Privacy policy
How Quantinia SRL processes your personal data in the QuantiCoder portal, under the GDPR. Version 2026-10-30.1.
Who is responsible
The controller is Quantinia SRL, CUI 54951080, [registered office address], Craiova, Romania. For anything about your data, write to [contact email].
What we process and why
Your account: email address and password (stored only as a scrypt hash). Your projects: specification, documents, answers, the chat with the CEO and the code built. Payments: amounts and Stripe references; your card number stays with Stripe. Technical data: IP address in the server logs, and cookies.
We use them to build and deliver your project and to bill it (contract, GDPR art. 6(1)(b)), to issue invoices and keep accounting records (legal obligation, art. 6(1)(c)), and to keep the service secure (legitimate interest, art. 6(1)(f)).
If you speak to the CEO, your voice is turned into text on our own servers; the recording is used only for that, and the text is kept with the chat.
The estimate is calculated automatically, but it binds you only after you approve it.
Who else receives data
Only what each service needs for its task.
| Service | What for | Where |
|---|---|---|
| Anthropic (Claude) | Clarification questions, the estimate and the CEO chat, on the Standard and Dedicated plans only: your specification, documents and messages. Never on the Private plan. | USA |
| DeepSeek | Building the code on the Standard plan: your specification and the code. | China |
| RunPod | The servers that build your project on every plan (with a GPU on Dedicated and Private): your specification and the code. | EU; USA for clients in the US and Canada |
| Stripe | Card payments and refunds. | EU and USA |
| [invoicing provider] | Invoices, sent to RO e-Factura (ANAF). | Romania |
| [hosting provider and country] | The server that runs the portal. | |
| Google Fonts | The font of these pages, loaded from Google's servers: your IP address. | USA |
| Telegram | Alerts to our operator: project numbers and technical status, never your documents. | Outside the EU |
Data outside the EU
Anthropic, RunPod and Stripe are US companies: transfers to them rely on the EU-US Data Privacy Framework where the provider is certified, otherwise on the European Commission's standard contractual clauses. DeepSeek (China) receives only the specification and the code, never your account or payment data; the terms ask you to keep personal data out of them.
Every plan builds on a RunPod server chosen by the billing country of your account: in the EU for clients in Europe and the rest of the world, and in the US for clients in the US and Canada. On Dedicated and Private the AI model runs on that server's GPU, so the data stays in the EU, or in the US; on Standard the specification and the code also go to DeepSeek's API. The Private plan uses no outside AI service at all: no Claude, and the questions come from the factory itself, on your project's GPU.
How long we keep it
Uploaded documents: deleted when you delete them, or when the project is settled.
Specification, conversations, project history and the code: kept while your account exists, so you can see and download your projects. Ask us and we delete them.
Payments and invoices: kept for as long as Romanian accounting law requires. Server logs: [log retention in days] days.
Cookies: the session (12 hours), login form protection (1 hour), your language (1 year) and short notices (1 minute). They are all needed for the portal to work: no analytics and no advertising cookies.
Your rights
You can ask for access to your data, its correction or deletion, a restriction of its use, a copy in a portable format, and you can object to its use. Write to [contact email]; we answer within one month.
You can also complain to ANSPDCP, the Romanian data protection authority. dataprotection.ro
Passwords are stored only as hashes, documents are kept per account with restricted access, and every connection uses HTTPS. Terms of service