Privacy Policy

1. Data Controller

The data controller is Ivan Cardillo, a natural person, reachable at email ivan@quotx.ai.

2. What data we collect

When you submit the contact form, we collect the personal data you provide:

• Full name
• Work email address
• Company name
• The content of your message

3. Purpose and legal basis

We process this data solely to respond to your request and to take steps at your request prior to entering into a contract (Art. 6(1)(b) GDPR), and on the basis of your consent where applicable (Art. 6(1)(a) GDPR).

4. Processors and where data is processed

To operate this website and handle your request, we rely on the following processors, who act on our behalf under data processing agreements:

• Vercel — website hosting, on EU-based infrastructure.
• Resend — transactional email delivery for the contact form, on EU-based infrastructure.
• Zoho Mail — business email hosting for the inbox that receives contact form submissions, on EU-based infrastructure.

5. Data location

Your data is processed within the European Union / European Economic Area. We do not transfer your personal data outside the EU/EEA.

6. Retention

We retain the data collected through the contact form only for as long as necessary to handle your request and any related follow-up. Messages delivered to our business email inbox may be kept there for the same period and are deleted when no longer needed.

7. Your rights

You have the right to access, rectify, erase, restrict, or object to the processing of your personal data, as well as the right to data portability. To exercise these rights, contact ivan@quotx.ai.

8. Complaints

If you believe your data is being processed unlawfully, you have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali).