1. Scope

This Privacy Policy describes how Faqtor Ltd ("Qubitry", "we", "us", "our") collects, uses, and protects personal information when you visit our website or use the Qubitry quantum computing platform (the "Platform").

This policy applies to personal information as defined under applicable data protection law, including the UK General Data Protection Regulation and the Data Protection Act 2018. It does not apply to Compute Data as defined in the Data Processing Addendum, which is governed by separate terms.

2. Information We Collect

2.1 Information You Provide

• Account Information: name, email address, organisation name, and password when you register for the Platform.
• Billing Information: payment card details and billing address, processed by our third-party payment processors. We do not store full payment card numbers.
• Communications: information you provide when contacting our support team, responding to surveys, or participating in user research.

2.2 Information Collected Automatically

• Usage Data: anonymised platform interaction metrics, including features used, session duration, and page views.
• Compute Metadata: circuit sizes, job runtimes, GPU utilisation, and error rates. This data does not include the content of your circuits or any other Compute Data.
• Device Information: browser type and version, operating system, IP address, and device identifiers.
• Cookies: analytics cookies to understand how the Platform is used. You may control cookies through your browser settings. We do not use advertising or tracking cookies.

2.3 Information We Do Not Collect

We do not collect the content of your quantum circuits, molecular structures, machine learning models, or any other data you submit for computation. Compute Data is processed ephemerally in accordance with our Data Processing Addendum and is not used for model training, analysis, or any purpose other than executing the computation you request.

3. How We Use Your Information

Purpose	Legal Basis
To operate, maintain, and provide the Platform	Performance of a contract
To process and execute compute jobs you submit	Performance of a contract
To communicate service updates, security notices, and support responses	Legitimate interests
To respond to your support requests	Performance of a contract
To improve platform performance, reliability, and security	Legitimate interests
To detect, prevent, and investigate abuse or security incidents	Legitimate interests
To send marketing communications where you have consented	Consent

4. Data Sharing

We share personal information only in the following circumstances:

• GPU Cloud Providers: third-party infrastructure providers who execute compute jobs on our behalf. They are bound by data processing agreements that prohibit them from using your personal information for any purpose other than providing the contracted services.
• Service Providers: vendors who provide hosting, analytics, email delivery, and payment processing services. They act on our instructions and are contractually prohibited from using personal information for their own purposes.
• Legal Compliance: when required by law, regulation, court order, or legally binding request from a government authority.
• Business Transfers: in connection with a merger, acquisition, restructuring, or sale of assets, provided the recipient agrees to be bound by this Privacy Policy.

We do not sell your personal information to third parties.

5. International Transfers

Your personal information may be processed in the United Kingdom, the European Economic Area, or other jurisdictions where our GPU cloud providers operate. When transferring personal information outside the United Kingdom or European Economic Area, we ensure appropriate safeguards are in place, including Standard Contractual Clauses adopted by the European Commission or the UK Information Commissioner's Office, as applicable.

6. Data Retention

We retain personal information for as long as your account is active and for a reasonable period afterwards to comply with legal obligations, resolve disputes, and enforce our agreements. The specific retention periods are determined by reference to the following criteria:

• The purpose for which the information was collected.
• Any legal or regulatory requirements to retain the information.
• The nature of the information and the potential risk of harm from unauthorised use or disclosure.

You may request deletion of your personal information at any time. Upon verification of your identity, we will delete your information within 30 days, subject to any legal obligations that require continued retention.

7. Your Rights

Subject to applicable law, you have the following rights in relation to your personal information:

• Right of access: to obtain confirmation of whether we hold personal information about you and to request a copy of that information.
• Right to rectification: to request correction of inaccurate or incomplete personal information.
• Right to erasure: to request deletion of your personal information, subject to certain exceptions.
• Right to data portability: to receive your personal information in a structured, commonly used, and machine-readable format.
• Right to object: to object to processing based on legitimate interests or for direct marketing.
• Right to withdraw consent: where processing is based on consent, to withdraw that consent at any time.

To exercise these rights, contact [email protected]. We will respond to your request within the timeframe required by applicable law. For all other legal inquiries, contact [email protected].

If you are dissatisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection, at ico.org.uk.

8. Cookies

We use analytics cookies to understand how the Platform is used and to improve your experience. These are non-essential cookies that you may control through your browser settings. We do not use advertising cookies, tracking cookies, or third-party marketing cookies. Essential cookies required for the operation of the Platform are set automatically.

9. Security

We implement technical and organisational measures to protect personal information against unauthorised access, alteration, disclosure, or destruction. These measures include encryption in transit using TLS 1.3, role-based access controls, regular security assessments, and staff training on data protection. For more detail, see our Security page.

10. Children

The Platform is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us at [email protected] so that we can delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified via email or through the Platform. We encourage you to review this policy periodically.

12. Contact

For privacy-related inquiries, data rights requests, or to contact our Data Protection Officer: [email protected]

For all other legal inquiries: [email protected]

Faqtor Ltd
86-90 Paul Street
London, United Kingdom
EC2A 4NE

Company registration number: 16322984