Privacy Policy

Last updated: March 17, 2026

1. Scope

This policy applies to personal data processed in connection with Quantum Network Monitor services. It includes account data, monitoring/scan configuration, operational logs, and support interactions.

2. Data We Collect

• Account and identity data: name, email, authentication identifiers, organization/account metadata, subscription plan and billing references.
• Target and configuration data: monitored hostnames, domains, IP addresses, endpoint types, monitoring location, alert recipients, schedules, and selected scan/test parameters.
• Operational and telemetry data: monitoring results, status events, command/run metadata, scan outputs, agent telemetry, and audit events.
• LLM interaction data: prompts, model responses, tool invocation metadata, and associated context needed for security monitoring and abuse investigation.
• Support and communication data: support tickets, emails, chat messages, and attached artifacts.
• Device and usage data: browser/device information, service access logs, approximate location from IP, cookie consent state, and analytics events where enabled.

3. How We Use Personal Data

• Provide and operate monitoring, diagnostics, and account services.
• Authenticate users and agents, secure accounts, and prevent abuse.
• Process requested tests/workflows and present results.
• Maintain audit trails, including LLM interaction logs, and investigate misuse.
• Provide customer support and service notices.
• Process payments and subscriptions.
• Improve reliability, safety, and product quality.
• Comply with legal obligations and enforce Terms.

4. Legal Bases (Where Applicable)

• Performance of a contract.
• Legitimate interests (service security, abuse prevention, diagnostics, and product improvement).
• Consent (for optional cookies/analytics where required).
• Compliance with legal obligations.

5. Data Sharing and Processors

We may share data with service providers that support hosting, infrastructure, authentication, payment processing, communications, analytics, and customer support, under contractual safeguards and confidentiality obligations.

We may disclose data to regulators, law enforcement, courts, or other parties when required by law, to protect rights, or to investigate fraud, abuse, or security incidents.

6. International Data Transfers

Data may be processed outside your country of residence. Where required by applicable law, we apply appropriate transfer safeguards.

7. Data Retention

• Account and billing data: retained for account lifecycle and legal/accounting requirements.
• Monitoring and scan records: retained based on product settings, operational need, and security/abuse controls.
• Audit/security logs: retained as needed to investigate incidents and enforce policy. This includes logs of LLM interactions used in the service.
• We may retain data longer where required by law or to resolve disputes and enforce agreements.

8. Your Rights

Depending on your jurisdiction, you may have rights to access, correct, delete, restrict, object to processing, and request portability of your personal data.

To submit a data subject request, email [email protected] with the subject "Data Subject Request".

9. Security Measures

We use administrative, technical, and organizational safeguards designed to protect personal data. No storage or transmission method is guaranteed to be completely secure.

10. Children

The service is not intended for individuals under 18, and we do not knowingly collect personal data from children.

11. Regional Disclosures

We process personal data globally and provide rights handling in line with applicable data-protection requirements, including GDPR/UK GDPR where applicable and relevant U.S. state privacy rights where applicable.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date.

13. Contact

Privacy questions: [email protected]