QANTRA Privacy Policy
Effective Date: October 2026 | Kingdom of Morocco & EU GDPR Compliant
1. Introduction
QANTRA ("we", "us", or "our") operates a specialized B2B event-networking technology platform designed to make networking frictionless for attendees and measurable for event organizers. This policy details how we handle personal data in compliance with Moroccan Law No. 09-08 and EU GDPR where applicable.
2. Data Controller & Contact Details
The primary data controller (*responsable du traitement*) for central platform accounts is QANTRA. For any privacy requests, data access, or compliance inquiries, please contact our privacy team directly at info@getqantra.com.
3. Controller vs. Processor Roles
QANTRA acts as a Data Controller for account credentials, platform logs, and direct user inquiries. For event-specific attendee lists and custom organizer parameters, the Event Organizer acts as Data Controller, and QANTRA processes data as a Data Processor (*sous-traitant*) under a Data Processing Agreement (DPA).
4. Data We Collect & NFC Tokens
We collect account profiles, event participation choices, and connection timestamps. Physical NFC tags contain zero PII and hold only an opaque routing token (app.getqantra.com/t/{token}).
5. Contact Protection & Privacy-by-Design
Public event profiles show basic professional details. Phone numbers and email addresses are never publicly broadcast and are revealed strictly according to mutual connection rules established by QANTRA and user sharing controls. QANTRA does not sell attendee data under any circumstances.
6. Hosting & Data Transfers
Data is securely processed using cloud infrastructure (Supabase / Vercel servers). Transfers outside Morocco adhere to CNDP requirements under Articles 43 & 44 of Moroccan Law 09-08 and EU Standard Contractual Clauses (SCCs) where GDPR applies.
7. Your Rights
You hold rights of access, rectification, erasure, and objection under Law 09-08 (Articles 5–9) and GDPR (Articles 15–22). Contact info@getqantra.com at any time to exercise your rights or request account deletion.