Privacy Policy

This policy explains what personal information Quanto ("we") collects when you use the Quanto website and app, why we collect it, who processes it for us, how long we keep it and what you can do about it.

1. What we collect

• Account details: your name, email address and password. Passwords are stored by our authentication provider in hashed form; we never see them.
• Business data you enter: business name and type, locations, products, stock quantities, costs and count history, including who made each count.
• Photos: the photos you take or upload for counting. Before storing a photo we remove its metadata, including GPS location.
• Billing: plan, subscription status and invoices. Card details are collected and stored by Stripe, not by us.
• Contact form: name, email, business name and message.
• Technical data: anonymous page view statistics (no cookies, no cross-site tracking) and security logs. To limit abuse we keep a one-way hash of IP addresses for up to one hour; we do not store raw IP addresses in our database.

2. Why we use it

• To provide the service: count photos, keep your stock and history, let your team work together.
• To bill paid plans and send account emails (welcome, trial ending, payment receipts and failures, team invites).
• To answer messages you send us.
• To keep the service secure and to estimate and control our AI costs.

We do not sell your personal information and we do not share it for advertising.

3. How photo counting works

When you count a photo, it is sent to Anthropic, the AI provider that reads the image and returns the products and quantities. The photo is sent only for that purpose, together with the names of your existing products so they can be matched. Under Anthropic's commercial terms, data sent through its API is not used to train its models. Anthropic may keep API data for a limited period for safety and abuse monitoring, as described in its own privacy documentation.

We keep count photos in private storage for 90 days so you can review them in your count history, and then delete them automatically. The counts themselves (numbers, product names, who counted) stay until you delete them.

4. Service providers

• Supabase: database, authentication and photo storage.
• Anthropic: AI processing of photos for counting.
• Stripe: payments and subscriptions.
• Resend: sending account emails.
• Vercel: hosting and cookieless page view statistics.

These providers process data on our behalf and under their own security and privacy commitments. Data is processed in the United States.

5. How long we keep data

• Count photos: 90 days.
• Account and business data: while your account exists. If you delete your account, it is deleted within 30 days, including backups.
• Billing records: as long as tax law requires (typically up to 7 years).
• Contact messages: up to 24 months.

6. Your choices and rights

• Export: download your stock and count history to Excel or CSV in Settings.
• Delete: account owners can delete all business data, or the whole account, in Settings. Team members can leave a team.
• Access and correction: you can see and edit your data in the app, or ask us at mikemunnl@icloud.com.

California residents (CCPA/CPRA): you have the right to know what personal information we collect, to delete it, to correct it and to opt out of its sale or sharing. We do not sell or share personal information. We will not discriminate against you for using these rights. Requests: mikemunnl@icloud.com.

Users in Brazil (LGPD): we process your data to perform our contract with you and, for security and abuse prevention, on the basis of legitimate interest. You may request confirmation, access, correction, anonymization, portability, deletion and information about sharing, and may withdraw consent where consent is the basis. Requests: mikemunnl@icloud.com.

7. Security

Data is encrypted in transit. Each business can only access its own data, which is enforced in the database. Photos are stored in private storage and shown only through short-lived links. No system is perfectly secure; if we learn of a breach that affects you, we will notify you as the law requires.

8. Children

The service is for businesses and is not directed to anyone under 16.

9. Changes

If we make material changes to this policy, we will tell account owners by email before they take effect.

10. Contact

Quanto. Email: mikemunnl@icloud.com.