Privacy Policy

QUONtech LLC (“QUONtech,” “we,” “us,” or “our”) respects your privacy. This Privacy Policy explains how we collect, use, share, and protect personal information across our websites and online properties, including quon.tech, quonlab.com and portal.quonlab.com, forcisos.com, and the 404 Human Found properties (together, the “Sites”).

In this Policy, “personal information” means information that identifies or can reasonably be linked to an individual. “Controller” means the party that decides why and how personal information is processed. “Service Provider” or “Processor” means a party that processes personal information only on behalf of, and under the instructions of, a Controller.

1. Our two roles

QUONtech acts in two different roles depending on the situation.

As a Controller, we decide how personal information is handled when you visit the Sites, request information, sign up for a demo, contact us, or interact with us as a prospect, client contact, supplier, or partner.

As a Service Provider, we process data on behalf of our clients. When an organization uses the QUONlab portal, the data that organization places into its tenant (“Client Data”) is processed by QUONtech only to deliver the agreed services, under that organization's instructions and the separate client agreement. If you are an individual whose data appears in a client's QUONlab tenant, that client controls that data, and you should contact them to exercise your rights over it. Section 7 explains this role in more detail.

2. Information we collect

Directly from you. When you fill out a form, request a demo, download material, request access to a demonstration, subscribe to updates, or contact us, we collect information such as your name, email address, phone number, company, job title, and the content of your message. When you create a QUONlab account, our authentication provider collects your sign-in credentials.

Automatically. When you use the Sites, we and our service providers may automatically collect technical information such as IP address, device and browser type, pages viewed, referring pages, and usage activity, using cookies and similar technologies. We may also record whether you opened or clicked our emails.

From the Skippy assistant and AI features. If you interact with our chat assistant or other AI features, we may collect the messages and transcripts of that interaction. Do not enter sensitive personal information or credentials into these features.

From other sources. We may receive business contact and role information from partners, referrals, public sources, and data providers, and combine it with what we already hold to understand who may be interested in our services.

From or on behalf of our clients. Where a client uses QUONlab, that client may submit personal information about its own people into its tenant. We process that Client Data only to provide the service, as described in Section 7.

3. How we use personal information (as Controller)

We use personal information we control to:

• respond to your requests and provide information you ask for;
• set up and manage accounts and demo access;
• operate, secure, maintain, and improve the Sites and our services;
• communicate with you about our services, events, and updates, with an opt-out in every marketing email;
• understand how the Sites are used through analytics;
• manage our relationships with clients, prospects, suppliers, and partners;
• prevent fraud and abuse and protect the security of our systems;
• comply with legal obligations and enforce our Terms.

Where required by law, we rely on a lawful basis for each use, which may include your consent, performance of a contract, our legitimate interests, or compliance with a legal obligation.

4. How we share personal information

We do not sell personal information. We share it only as follows:

Service providers (subprocessors). We use trusted third parties to run our business and Sites. They process information only on our instructions and under contract. They currently include:

• Clerk, for account authentication and identity;
• Supabase, for database and application hosting of the QUONlab portal and our CRM;
• Google Firebase and Google Cloud, for website hosting and infrastructure;
• Voiceflow, for the Skippy chat assistant;
• analytics and email delivery providers, for usage measurement and communications;
• a payment processor (such as Stripe), if and when paid online services are enabled.

Affiliates and partners. Where relevant to serving you, and where you request it or it is appropriate for your needs, we may share business contact information with a delivery or solution partner. Partners are contractually required to protect the information and use it only for the intended purpose.

Legal and protection. We may disclose information where required by law, subpoena, or legal process, or where we reasonably believe it is necessary to protect the rights, property, or safety of QUONtech, our clients, or others.

Business transfers. If QUONtech is involved in a merger, acquisition, or sale of assets, personal information may be transferred as part of that transaction, subject to appropriate protections.

5. SMS/Text Messaging (Mobile Opt-In)

When you opt in to receive text messages from QUONtech LLC, we collect your mobile phone number and your consent record. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Information sharing with subprocessors that support the messaging service (for example, our messaging platform provider) is limited to delivering the messages you requested. Text messaging opt-in data and consent are never shared with any third parties for their own marketing.

Message frequency varies based on your account activity and the service notifications you receive. Message and data rates may apply. Reply HELP for help, or STOP to opt out at any time. Opting out of text messages does not affect your ability to use QUONtech services.

6. Cookies, analytics, and your choices

We use cookies and similar technologies to operate the Sites, remember preferences, and measure usage. Some analytics or advertising cookies may involve sharing limited device or activity information with third parties, which may be treated as “sharing” under some US state privacy laws. You can control cookies through your browser settings and, where offered, through a cookie preferences control on the Sites.

We respond to Do Not Track and Global Privacy Control signals where required by applicable law.

7. International visitors and cross-border transfers

QUONtech is based in the United States, and the Sites are operated from the United States. If you access the Sites from outside the United States, your information will be transferred to and processed in the United States, where data protection laws may differ from those in your location. Where required, we use appropriate safeguards for international transfers, such as standard contractual clauses.

