QuantiMeet Privacy Policy
Version 1.4, effective September 26, 2026.
Effective date: September 26, 2026
1. Who is responsible
QuantiMeet is operated by 1607726 B.C. Ltd., doing business as QuantiMeet (incorporation number BC1607726; business name registration FM1119767), a British Columbia company at 4479 Marsden Road, Courtenay, British Columbia V9N 9M5, Canada. We are the organization accountable for personal information handled through the Service under the Personal Information Protection and Electronic Documents Act (PIPEDA) and British Columbia's Personal Information Protection Act (PIPA). Our privacy contact is the Privacy Officer, 1607726 B.C. Ltd., doing business as QuantiMeet, at privacy@quantimeet.com.
This policy is written in plain language on purpose. If anything is unclear, ask us.
2. Two kinds of people, two roles
Account holders and team members: people who sign up for QuantiMeet. For your information we are the organization in control, and this policy applies directly.
Bookers and guests: people who book time with a QuantiMeet customer, fill in a booking form, or join a video room. That customer decides what to collect and why; we process it on their behalf and under their instructions. If you booked a meeting with someone using QuantiMeet, contact them first about their handling of your information; we help them respond, and you can also contact us.
3. What we collect
Account information: name, email address, password (stored hashed), time zone, team name, chosen subdomain, and two-factor settings.
Scheduling data: event types, availability, bookings, attendee names and emails, booking form answers, notes, and any calendar data you connect (see section 5).
Billing: your plan, invoices and payment status. Card details go directly to Stripe; we never see or store full card numbers.
Video: meeting rooms are created per booking on our own servers. We do not record meetings unless the customer turns recording on. Connection metadata (IP address, time, duration) is kept briefly in server logs.
Technical: IP address, browser and device type, pages requested, timestamps and errors, in server logs, for security and reliability.
Communications: email you send us, support requests, waitlist and beta sign-ups, and your consent choices with the exact wording you agreed to and when.
How you found us: when you join the waitlist we also record the campaign tags in the link you followed, the website that sent you (the site only, not the page), the first page of ours you saw, and, if you arrived through a subscriber's referral link, which subscriber's link it was. If you sign up through a referral link, we record which link it was with your sign-up. We store none of this in your browser: it travels in the link you clicked. No third-party advertising or tracking service is involved.
We do not collect more than we need for the purpose stated, and we do not buy data about you from anyone.
4. Why we use it and the legal basis
To provide the Service you asked for: accounts, bookings, calendars, notifications, video rooms, invoices. Basis: performance of our contract with you.
To keep the Service secure and reliable: logs, abuse prevention, backups. Basis: our legitimate business need, which we balance against your interests.
To send transactional messages: confirmations, reminders, reschedules, invoices, security notices, and the 30-day notices the Fair Pricing Pledge requires. These are not marketing and you receive them as part of the Service.
To send marketing (product news, launch announcements): only with your express consent under Canada's Anti-Spam Legislation (CASL). Every such message identifies us, includes our mailing address, and has a working unsubscribe that takes effect within 10 days. You can withdraw consent at any time.
To learn which of our pages and announcements bring people to the waitlist, and to credit the subscriber whose referral link brought you. Basis: our legitimate business need. It is kept with your waitlist entry or sign-up and deleted with it. A subscriber sees only how many people joined through their link, never who.
To meet legal obligations: tax records, responding to lawful requests.
We do not sell personal information, we do not use your content to train AI models, and we do not use scheduling data for advertising.
5. Connected calendars and other integrations
If you connect Google Calendar, Microsoft 365/Outlook, CalDAV or iCloud, we access only what is needed to read availability and write bookings, using the permissions you approve. Tokens are stored encrypted. When you disconnect a calendar, we delete our copy of its access and refresh tokens. For Google Calendar we also revoke the grant with Google. Microsoft does not offer a way for us to revoke a personal-account grant, so you can remove QuantiMeet at any time from your Microsoft account's app permissions page.
