Privacy Policy

We collect information in three ways: information you or your organization provide directly, information processed on behalf of our customers (tenants) as part of operating the Service, and information collected automatically when the Service is used.

Account and profile data. When a workspace is created or you are invited to one, we collect information such as your name, email address, phone number, job title or role, authentication credentials, and workspace settings.

Tenant business records. Tenants use the Service to manage their business, which includes records they create and store in their workspace: leads, contacts, deals, projects, crews, schedules, estimates, invoices, and related notes. These records frequently include personal information about the tenant's own customers and prospects (for example names, addresses, phone numbers, and email addresses). We process this information on the tenant's behalf and under the tenant's instructions.

Communications content. When a tenant sends or receives email or SMS messages through the platform, we process the content of those messages, recipient and sender details, and delivery metadata so we can deliver, thread, and display the communications inside the workspace.

Uploaded documents. Tenants may upload documents to the Service (for example contracts, specification books, estimates, photos, and project files). We store these documents and, where the tenant uses document-processing features, analyze them as described in Section 3.

Calendar data. If a tenant uses scheduling features or connects an external calendar, we process event titles, times, attendees, and related details needed to display and manage calendar entries.

Usage and log data. We automatically collect technical information when the Service is accessed, including IP address, browser and device type, pages and features used, timestamps, and diagnostic logs. We use this data for security, debugging, and improving the Service.

Cookies and similar technologies. We use cookies and similar technologies as described in Section 7.

We use the information described above to:

• Provide and operate the Service — creating and maintaining workspaces, storing and displaying tenant records, powering search and reporting, and keeping the platform available and performant.
• Deliver communications — sending and receiving the email and SMS messages tenants compose through the platform and reporting delivery status.
• Process documents with AI assistance — extracting structured data from uploaded documents when a tenant uses those features, as described in Section 3.
• Provide support — responding to questions, troubleshooting issues, and communicating with tenant administrators about the Service.
• Secure the Service — authenticating users, preventing fraud and abuse, monitoring for unauthorized access, and maintaining audit logs.
• Improve the Service — understanding how features are used in aggregate so we can fix problems and prioritize improvements.
• Meet legal obligations — complying with applicable law, lawful requests, and enforceable governmental demands.

We do not use tenant business records, communications content, or connected-account data to build advertising profiles, and we do not sell personal information.

The Service includes features that use artificial intelligence to help tenants work faster — for example, extracting structured data (such as line items, measurements, project details, or contact information) from uploaded documents.

When a tenant uses these features, the relevant uploaded documents (or portions of them) may be processed by third-party AI model providers acting as our service providers. These providers process the content solely to return results to the Service (for example, extracted fields and structured summaries) and are contractually restricted from using it for other purposes.

AI-generated outputs are assistive. They may contain errors, and tenants should review extracted data before relying on it for business decisions. See our Terms of Service for the related disclaimer.

We do not sell personal information. We share information only as needed to operate the Service, with the following categories of recipients:

• Hosting and infrastructure providers that store and serve the Service and its data.
• Email and SMS delivery providers (for example, Twilio) that transmit the messages tenants send through the platform.
• Microsoft, when a tenant connects a Microsoft 365 mailbox or calendar, to the extent required to read and send mail and manage calendar entries on the connected account (see Section 6).
• Google, when a tenant connects a Gmail mailbox or Google Calendar, to the extent required to provide those features (see Section 5).
• AI model providers that process uploaded documents for the extraction features described in Section 3.
• Professional advisers and authorities where required by law, to protect our rights or the rights of others, or in connection with a corporate transaction (such as a merger or acquisition), in which case this Policy will continue to apply to the transferred information.

Each service provider is bound by contractual obligations to process information only on our instructions and to protect it appropriately. A current list of subprocessors is available on request at info@quantisstratgroup.com.

