GDPR (EU + UK)

Last updated 2026-04-22. Applies to Quantum AI WebApps Digital LLC (QuantumRepair) as processor + controller.

Your roles + ours

When a shop uses QuantumRepair to serve its customers, the shop is the controller and QuantumRepair is the processor. We act only on the shop’s written instructions (our software is the instructions). For QuantumRepair’s own data about shop owners (billing, login info), we’re the controller.

Your rights as a QuantumRepair customer

  • Access — request a copy of your account data. Self-service export in Settings; email privacy@quantumrepair.app for anything else.
  • Rectification — most fields are editable in-app; anything else, email us.
  • Erasure — delete your account anytime. Audit + financial records retained per law (typically 7 years tax), the rest deleted within 30 days.
  • Restriction — if you’re disputing something, we’ll freeze processing.
  • Portability — data export in structured JSON + CSV.
  • Object — particularly to marketing. One-tap unsubscribe; or write to us.
  • No automated decisions — we don’t make material account decisions purely by algorithm.

Lawful basis

  • Contract (paying customers).
  • Legitimate interest (fraud prevention, product improvement, security monitoring).
  • Consent (marketing emails, non-essential cookies).
  • Legal obligation (tax records, data-breach notification, sanctions checks).

Data transfers

Some of our subprocessors host data outside the EU/UK (see the Subprocessors page). We rely on Standard Contractual Clauses (SCCs) or adequacy decisions where available, and on supplementary measures (encryption at rest + in transit, access controls, regular review) to meet the Schrems II bar.

Representatives

For the EU, our Article 27 representative is EuroGDPR Ltd., Rue de la Loi 42, 1040 Brussels, Belgium — reach them at eu-rep@quantumrepair.app.

Complain

Unhappy with how we’ve handled your data? Talk to us first at privacy@quantumrepair.app — we aim to resolve in 30 days. You can also complain to:

  • UK: Information Commissioner’s Office (ICO).
  • Ireland: Data Protection Commission (DPC).
  • Germany: your state DPA.
  • Other EU: your country’s data protection authority.