What we collect, and why.

01 Who we are

Quantivo AI, LLC is a Delaware-registered company operating two practices: engineering, which builds production AI systems, and creative, which produces performance advertising. This policy covers the quantivo.ai website and both practices.

For anything in this document, write to hello@quantivo.ai.

02 What we collect

We collect three kinds of information, and no more than we need for each.

• —Information you send us. When you use a contact form, book a call, or email us, we receive what you choose to provide — typically your name, email address, company, and a description of what you need.
• —Information about your visit. Standard analytics: pages viewed, approximate location derived from IP, device and browser type, and referral source. This is aggregate behaviour, not a profile we attach to you personally.
• —Information you provide during an engagement. If we work together, we handle whatever the work requires — source code, documents, product assets, brand materials. That material is yours and is governed by our agreement with you, not by this policy alone.

We do not buy personal data about you, and we do not build advertising profiles.

03 Why we collect it

• —To reply to you and to deliver work you have asked for.
• —To operate and improve the website.
• —To send business correspondence relating to an enquiry or engagement.
• —To meet legal, accounting and tax obligations.

Where we send outbound business email, we do so on the basis of legitimate interest in reaching relevant businesses, and every message carries a working opt-out that we honour immediately and permanently.

04 Services we use

We use a small number of third parties to run the business. Each receives only what it needs to do its job.

• —Vercel — website hosting and delivery.
• —Google Analytics — website usage measurement.
• —Slack — where contact-form submissions and enquiry notifications are delivered internally.
• —Calendly — scheduling, when you book a call.
• —Stripe — payment processing. Card details go directly to Stripe; we never see or store them.
• —Instantly — outbound business email delivery and reply handling.
• —Google Workspace — our email and documents.
• —AI model providers — used to deliver engineering and creative work. See the next section.

05 AI processing, stated plainly

Because of what we build, this deserves its own section rather than a line in a list.

Delivering engineering and creative work involves sending material to third-party AI model providers. Where an engagement involves your data, we agree in the contract what may be sent, to which providers, and under what terms — before any of it happens.

We do not submit client data to AI providers for the purpose of training their models, and we select providers and configurations accordingly. Where you require a specific provider, a specific region, or a zero-retention arrangement, tell us during scoping and we will design for it or tell you honestly that we cannot.

Generated creative work is disclosed as AI-generated. Our full position on synthetic media, consent and claim substantiation is published separately in the AI Content Disclosure policy.

06 Who we share it with

We do not sell your information, and we do not trade or rent it. We share it only in these situations:

• —With the service providers listed above, to the extent needed to operate.
• —Where the law requires it, or to respond to a lawful request.
• —To protect our rights, property or safety, or those of others.
• —In connection with a sale or reorganisation of the business, in which case any acquirer inherits these commitments.

07 How long we keep it

• —Enquiries that do not become engagements: up to 24 months, then deleted.
• —Engagement records and correspondence: for the duration of the engagement and as long afterwards as tax, accounting and legal obligations require.
• —Project material: per the agreement covering that engagement, including any deletion commitments in it.
• —Analytics: retained per the analytics provider's own retention settings.
• —Opt-out records: kept indefinitely, because deleting them is how people get contacted again by mistake.

08 Your rights

Depending on where you live, you may have some or all of the following rights. We will honour them regardless of whether your jurisdiction compels us to.

• —Ask what we hold about you and receive a copy.
• —Correct anything inaccurate.
• —Ask us to delete it.
• —Object to a particular use, or withdraw consent you previously gave.
• —Ask us to stop contacting you — always, immediately, without needing a reason.

Email hello@quantivo.ai. We aim to respond within 30 days and will tell you if something is going to take longer.

09 Security

We use encrypted transport, access controls, and reputable infrastructure providers, and we keep the number of systems holding your information deliberately small. Credentials are held in managed secret storage rather than in code.

No system is perfectly secure, and any policy claiming otherwise is not being straight with you. If a breach affects your information we will tell you and tell you what we are doing about it.

10 International transfers

We are a US company and our providers are largely US-based, so information may be processed in the United States and other countries. Where data protection law requires a transfer mechanism, we rely on the standard contractual protections offered by those providers.

11 Children

Our services are for businesses. We do not knowingly collect information from anyone under 18. If we learn we have, we delete it.

12 Changes

If we change this policy we update the date at the top of the page. Where a change materially affects how we handle information we already hold, we will contact affected clients directly rather than relying on you to notice.