Privacy Policy

Account information. When you sign in using Google, we receive your name, email address, and profile picture from Google, as permitted by your Google account settings. We do not receive your Google password.

Session data. To keep you signed in, we set a secure, encrypted session cookie. This cookie is necessary for the sign-in feature to function and does not track you across other websites.

Local preferences. Your light/dark theme preference is stored in your browser's local storage. This information stays on your device and is not transmitted to our servers.

Communications. If you email us — for example, to request a demo — we receive whatever information you choose to include in that message.

We do not currently operate a self-serve checkout, so we do not collect payment card information through the Site. If we introduce billing in the future, payment information will be collected and processed by a third-party payment processor, and this policy will be updated accordingly.

We use the information above to authenticate you and maintain your signed-in session, respond to inquiries and demo requests, maintain the security and integrity of the Site, and comply with legal obligations.

We do not use your information for advertising, and we do not sell or rent your information to third parties.

We do not use customer information — including any documents or financial data submitted through the product once it is live — to train artificial intelligence or machine learning models. This applies to all data collected through the Site and, in the future, the product.

Where the General Data Protection Regulation ("GDPR") applies, we process your information on the following legal bases: performance of a contract, where processing is necessary to provide the sign-in feature you requested; legitimate interests, where processing is necessary to secure and operate the Site, provided those interests are not outweighed by your rights; and consent, where you have given it — for example, by voluntarily emailing us.

We share information only with service providers acting on our behalf: Google, to provide the "Sign in with Google" authentication feature, and Vercel Inc., our hosting and infrastructure provider, which stores and serves the Site's data.

These providers may process data outside your country of residence, including in the United States. Where required, we rely on appropriate safeguards, such as Standard Contractual Clauses, to lawfully transfer data internationally.

We do not otherwise share, sell, or disclose your personal information to third parties, except with your consent; to comply with a legal obligation, court order, or governmental request; to protect the rights, property, or safety of Quartermark, our users, or the public; or in connection with a merger, acquisition, or sale of assets, in which case we will notify you before your information becomes subject to a different privacy policy.

We retain account information for as long as your account remains active. If you ask us to delete your account and associated data, we will do so within a reasonable time, except where we are required to retain certain information to comply with a legal obligation.

Depending on your location, you may have the right to access the personal information we hold about you, correct inaccurate information, request deletion of your information, request a copy of your information in a portable format, object to or restrict certain processing, and withdraw consent where processing is based on consent.

To exercise any of these rights, email us at hello@quartermark.com. We will respond within a reasonable time and in accordance with applicable law.

If you are located in the European Economic Area, you also have the right to lodge a complaint with your local data protection supervisory authority. As these Terms are governed by the law of Cyprus, the relevant authority is the Cyprus Office of the Commissioner for Personal Data Protection.

We apply industry-standard technical and organizational measures to protect information, including encryption in transit (TLS 1.2+) for all Site traffic. Further detail on our security practices, including those that apply to the product's handling of fund and portfolio company data, is available on our Security page. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

The Site is intended for business use by adults and is not directed at children. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided us with personal information, contact us and we will delete it.

We use only the cookies strictly necessary to operate the sign-in feature (a session cookie). We do not use advertising or cross-site tracking cookies. If we introduce analytics or additional cookies in the future, we will update this policy and, where required by law, request your consent first.

We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last updated" date above and, where appropriate, notify account holders directly.

Questions about this Privacy Policy can be sent to hello@quartermark.com.