1. Introduction
Quantyug (“Quantyug”, “we”, “us”) operates a suite of AI-native, multi-tenant SaaS products — Rentflow, HRMS, Gurukul, and Helix CRM. This Privacy Policy explains what information we collect, how we use and protect it, and the choices and rights you have. It applies to our marketing website and to the Quantyug platform (the “Service”).
For most data processed inside the Service, our customers are the data controllers and Quantyug acts as a data processor on their behalf. If you use the Service through your employer, school, or landlord, their privacy notice governs that use in addition to this policy.
2. Information we collect
Account information
When you or your organization create an account, we collect details such as your name, work email, phone number, role, organization name, and authentication credentials (stored only as salted hashes).
Usage & device data
As you use the Service, we automatically record log data such as IP address, browser and device type, pages and features accessed, request timestamps, and diagnostic events. We use this to keep the platform secure, reliable, and fast.
Customer content
The Service stores the data your organization puts into it — for example tenants and leases, employees and payroll, students and results, or leads and deals. This content belongs to your organization; we process it only to provide the Service.
Cookies
We use a small number of cookies and similar technologies to keep you signed in and to understand aggregate product usage. See Cookies & tracking below.
3. How we use your information
- To provide, maintain, and improve the Service and its AI features.
- To authenticate users, secure accounts, and prevent fraud and abuse.
- To provide customer support and respond to your requests.
- To send service, security, and billing communications you can’t opt out of, and product updates you can.
- To monitor performance, debug issues, and plan capacity.
- To comply with legal obligations and enforce our agreements.
We do not sell your personal data, and we do not use customer content to train shared, cross-tenant AI models.
4. Multi-tenant data isolation
Quantyug is built as a multi-tenant platform, but every organization’s data is logically isolated from every other tenant. Each request is scoped to a single tenant context, enforced at the application and data layers so one customer can never read or write another customer’s records. AI models operate strictly within a tenant’s own boundary — predictions, drafts, and insights are generated only from that tenant’s data.
5. Data security
Security is the product. We apply defense-in-depth controls across the platform:
- Encryption in transit and at rest. All traffic is served over TLS 1.2+, and data at rest is encrypted with AES-256.
- Strong authentication. Sessions use signed, short-lived JWT access tokens, and we support multi-factor authentication (MFA) for account protection.
- Least-privilege access control. Role-based access controls (RBAC) and tenant-scoped permissions ensure people and services see only what they need.
- Audit trails. Security-relevant actions are logged with actor, timestamp, and context so activity is traceable and reviewable.
- Operational hygiene. Encrypted secrets, regular backups, dependency scanning, and continuous monitoring back the controls above.
No system is perfectly secure, but we work continuously to protect your data and to respond quickly if something goes wrong.
6. Cookies & tracking
We use strictly necessary cookies to keep you authenticated and to remember essential preferences, and analytics cookies to understand aggregate, de-identified usage so we can improve the product. We do not use third-party advertising cookies. You can control cookies through your browser settings; disabling essential cookies may prevent you from signing in.
7. Data sharing & sub-processors
We share personal data only in limited circumstances:
- Sub-processors. Vetted infrastructure and service providers (for example cloud hosting, email delivery, and payment processing) that help us run the Service under contractual confidentiality and security obligations.
- Within your organization. With other authorized users of your tenant, according to the roles your administrators configure.
- Legal & safety. When required by law, or to protect the rights, property, and safety of Quantyug, our customers, or the public.
- Business transfers. In connection with a merger, acquisition, or asset sale, subject to this policy.
8. Your rights
Depending on your location, you may have the right to access, rectify, erase, or export (data portability) your personal data, as well as to object to or restrict certain processing. Because much of this data lives inside your organization’s tenant, we may direct requests to your organization (the data controller) or act on their instructions. To exercise a right, contact us using the details below.
9. Data retention
We retain personal data for as long as your account is active or as needed to provide the Service. After an account is closed, customer content is deleted or anonymized within a defined retention window, except where longer retention is required for legal, tax, or security purposes. Backups are purged on a rolling schedule.
10. International transfers
Quantyug is engineered in India and serves customers globally, so your information may be processed in countries other than your own. Where we transfer personal data across borders, we use appropriate safeguards — such as standard contractual clauses and equivalent measures — to protect it in line with this policy.
11. Contact us
Questions about this Privacy Policy or your data? Reach our privacy team at privacy@quantyug.com, or see our Terms of Service. You can also get in touch through our contact page.