Google: QuantiMeet's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Microsoft: our access is governed by the permissions shown on the Microsoft consent screen and can be revoked in your Microsoft account settings.
6. Who we share it with
We share personal information only with the providers below, each bound by contract to handle it only for us:
OVHcloud (hosting; servers located in Beauharnois, Quebec, Canada); Stripe Payments Canada, Ltd. and Stripe, Inc. (payments; Stripe's own privacy policy applies to card data); our own mail server for booking, account and support email (a server we rent from RackNerd, located in Buffalo, New York, United States; it handles the addresses and content of those emails in transit and keeps mail logs for 30 days); Google (Gmail), which hosts the mailbox that receives email sent to our info@, support@ and privacy@ addresses; Let's Encrypt (TLS certificates; sees domain names only). We do not use third-party analytics or error-reporting tools.
We also disclose information where the law requires it, such as a valid court order, or to protect someone's safety. If we are ever acquired, the acquirer must honour this policy and the Fair Pricing Pledge.
7. Where your data lives
Your team's data is stored in its own isolated database on servers we operate in Canada. Customers who need a specific data location can choose one where we offer it. Two routine transfers of personal information happen outside Canada: Stripe processes payments in the United States and other countries under its own safeguards, and the emails we send you (booking confirmations, reminders, account notices) pass through our mail server in the United States, so the names, email addresses and booking details inside those emails transit, and are briefly held in the mail queue and logs, in the United States. Email you send to our support and privacy addresses is delivered to a Google-hosted mailbox and is subject to Google's safeguards. While your information is outside Canada it may be accessible to the authorities of that country under its laws. Your team's scheduling data itself is stored and processed only in Canada.
8. How long we keep it
Account and scheduling data: for as long as your account is active. After cancellation, export stays available for 30 days; we then delete from live systems, and backups age out within 35 days.
Beta accounts that do not add a payment method when their first charge falls due (April 20, 2027): read-only for 60 days after your first charge falls due, then deleted.
Logs: 30 days. Invoices and tax records: 7 years, as Canadian tax law requires. Consent records: for as long as the consent is relied on, plus 3 years.
9. Your rights
You can access, correct, export and delete your information from your dashboard, or by writing to privacy@quantimeet.com. We answer within 30 days. You can withdraw marketing consent at any time. You can complain to us, and if you are not satisfied, to the Office of the Privacy Commissioner of Canada or the Office of the Information and Privacy Commissioner for British Columbia. If you are in the EU, UK or Quebec, you may have additional rights under local law and we honour them on request.
10. Security
Encryption in transit everywhere; per-team database isolation with separate credentials; encryption of stored integration tokens; hardened servers with key-only access; daily backups with tested restores; two-factor authentication available on every account. No system is perfectly secure, so if a breach creates a real risk of significant harm we notify affected people and the relevant privacy commissioner as the law requires, without undue delay.
11. Cookies
We use only the cookies needed to keep you signed in and to protect forms against forgery. We do not use advertising or cross-site tracking cookies, so there is no cookie banner.
12. Children
The Service is for adults and businesses. We do not knowingly collect information from anyone under 18 as an account holder.
13. Changes
Material changes come with 30 days' notice by email, per the Fair Pricing Pledge. The current version is always at quantimeet.com/privacy with its effective date.
September 25, 2026: sections 3 and 4 now describe what our waitlist and sign-up forms record about how you found us, why we record it, and that it is kept and deleted with your waitlist entry or sign-up.
September 26, 2026: legal party updated to 1607726 B.C. Ltd., doing business as QuantiMeet, following business name registration FM1119767. Same legal entity; no change to prices, rights or obligations. Section 3 now also says that no third-party advertising or tracking service is involved in recording how you found us.
1607726 B.C. Ltd., doing business as QuantiMeet, 4479 Marsden Road, Courtenay BC V9N 9M5, Canada. privacy@quantimeet.com