1. Who this covers
This policy applies to Agent-Ready Card (“ARC”, the “Service”), operated by QuantumMind AI LLC. It covers people who visit the site, create an account, publish a card, or subscribe.
2. What we collect
We collect only what we need to run the Service:
- Account & authentication data. When you sign in, our authentication provider (Supabase Auth) creates a user record keyed to your email address and an authentication identifier. If you sign in with Google, we receive your email and basic Google account identifier from that sign-in. We use email magic links and Google OAuth; we do not store passwords.
- Business-profile data you choose to publish.This is the content you enter to build your card — your business name, services, service area, hours, public pricing notes, public policies, and contact methods you add. You decide what goes in and what becomes public. When you publish, a public snapshot of that content is served at your card’s URL and through machine-readable endpoints. ARC is built for public business facts; please do not enter sensitive personal information you do not want published.
- Subscription & billing data. When you subscribe, Stripe processes your payment. ARC does not receive or store your full card number, CVC, or other sensitive card data. We do store, in our database, identifiers and status needed to run your subscription: your Stripe customer ID, the email associated with that Stripe customer, your Stripe subscription ID, the plan tier, the subscription status, and billing period dates.
- Operational records. We keep minimal records of subscription-related webhook events from Stripe and internal audit/event logs tied to your account, so we can reconcile billing and operate the Service reliably. By default these store redacted/minimal details rather than full payloads.
- Session & technical data. We use a session cookie set by our authentication provider to keep you signed in, plus standard request/log data (such as IP address and browser type) generated when you use the site and by our hosting provider.
The free agent-readiness scan is designed to evaluate public business facts and does not require sensitive customer data.
3. How we use it
- to create and secure your account and keep you signed in;
- to build, host, and serve your agent-ready card and its machine-readable endpoints;
- to process and manage your subscription, billing, and entitlements (via Stripe);
- to operate, maintain, debug, and improve the Service and prevent abuse;
- to communicate with you about your account, billing, and the Service;
- to comply with legal obligations.
4. We do not sell your personal data
QuantumMind AI does not sell your personal data, and we do not share it for cross-context behavioral advertising. We do not use your account email or billing data for advertising. The only data made public is the business-profile content you choose to publish to your card.
5. Where your data is stored
Your account, business-profile, card, and subscription records are stored in a managed PostgreSQL database hosted on Supabase. Access to your private rows is restricted at the database level (row-level security), so that authenticated owners can read and edit only their own data, while only the public snapshot you publish is readable by anonymous visitors and agents. The site is hosted on Vercel. Payment data is held by Stripe.
We keep account, profile, billing, and operational records for as long as needed to provide the Service, comply with law, resolve disputes, prevent abuse, and maintain ordinary business records. If you request deletion, we will delete or de-identify data we no longer need to keep, except that public snapshots already indexed or cached by third parties may remain outside our control.
6. Service providers (sub-processors)
We rely on a small set of trusted providers to operate the Service:
- Supabase— authentication and database hosting (account, profile, card, and subscription records).
- Stripe— payment processing and subscription billing. Stripe handles card data under its own privacy and security terms.
- Vercel— application hosting and delivery.
These providers process data on our behalf to deliver the Service and are not permitted to use it for their own unrelated purposes. Each maintains its own privacy policy.
8. Your rights and choices
Depending on where you live, you may have rights to access, correct, delete, or obtain a copy of your personal data, and to limit certain processing. You can edit or unpublish your card content yourself from your workspace, and you can cancel your subscription at any time through the Stripe billing portal.
To request access to, or deletion of, your account data, email us at QMAI@quantummindaillc.com. We will respond as required by applicable law. We will not discriminate against you for exercising these rights.
We may need to verify your identity or authority before acting on a request. If we deny a request where an appeal right applies, you may reply to the denial notice and ask us to review it again.
9. Security
We use technical and organizational measures to protect your data, including database row-level security, restricted server-only access to sensitive operations, and reliance on PCI-compliant Stripe for card handling. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security.
10. Children
ARC is a business tool and is not directed to children. We do not knowingly collect personal data from anyone under 13 (or the minimum age in your jurisdiction).
11. Changes to this policy
We may update this policy. When we make material changes, we will update the “Last updated” date and, where appropriate or legally required, provide additional notice.
12. Contact us
Questions or privacy requests: QuantumMind AI LLC, QMAI@quantummindaillc.com.
This document is written in plain language so customers can understand it. It is not legal advice to you. Questions about this page can be sent to QMAI@quantummindaillc.com.