Quantis StratGroup's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In particular, when a user connects a Gmail mailbox or Google Calendar to the Service:

• We access Gmail and Google Calendar data only to provide the user-facing mailbox and calendar features the user has requested — for example, displaying messages in the workspace inbox, sending email the user composes, and showing or creating calendar events.
• We never use Google user data for advertising, and we never sell it.
• We do not transfer Google user data to third parties except as necessary to provide or improve these user-facing features, to comply with applicable law, or as part of a merger or acquisition with prior notice to users.
• Human access to Google user data is not permitted, except with the user's affirmative agreement for specific data, where necessary for security purposes (such as investigating abuse), to comply with applicable law, or for our internal operations where the data has been aggregated and anonymized — the narrow exceptions permitted by the policy.
• We do not use Google user data to develop, improve, or train generalized artificial intelligence or machine-learning models.

OAuth tokens for connected Google accounts are stored encrypted. Users can disconnect a Google account at any time from the workspace settings, which stops further access; users can also revoke our access from their Google Account permissions page.

When a tenant connects a Microsoft 365 mailbox or calendar, we access Microsoft account data under the permissions granted during the Microsoft sign-in flow and any consent given by the user's organization (for example, admin consent granted by the tenant's Microsoft 365 administrator). We use that access only to provide the mailbox and calendar features the user has requested.

OAuth tokens for connected Microsoft accounts are stored encrypted. Users or their administrators can disconnect a Microsoft account at any time from the workspace settings, and can additionally revoke the application's access from the Microsoft 365 admin center or their Microsoft account settings. Disconnecting or revoking access stops further access to the connected account.

We use cookies and similar technologies for the following purposes:

• Strictly necessary — keeping you signed in, securing sessions (including protection against cross-site request forgery), and remembering essential preferences.
• Functional and analytics — understanding how the Service and our website are used so we can improve them.

Most browsers let you control cookies through their settings. Blocking strictly necessary cookies may prevent the Service from working correctly.

We retain personal information for as long as needed to provide the Service to the relevant tenant, and afterwards as needed to comply with legal obligations, resolve disputes, and enforce agreements.

• Tenant business records, communications, documents, and calendar data are retained while the tenant's subscription is active and are deleted or anonymized within a reasonable period after account closure, except where retention is required by law.
• Tenants can delete individual records (contacts, deals, documents, and similar) from within the Service, and tenant administrators may request workspace deletion by contacting us.
• Backup copies are retained on a rolling schedule and are overwritten in the ordinary course of operations.
• Usage and log data is retained for limited periods consistent with security and operational needs.

We use administrative, technical, and physical safeguards designed to protect information against unauthorized access, loss, misuse, and alteration, including:

• Encryption of data in transit using TLS and encryption of sensitive data at rest, including OAuth tokens for connected accounts.
• Logical tenant isolation, so each tenant's workspace data is segregated from other tenants.
• Role-based access controls within workspaces and least-privilege access for our personnel.
• Authentication controls, session protections, and audit logging.
• Regular patching, monitoring, and review of our infrastructure and dependencies.

No method of transmission or storage is completely secure. If we become aware of a breach affecting personal information, we will notify affected tenants and authorities as required by applicable law.

Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your personal information, and to object to or restrict certain processing.

If you are a user of a tenant's workspace (for example, an employee of one of our customers, or a customer of one of our customers whose information is stored in a workspace), we process your information on behalf of that tenant. Please direct requests to the tenant — typically the business you interact with — and we will support the tenant in fulfilling them. Where we receive such a request directly, we will route it to the relevant tenant administrator unless the law requires us to handle it ourselves.

If we hold information about you directly (for example, as a tenant administrator or website visitor), you can exercise your rights by emailing info@quantisstratgroup.com. We will verify your request and respond within the time required by applicable law. We will not discriminate against you for exercising your rights.

The Service is a business application and is not directed at children. We do not knowingly collect personal information from anyone under 16 years of age. If you believe a child under 16 has provided personal information to us, contact us at info@quantisstratgroup.com and we will delete it.

We may update this Privacy Policy from time to time. If we make material changes, we will notify tenant administrators (for example, by email or an in-app notice) before the changes take effect and update the effective date above. Your continued use of the Service after changes take effect constitutes acceptance of the updated Policy.

If you have questions about this Privacy Policy or our data practices, contact us at:

• Quantis StratGroup, LLC. (Quantis StratGroup, LLC)
• 1501 Magoffin Ave, El Paso, Texas 79901
• Email: info@quantisstratgroup.com