Privacy

Quantolyx is a private system run by its owner for people the owner invites. This page says what it keeps, where that lives, who can see it, and how to have it removed. It is short because the system keeps little.

What we keep

• Access requests — the name, email address and the one line you write on the request form, and when you sent it. Kept until the request is decided and for a short while after, then removed.
• Accounts — an email address, a password stored as a salted hash (never the password itself), when you last signed in, and whether access has been revoked.
• What signed-in people put in — the content of a workspace belongs to the workspace and is kept until its members remove it or the workspace is deleted.
• A record of actions — the system writes what it did, when, and on whose behalf, to a log that cannot be edited. Entries are pruned after a retention period the owner sets.

Cookies

One cookie: the session that keeps you signed in, set only after you sign in and cleared when you sign out. The sign-in form runs a bot check by Cloudflare Turnstile, which may set its own short-lived cookie for that purpose. Nothing else. There is no advertising, no tracking pixel and no third-party analytics on this site.

Where it lives

The application and its files run on Cloudflare; the database is hosted by Neon. Both hold the data on our behalf and under their own security terms. Stored credentials and keys are encrypted at rest with a key that is not kept with the data.

When a workspace chooses to use an AI model provider with its own key, the content that workspace submits is sent to that provider under that provider’s terms, and to no one else. Which provider, if any, is the workspace’s choice.

Who can see it

The members of a workspace see that workspace. The owner can see every workspace, the access requests and the record of actions. We do not sell, share or trade any of it, and we disclose it only when the law requires.

Removal

Ask through the request form from the address on your account, or ask the owner directly if you know them. Deleting a workspace removes its content and the members’ access to it; the record of actions keeps the fact that things happened, not their content.

Changes

This page may change; the date above says when.