credentials where applicable (securely stored);
• For contracts signed through the client portal: an image of the identity document, a selfie, any power of attorney, a truthfulness declaration, the outcome of human review, and technical signature records;
• Payment data when processed for billing (generally via third-party payment gateways);
• Website usage and analytics data (cookies, IP, browsing behavior);
• Technical data related to integrations and APIs, when necessary to deliver the service;
• In Webmail: domain, professional address, alternative email, headers, senders, recipients, message content, attachments, contacts and preferences;
• Identifiers and status of the subscription processed by Mercado Pago; Quantum9 does not store complete card data.

3. What we use your data for

We use the data for the following purposes:

• Provide and improve our services, delivering projects, integrations and support;
• Commercial communication and service through channels informed by the holder, when consented or contracted;
• Reviewing partner program applications and contacting applicants who submit the form and accept the Privacy Policy.
• Sending editorial content to confirmed registrations, with the option to cancel;
• Payment processing and invoicing (where applicable);
• Website improvement and analytics, including conversion optimization and UX;
• Compliance with legal obligations and protection of the rights of Quantum9 and third parties.

4. Legal basis

We process personal data based on the following legal hypotheses: execution of a contract, consent of the holder, compliance with legal obligations and legitimate interest (for example, security and fraud prevention, improvement of services and communication with customers). When we base processing on consent, you may revoke it at any time without prejudice to the legality of previous processing.

5. Cookies and similar technologies

We use essential storage for preferences and security. Optional analytics tools are only loaded after acceptance in the cookie banner. Rejection does not prevent the use of the website's essential pages and forms.

With your permission for analytics, Google Analytics 4 links browser identifiers to stages of business inquiries, such as qualification, follow-up and closing. We do not send names, email addresses, phone numbers or messages to Google Analytics. Your preference lasts up to 180 days and can be reviewed under Cookie preferences in the footer. Withdrawal stops new measurements and subsequent reporting of business stages associated with the previous permission.

Advertising measurement is an additional choice and requires permission for statistics. When accepted, we retain Google Ads click identifiers (gclid, gbraid and wbraid) to associate ads with inquiries and deals. Google receives the authorized measurement signals; we do not enable personalized advertising or send contact details to analytics services. Rejecting this purpose keeps advertising measurement disabled, even when statistics are authorized.

Earlier acceptance of statistics does not authorize advertising measurement. When you revoke advertising measurement, we remove the corresponding local identifiers and request that this authorization no longer be used for future commercial events. Communication with the server requires connectivity; revocation in the browser is immediate. This choice does not automatically erase data already received by providers.

5.1. Forms and newsletter

The data sent in public forms is stored in a restricted environment to allow service, request qualification and contact monitoring, even if there is temporary unavailability in sending the internal notification. Subscription to the newsletter requires explicit consent and confirmation via a link sent to the address provided. The token for this link is stored in hash format only and can be used to unsubscribe.

5.2. Identity verification for contracts

When a person signs a contract in the client portal, we use their photo ID, selfie and, where necessary, power of attorney to verify their identity and authority to represent the company. We record the declaration made before submission, the team's review, the contract version and the technical evidence of the signature to formalize the agreement, protect the process and, if needed, demonstrate how it took place. The camera opens only after the person takes action; the image is sent only when they complete the step.

A person reviews the selfie; we do not use automated facial recognition in this process. Files are kept in private storage, with access restricted to authorized operations. They are retained for as long as needed for contractual purposes, to protect rights and to meet applicable obligations, as described in the security and retention section below. Requests concerning this data can be sent through the privacy contact on this page.

6. Sharing with third parties

We may share data with service providers (e.g. hosting, payment processing, analytics, CRM) when necessary for contractual execution or service provision. We require these partners to process data as per our instructions and in compliance with applicable legislation (including LGPD).

To operate our services, we use authentication, database and storage providers (Supabase), hosting (Vercel), transactional email transport (Resend and configured email providers) and payments (Mercado Pago). These services may process data in other countries, with contractual and technical mechanisms compatible with applicable legislation.

7. Roles in Webmail processing

The client organization decides who can use its boxes and for what purposes. For the content of messages and attachments processed at the Customer's direction, Quantum9 acts as operator. For registration, billing, security, abuse prevention, support and fulfillment of its own obligations, Quantum9 acts as controller.

8. Security and retention

We adopt technical and administrative measures to protect personal data, such as encryption in transit, access controls and backups. We will retain data for as long as necessary to fulfill legitimate purposes, legal obligations or for legitimate business purposes in accordance with our internal retention policy.

Messages and attachments are associated with the corresponding box and are not automatically deleted when simply canceling the renewal. After termination, data may be kept for the period necessary for support, security, exercise of legal rights and obligations and then deleted or anonymized in accordance with applicable policy.

9. Rights of holders

You have the right to access, correct, port, delete or limit the processing of your data, in addition to opposing processing and revoking consent. To exercise your rights, use the contact form indicated below. We will respond within the applicable legal deadlines.

10. Contact

For questions, requests related to personal data or to exercise your rights, please contact:

• Channel: privacy and personal data form
• Operational base: Florianópolis, SC — remote national service

11. Changes to this policy

We may update this Privacy Policy periodically. We will notify you of material changes by email or by posting a notice on the website. The latest version will always be available on this page with the revision date.