8. QUONtech as a Service Provider (QUONlab Client Data)

When a client uses QUONlab, QUONtech processes the Client Data in that client's tenant only to provide the agreed services, on the client's instructions, and under the separate client agreement and any data processing addendum.

The client is the Controller of its Client Data and is responsible for having a lawful basis to provide it and for the accuracy of that data. Tenant data is isolated so that one client's tenant cannot access another's. If you are an individual whose personal information appears in a client's QUONlab tenant and you want to access, correct, or delete it, please contact that client directly. We will support our client in responding to your request as required by our agreement and applicable law.

We may share Client Data with our subprocessors as needed to deliver the service, under contractual protections, and may disclose it where required by law.

9. How we protect information

We use recognized, industry-standard physical, technical, and organizational safeguards appropriate to the sensitivity of the information we process, and we review them regularly. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. Where the law requires us to notify you of a security incident affecting your personal information, we will do so as required.

10. How long we keep information

We keep personal information only as long as needed for the purposes described in this Policy, or as required to meet legal, security, and fraud-prevention obligations, after which we securely delete or de-identify it. Where complete deletion is not technically feasible, we take steps to prevent further use.

11. Your rights

Depending on where you live, you may have rights to access, correct, delete, or port your personal information, to object to or restrict certain processing, and to opt out of certain sharing. You will not be discriminated against for exercising these rights.

For personal information we control, you can make a request by emailing info@quon.tech. We will verify your identity before acting on a request and may ask for additional information to do so. For personal information held in a client's QUONlab tenant, please contact that client, as described in Section 7.

12. Additional information for the EEA, UK, and Switzerland (GDPR)

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, this section applies to you and supplements the rest of this Policy. Where it conflicts with anything above, this section controls for your personal information.

Data Controller

For personal information we collect through the Sites as a Controller, the controller is QUONtech LLC, Rochester, Michigan, USA, info@quon.tech. Where we process Client Data in QUONlab on behalf of a client, that client is the Controller and we act as Processor, as described in Section 7.

Legal bases for processing

We process personal information only where we have a legal basis under Article 6 GDPR:

• Consent — for example, when you subscribe to updates or accept non-essential cookies. You may withdraw consent at any time.
• Performance of a contract — to set up and provide the accounts, demos, and services you request.
• Legitimate interests — to operate, secure, and improve the Sites, to understand usage, and to communicate with prospects and clients, provided those interests are not overridden by your rights and freedoms.
• Legal obligation — to comply with applicable law, respond to lawful requests, and keep required records.

Where processing is based on legitimate interests, you may ask us for more detail about the balancing we have carried out.

Your rights under the GDPR

Subject to the conditions and exceptions in applicable law, you have the right to: request access to your personal information; have inaccurate data corrected; have your data erased; restrict or object to processing; receive your data in a portable, machine-readable format; and, where processing is based on consent, withdraw that consent at any time without affecting processing carried out beforehand. We do not use the Sites to make decisions producing legal or similarly significant effects about you based solely on automated processing.

To exercise any of these rights, email info@quon.tech. We will respond within the timeframe required by law (normally within one month) and may need to verify your identity first. Exercising your rights is free unless a request is manifestly unfounded or excessive.

Right to lodge a complaint

You have the right to lodge a complaint with your local data protection supervisory authority. We would appreciate the chance to address your concern first, so please consider contacting us before you do.

International data transfers

QUONtech is based in the United States, and the Sites and most of our service providers operate in the United States. When you use the Sites, your personal information is transferred to and processed in the United States and potentially other countries whose data protection laws may differ from those where you live.

Where we transfer personal information out of the EEA, UK, or Switzerland, we rely on a lawful transfer mechanism — typically the European Commission's Standard Contractual Clauses (with the UK Addendum or the Swiss equivalent where applicable), together with additional safeguards where needed, or transfer to a provider in a country recognized as providing an adequate level of protection. Our current US-based service providers include Clerk, Supabase, Google (Firebase / Google Cloud), and Voiceflow, as listed in Section 4. You may request a copy of the relevant safeguards by emailing info@quon.tech.

Data retention

We keep personal information only as long as necessary for the purposes described in this Policy and to meet legal, tax, security, and dispute-resolution requirements, after which we delete or anonymize it.

13. Children

The Sites and our services are intended for businesses and for individuals aged 16 and older. They are not directed to children, and we do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us so we can address it.

14. Third-party sites

The Sites may link to third-party websites we do not control. We are not responsible for their content or privacy practices. Please review their privacy policies before sharing information with them.

15. Changes to this Policy

We may update this Policy from time to time. When we make material changes, we will update the Effective Date below and, where appropriate, provide additional notice. Your continued use of the Sites after an update means you accept the revised Policy.

16. Contact us

For questions or requests about this Policy or your personal information:

QUONtech LLC
Rochester, Michigan, USA
info@quon.tech