Legal
Privacy Policy
How eQuantic Tech collects, uses, stores and protects personal data across our products, platforms and consulting engagements.
EFFECTIVE1 January 2026
VERSION2.1
ENTITYeQuantic Tech, Lda · Porto, Portugal
01
Scope and controller
This policy covers every service operated by eQuantic Tech, Lda — our websites, the eQuantic Space, Finance, People, OS Cleaner and Pass products, our open-source distribution channels, and data processed during consulting engagements.
eQuantic Tech, Lda is the data controller for account, marketing and support data. Where we process data on behalf of a client — payroll records in eQuantic People, project data in eQuantic Space — we act as processor under a Data Processing Agreement, and the client remains controller.
Our products are governed by the GDPR (EU 2016/679) and, for Brazilian operations, the LGPD (Lei 13.709/2018). Where the two differ, we apply the stricter standard.
02
Data we collect
CATEGORY
WHAT IT INCLUDES
Account data
Name, work email, company, role, authentication identifiers, MFA settings.
Usage data
Pages viewed, features used, build and deploy events, error traces, approximate location derived from IP.
Content data
Repositories, pipelines, documents, financial records and HR records you upload to our platforms.
Billing data
Company address, VAT number, invoices. Card details are held by our payment processor — never by us.
Support data
Tickets, email threads, call notes and any diagnostics you choose to attach.
Recruitment data
CVs, assessments and interview notes submitted through our careers pages or eQuantic People.
We do not collect special-category data (health, biometrics, political opinions, religious beliefs) unless a client explicitly configures it inside eQuantic People for a lawful HR purpose, under their own controller responsibility.
eQuantic Pass is zero-knowledge by design: vault contents are encrypted on your device and we hold ciphertext only. We cannot read your credentials, and we cannot recover them if you lose your master key.
03
Why we process it
PURPOSE
LAWFUL BASIS
Providing the service you signed up for
Performance of a contract (Art. 6(1)(b))
Security, fraud prevention, abuse detection
Legitimate interest (Art. 6(1)(f))
Product analytics and reliability engineering
Legitimate interest, with opt-out available
Marketing emails and event invitations
Consent (Art. 6(1)(a)), withdrawable at any time
Payroll, tax and statutory filings (eQuantic People)
Legal obligation (Art. 6(1)(c))
Accounting and invoicing records
Legal obligation — retained per fiscal law
eQuantic People produces AI-generated match scores for recruitment. These scores are decision support, never the decision itself: every match ships with a written explanation, and a human makes the hiring call. You may request human review of any score that affects you.
04
Who we share it with
We do not sell personal data. We share it only with sub-processors who help us run the service, each bound by a written agreement and assessed before onboarding.
Where a sub-processor sits outside the EEA, transfers rely on Standard Contractual Clauses plus supplementary technical measures. The current sub-processor list is available on request and clients are notified 30 days before any addition.
05
How long we keep it
DATA
RETENTION
Active account data
For the life of the account, then 90 days
Platform content
Deleted within 30 days of account closure, unless legal hold applies
Backups
Rolling 35-day window, then irreversibly destroyed
Invoices and accounting records
10 years (Portuguese fiscal law)
Payroll records (eQuantic People)
As mandated per jurisdiction — typically 5 to 10 years
Unsuccessful job applications
12 months, or immediately on request
Security logs
12 months
06
Your rights
Under the GDPR and LGPD you may exercise the following rights at any time, free of charge:
Write to privacy@equantic.tech. We respond within 30 days. If you are unsatisfied you may complain to the CNPD (Portugal), the ANPD (Brazil), or your local supervisory authority.
07
How we protect it
Full detail lives in our Security Policy, including our incident-response commitments and responsible-disclosure programme.
08
Changes to this policy
Material changes are announced by email to account holders at least 30 days before they take effect, and the version number at the top of this page is incremented. Minor clarifications may be published without notice, but the effective date always reflects the latest revision.
Ready to ship something real?
Book a 30-minute discovery call. We'll tell you within the hour whether we're the right partner — or who is.
Ready to ship something real?
Book a 30-minute discovery call. We'll tell you within the hour whether we're the right partner — or who is.
© 2026 eQuantic Tech. All rights reserved.