Privacy Policy

Last updated: August 1, 2026

Template notice: this page is a starting-point privacy policy for Quantafirm's marketing site and pilot program. It has not been reviewed by an attorney, does not yet reflect a finalized subprocessor list or data-residency commitments, and should be reviewed by qualified legal counsel — especially around jurisdiction-specific requirements (GDPR, CCPA/CPRA, or similar) — before this page is relied on as a binding legal document.

This Privacy Policy explains how Quantafirm ("Quantafirm," "we," "us," or "our") collects, uses, discloses, and protects information in connection with our website and our invoice approval and accounts payable automation platform (together, the "Service").

1. Information we collect

We collect information in the following ways:

Account and contact information you provide when you request a demo, book a call, or sign up for a pilot — such as name, work email, company name, and role.
Invoice and financial workflow data your organization uploads or connects to the Service in order to use it — including invoice documents, vendor details, amounts, approval decisions, and related audit-trail records.
Usage data such as pages visited, features used, browser type, and device information, collected automatically when you interact with our website or the Service.
Communications you send us directly, such as support requests or founder call notes.

2. How we use information

We use the information above to:

Provide, operate, and maintain the Service, including the approval workflow, duplicate detection, and audit trail features described on our product pages;
Respond to inquiries, schedule demos, and manage the pilot program;
Monitor and improve the security, reliability, and performance of the Service;
Communicate with you about updates, security notices, or changes to our terms or this policy;
Comply with legal obligations and enforce our agreements.

We do not sell personal information, and we do not use customer invoice data to train third-party AI models outside of providing the Service to that customer.

3. How information is stored and protected

Consistent with the Security & Compliance section of our website, data submitted to the Service is encrypted in transit (TLS) and at rest, access is scoped by role, and each tenant's data is logically isolated. Certifications such as SOC 2 and additional data-residency options are on our roadmap and are not yet in place — see the Security section on our homepage for current status.

4. Data sharing

We share information only with service providers who help us operate the Service (such as cloud hosting and email delivery providers), under confidentiality obligations consistent with the purposes described in this policy, or when required by law, to protect our rights, or in connection with a merger, acquisition, or sale of assets, with notice to affected customers where practicable.

5. Data retention

We retain account and invoice workflow data for as long as your organization's account is active, and for a reasonable period afterward as needed for audit, legal, or backup purposes, after which it is deleted or anonymized in line with applicable record- keeping requirements.

6. Your rights

Depending on your location, you may have the right to access, correct, export, or request deletion of personal information we hold about you, or to object to or restrict certain processing. To make a request, contact us using the details below.

7. Cookies

Our marketing website may use essential cookies required for the site to function and, where applicable, analytics cookies to understand aggregate usage. We do not currently use third-party advertising cookies.

8. Children's privacy

The Service is intended for business use by finance professionals and is not directed to, and should not be used by, individuals under 18.

9. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above, and, where appropriate, communicated directly to active customers.

10. Contact us

Questions about this Privacy Policy or your data can be sent to [email protected].