Privacy Policy

Quazzar Space operates Quazzar Space, a cloud infrastructure management platform accessible at quazzar.space and app.quazzar.space. This Privacy Policy describes how we collect, use, store, and protect information when you visit our website or use our platform. By using Quazzar Space, you agree to the practices described in this policy. If you do not agree, please discontinue use of our services. Quazzar Space is registered in British Columbia, Canada and operates under the Personal Information Protection and Electronic Documents Act (PIPEDA) and the British Columbia Personal Information Protection Act (PIPA BC). Where applicable, we also adhere to the principles of the EU General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

We collect information in three ways: information you provide directly, information collected automatically through your use of the platform, and infrastructure metadata you connect to your account. Account Information: When you register, we collect your full name, email address, hashed password, and optional organization details (company name, team size, role). Contact Form: When you submit an inquiry through our website, we collect your name, email address, the reason for contact, and the content of your message. Cloud Infrastructure Metadata: When you connect a cloud provider (AWS, GCP, Azure, Hetzner, OVH, DigitalOcean), Quazzar Space reads and stores metadata about your infrastructure — including service names, resource identifiers, IP addresses, network topology, cost and billing data, and dependency relationships. We do not access the workloads, application code, or data stored within those cloud resources. Cloud Provider Credentials: To access your cloud provider APIs, you provide access credentials (such as API keys or IAM role ARNs). These credentials are encrypted at rest using AES-256 with dedicated encryption keys and are never stored in plaintext. Usage Data: We automatically collect technical data when you use the platform, including IP address, browser type, operating system, pages visited, actions performed, and session timestamps. This data is used for security monitoring, platform improvement, and troubleshooting. Cookies and Session Tokens: We use cookies and server-side session tokens to authenticate your login session and maintain your platform state. See the Cookies section for details.

We use the information we collect for the following purposes: - To provide and operate the Quazzar Space platform, including connecting to your cloud providers and displaying infrastructure data. - To authenticate your identity and maintain a secure session. - To send transactional communications such as account confirmations, password resets, billing receipts, and security alerts. - To respond to support requests and contact form submissions. - To analyze usage patterns and improve platform performance, reliability, and features. - To enforce our Terms of Service and prevent fraud, abuse, or unauthorized access. - To comply with applicable legal obligations. We do not use your data for behavioral advertising, sell your personal information to third parties, or use your infrastructure metadata for purposes beyond providing the Quazzar Space service.

Your data is stored on servers located in Canada and the United States. We use commercially reasonable technical and organizational measures to protect your information, including: - AES-256 encryption for data at rest, including cloud provider credentials and sensitive account fields. - TLS 1.3 encryption for all data in transit between your browser and our servers. - Role-based access controls that restrict internal access to personal data to authorized personnel only. - Comprehensive audit logging of all access to sensitive data. - Regular security reviews and vulnerability assessments. No method of transmission or storage is 100% secure. In the event of a data breach that is likely to result in a risk to your rights or freedoms, we will notify affected users and applicable regulators as required by law.

We retain your personal information for as long as your account is active or as needed to provide services. Specific retention periods are as follows: - Account data (name, email, organization info): retained for the duration of your account and deleted within 90 days of account closure. - Cloud infrastructure metadata: retained for the duration of your account; you may delete connected providers and their associated data at any time from your account settings. - Contact form submissions: retained for up to 24 months to support follow-up communications. - Usage and access logs: retained for up to 12 months for security and operational purposes. - Billing records: retained for 7 years as required by Canadian tax and financial reporting laws. You may request deletion of your personal data at any time by contacting [email protected]. See the Your Rights section for details.

We do not sell, rent, or trade your personal information. We share data only in the following limited circumstances: Service Providers: We engage third-party vendors to help operate the platform (for example, cloud hosting providers, payment processors, and email delivery services). These vendors are contractually bound to process your data only as directed by us and in accordance with applicable privacy laws. Payment Processing: Billing transactions are handled by Stripe, Inc. We do not store full credit card numbers on our systems. Stripe's privacy practices are governed by their own privacy policy. Legal Requirements: We may disclose your information if required by law, court order, or governmental authority, or when we believe in good faith that disclosure is necessary to protect the rights, property, or safety of Quazzar Space, our users, or the public. Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of our assets, your information may be transferred as part of that transaction. We will notify you via email or a prominent notice on our website before your information becomes subject to a different privacy policy. With Your Consent: We may share your data for any other purpose with your explicit prior consent.

Quazzar Space uses cookies and similar technologies for the following purposes: Essential Cookies: These are required for the platform to function. They maintain your authenticated session after login and store your preferences (such as language and display settings). The platform cannot function without these cookies. Analytics Cookies: We may use privacy-respecting analytics tools to understand how visitors use our website. These tools collect anonymized or aggregated data about page visits and user flows. We do not use third-party advertising networks or cross-site tracking cookies. You can control cookie behavior through your browser settings. Disabling essential cookies will prevent you from using the authenticated platform. Disabling analytics cookies will not affect your ability to use Quazzar Space. We do not use cookies to serve targeted advertisements.

Quazzar Space integrates with third-party services at your direction. When you connect a cloud provider or external tool (such as Prometheus, Grafana, Zabbix, Jira, Slack, or Ansible), you are authorizing Quazzar Space to interact with those services on your behalf using credentials you provide. We are not responsible for the privacy practices of cloud providers or other third-party services you choose to connect. We encourage you to review the privacy policies of those services independently. Our website may contain links to external resources. Quazzar Space is not responsible for the content or privacy practices of any external websites.

Depending on your location and applicable law, you may have the following rights regarding your personal information: Access: You may request a copy of the personal information we hold about you. Correction: You may request that we correct inaccurate or incomplete personal information. Deletion: You may request that we delete your personal information, subject to retention obligations required by law (such as billing records). Portability: You may request an export of your account data and infrastructure data in a machine-readable format (JSON). Withdrawal of Consent: Where processing is based on your consent, you may withdraw consent at any time without affecting the lawfulness of prior processing. Object to Processing: You may object to certain uses of your data, including direct marketing. To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. We may need to verify your identity before processing your request. There is no charge for making a request, though we reserve the right to charge a reasonable fee for manifestly excessive or repetitive requests. Residents of the European Economic Area may also lodge a complaint with their local data protection authority. California residents may exercise rights under the CCPA by contacting us at the address below.

Quazzar Space is not directed at individuals under the age of 16. We do not knowingly collect personal information from children. If you believe a child under 16 has provided us with personal information without appropriate parental consent, please contact us at [email protected] and we will promptly delete that information.

Quazzar Space is based in British Columbia, Canada. If you access Quazzar Space from outside Canada, your information may be transferred to, stored, and processed in Canada or the United States. By using Quazzar Space, you acknowledge that your data may be processed in jurisdictions that may have different data protection laws than your country of residence. For users in the European Economic Area, transfers of personal data to Canada are subject to an adequacy decision by the European Commission, meaning Canada is recognized as providing an adequate level of data protection. For transfers to the United States (for example, when using US-based sub-processors), we rely on contractual safeguards such as Standard Contractual Clauses.

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform features. When we make material changes, we will update the effective date at the top of this page and, where appropriate, notify you by email or by displaying a notice within the platform. Your continued use of Quazzar Space after a policy update constitutes your acceptance of the revised policy. We encourage you to review this page periodically.

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: Quazzar Space British Columbia, Canada Email: [email protected] Website: quazzar.space We aim to respond to all privacy-related inquiries within 30 days.