Privacy Policy

This policy explains what Quantro Security collects when you visit quantro.security, why we collect it, who we share it with, and how you can control it. It covers this website and the free assessment offered through it. It does not cover the Quantro platform itself when deployed in a customer environment — that is governed by the agreement with the customer.

Questions, or a request about your data: privacy@quantrosecurity.ai.

The short version

• We measure site traffic without cookies by default. Nothing is stored on your device unless you accept cookies.
• If you accept, we use analytics cookies and tools that tell us which companies are looking at us — that is how a B2B security vendor knows whether its work is reaching the right people.
• We do not sell your personal information for money, and we never publish or share the results of a free assessment with anyone but you.

Information you give us

We collect what you type into our forms:

• Free assessment — your name, work email address, the domain you want assessed, and your confirmation that you are authorized to request an assessment of that domain. We use this to run the assessment, send you the results, and follow up about them.
• Demo requests, contact forms and event registrations — your name, work email, company and anything else you choose to write. These run on HubSpot forms.
• Newsletter — your email address, until you unsubscribe.
• Job applications — your name, email, links you provide, your message and your CV or résumé. We use these only to evaluate your application.

Please do not send us sensitive personal information, security findings about third parties, or credentials through these forms.

Information we collect automatically

When you load a page we receive standard technical information: pages viewed, the approximate location derived from your IP address, your device type, browser and operating system, and the campaign, search or site that referred you.

We also record, in your browser's local storage, which campaign or link first brought you to us and which brought you most recently. If you later submit a form, that campaign information is sent with your submission so we can tell which of our work actually reached you. It contains no identifier for you personally and is never transmitted unless you submit something.

Cookies and similar technologies

We do not place cookies unless you accept them. Before you answer the cookie banner — and if you decline — Google Analytics runs in cookieless mode: it counts a page view and records which campaign or link referred you, without writing anything to your device and without an identifier that follows you between visits or across sites. Visits measured this way cannot be linked to each other or to you.

If you accept, the following also load:

• Google Analytics cookies, which let us recognize a returning browser and measure a visit across several pages.
• Leadfeeder (Dealfront), which identifies the organization behind a visit from IP-based company data, so we know which industries are evaluating us.
• RB2B, which can identify individual professional visitors to our site and provides us their name and professional profile.
• LinkedIn Insight Tag, which measures how our LinkedIn campaigns perform and supports advertising to similar audiences.

Strictly necessary technologies — the Cloudflare Turnstile bot check on the assessment form, and the record of your own cookie choice — are not optional, because the site cannot work correctly without them.

Your choices

Choose Accept or Decline in the banner on your first visit; your choice is stored in your browser and remembered. To change it later, clear this site's cookies and local storage in your browser settings and reload the page. You can also block analytics at any time with browser settings or an extension, and browser "Do Not Track" or Global Privacy Control signals are honored where we are required to honor them.

Declining costs you nothing. Every part of this site works the same either way.

How we use information

• To run the free assessment you requested and deliver its results.
• To respond to your demo request, question or application.
• To understand which pages, campaigns and content are useful, and to improve the site.
• To market our products to businesses that have shown interest, including follow-up email and advertising, subject to your choices above.
• To keep the site secure, prevent abuse and meet our legal obligations.

We do not use your information to make automated decisions that produce legal or similarly significant effects about you.

Legal bases (EEA and UK visitors)

• Consent — for optional cookies and the tools listed above, and for marketing email where consent is required. You can withdraw it at any time.
• Performance of a contract, or steps taken at your request — to run an assessment you asked for and send you its results.
• Legitimate interests — cookieless traffic measurement, site security, and business-to-business outreach, balanced against your rights. You may object to processing based on legitimate interests.
• Legal obligation — where the law requires us to retain or disclose information.

Who we share it with

We share personal information only with service providers who process it on our behalf under contract, and only as needed to run this site and our business:

• HubSpot — CRM, forms, meeting scheduling and marketing email.
• Google — Analytics, and Google Cloud, which hosts our assessment service.
• Netlify — website hosting and the careers form.
• Cloudflare — bot protection on the assessment form.
• Dealfront (Leadfeeder), RB2B and LinkedIn — as described under Cookies, only if you accept.

We may also disclose information if required by law, to enforce our terms, or in connection with a merger, acquisition or sale of assets — in which case we will say so before your information becomes subject to a different policy.

We do not sell your personal information for money. Some of the advertising and visitor-identification tools above may qualify as "sharing" for cross-context behavioral advertising under California law; declining cookies, or contacting us at the address above, opts you out.

The free assessment

An assessment looks only at information that is already publicly visible from outside the domain you submit. We ask you to confirm you are authorized to request it, and we rely on that confirmation. Results go to the person who requested them. We use assessment findings internally to improve our detection, and we may publish aggregate statistics that identify no customer, organization or domain.

International transfers

We are based in the United States and our service providers may process information in the United States and elsewhere. Where we transfer personal information out of the EEA or UK, we rely on the European Commission's Standard Contractual Clauses or another approved safeguard.

How long we keep it

Leads and contact records are kept while the business relationship is reasonably active and for a limited period afterwards. Assessment records are kept while they are useful to you and to us, and then deleted. Analytics data is retained on Google's standard schedule. Job applications are kept for the hiring cycle and a reasonable period afterwards unless you ask us to delete them sooner. You can ask us to delete your information at any time.

Your rights

Depending on where you live, you may have the right to access the personal information we hold about you, correct it, delete it, receive a portable copy, object to or restrict certain processing, withdraw consent, or opt out of sale, sharing or targeted advertising. We will not discriminate against you for exercising any of these rights.

Email privacy@quantrosecurity.ai and we will respond within the time the applicable law allows. We may need to verify your identity first. An authorized agent may submit a request on your behalf with proof of authorization. If you are in the EEA or UK and are not satisfied with our response, you may complain to your local data protection authority.

Security

We protect information with encryption in transit, access controls and the same practices we build our products around. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Children

This site is intended for business users. We do not knowingly collect personal information from anyone under 16. If you believe a child has given us information, contact us and we will delete it.

Changes to this policy

We will update this page as the site and our practices change, and we will revise the date above when we do. Material changes will be highlighted here.

Contact

Quantro Security — privacy@quantrosecurity.ai. For questions about our terms, see our Terms of Service.