No SDKs. No credit card

Privacy Policy

Effective date: August 25, 2026

This Privacy Policy explains how Xaere SARL, operating the ZipQuantum service (“ZipQuantum”, “we”, “us”), collects, uses, discloses, and protects personal data when you visit zq.tn, use the ZipQuantum platform or API, open a ZipQuantum Smart Link, purchase a plan, or contact us.

1. Who is responsible for your data?

For account, billing, website, and support data, Xaere SARL is the data controller. PROXIWEB is the technical developer of the platform and may support its operation on behalf of Xaere SARL; it is not the data controller. When a customer uses ZipQuantum to route its own links and determine the purposes of related event data, that customer may be the controller and ZipQuantum acts as its service provider or processor. Requests about a customer’s campaign should normally be directed to that customer first.

2. Data we process

  • Account and contact data: name, email address, company, profile details, credentials, and support messages.
  • Service data: Smart Link settings, destinations, domains, app identifiers, campaign parameters, API activity, plan, and usage.
  • Routing and analytics data: link opened, date and time, and broad device, operating-system, browser, platform, and language categories.
  • Billing data: subscription, invoice, payment status, and transaction references. Stripe processes payment-card details; ZipQuantum does not store full card numbers.
  • Security data: authentication, rate-limit, diagnostic, and abuse-prevention records reasonably required to protect the service.

3. Privacy-first routing

Normal Smart Link routing does not use third-party tracking pixels, advertising SDKs, cross-app identifiers, probabilistic device matching, or browser fingerprinting. It does not persist raw IP addresses or complete user-agent strings for analytics. ZipQuantum records only the event and broad technical categories needed to route links, measure aggregate performance, and protect the service.

Deferred delivery uses an expiring signed token: Google Play Install Referrer on Android and an explicit signed handoff on iOS. These tokens carry the destination journey without identifying or probabilistically matching a device. On Android only, an integration may separately send coarse technical context after an explicit consent action; this context is optional, is not required for delivery, and is never used for device matching. iOS deferred delivery does not transmit or store device context.

4. Why we use data

  • Perform our contract by providing accounts, Smart Links, redirects, domains, APIs, analytics, support, and billing.
  • Pursue legitimate interests in securing, troubleshooting, and improving the service, preventing fraud and abuse, and understanding aggregate service performance.
  • Comply with accounting, tax, legal, and regulatory obligations.
  • Act on consent where the law requires it, including optional consent-gated Android technical context.

5. Cookies and similar technologies

ZipQuantum may use first-party cookies that are strictly necessary for authentication, security, session continuity, and saved preferences. We do not use third-party advertising cookies or tracking pixels. Third-party services you choose to visit, including Stripe Checkout, apply their own cookie and privacy policies.

6. When data is disclosed

We do not sell personal data or routing-event data. We disclose data only to vendors that help us provide the service, such as hosting, infrastructure, email, DNS, support, and payment providers; to professional advisers; when required by law; to protect users, the public, or the service; or in connection with a corporate transaction. Vendors may process data only for the agreed service and under appropriate safeguards.

7. International transfers

Our providers may process data in countries other than your own. Where applicable law requires it, we use an approved transfer mechanism and appropriate contractual, technical, or organisational safeguards. Contact us for information about safeguards relevant to your data.

8. Retention

Account and service data is kept while your account is active and for a reasonable period afterward to close the account, resolve disputes, enforce agreements, and meet legal obligations. Routing-event retention depends on the plan and workspace configuration shown in the platform. Billing and tax records are kept for the period required by law. Security logs are kept only as long as reasonably necessary for security and incident response. We delete or anonymise data when it is no longer needed.

9. Your rights

Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a portable copy of your personal data, and to withdraw consent without affecting earlier lawful processing. You may also complain to your local data-protection authority. We may need to verify your identity before completing a request, and legal exceptions may apply.

10. Security

We use reasonable technical and organisational safeguards designed to protect data, including encrypted transport, access controls, input validation, and rate limiting. No system can be guaranteed completely secure. Keep your credentials confidential and notify us promptly if you suspect unauthorised access.

11. Children

ZipQuantum is a business service and is not directed to children. We do not knowingly collect personal data from children through account registration. Contact us if you believe a child has provided personal data to us.

12. Changes to this policy

We may update this policy as the service or applicable law changes. We will post the revised version with a new effective date and provide additional notice when a change materially affects your rights.

13. Contact

For privacy questions or requests, contact Xaere SARL at support@zq.tn.