Privacy Notice

Quantum Infinity is operated by Toledo Technologies LLC. This notice describes the data used by the website evidence-review service.

Data we process

• The URL and CRD number you submit, your authorization attestation time, public page excerpts, content and observation hashes, configured findings, source dates, scan timing, and change history.
• For paid monitoring: one-way activation-secret and access-token hashes, Polar checkout/subscription/product identifiers, entitlement status, current period dates, and PII-free webhook hashes. We do not store either raw secret.
• Ordinary security and operations data such as request time, route, status, IP address, user agent, and error code may appear in short-lived infrastructure logs.

We do not receive or store payment-card numbers. Polar processes checkout, tax, invoices, payment details, and its own customer data under its terms and privacy notice.

Why we use data

We use it to perform the requested review, verify authorization and paid entitlement, protect the service, provide private history, troubleshoot failures, measure closed aggregate product usage, comply with law, and prevent abuse. We do not sell personal information or publish customer findings.

Retention

An unconsumed checkout-bound free-scan intent expires with its short-lived Polar session. A consumed intent may remain for up to 30 days so the same private access token can be recovered after an interrupted return. Each monitor keeps at most its 24 newest private run records while the subscription is entitled. A monitor and that history are scheduled for deletion 30 days after entitlement ends. Container logs are rotated by bounded file size and count; a fixed number of days is not promised. A security incident, legal obligation, or hosting-provider backup may require longer retention. Closed, non-identifying aggregate metrics and PII-free billing idempotency records may remain.

Service providers and disclosure

We use hosting, database, cache, and security infrastructure to operate the service and Polar as merchant of record. We may disclose limited data when required by law, to protect rights and safety, or in a business transfer subject to appropriate safeguards.

Your choices

You may avoid paid persistence by using only the free response. You may cancel billing through Polar. To request access, correction, or deletion, contact qi@toledotechnologies.com. We may need enough information to verify the request without exposing another customer’s private report.