Privacy Policy

Who we are

This website, burraquantum.com, is run by Burraq Quantum, a One Person Company incorporated in India (“Burraq Quantum”, “we”, “us”). We decide how the information described here is used, which makes us its data fiduciary under India’s data protection law and its controller under the GDPR.

This policy covers this website and the briefs and emails you send us through it. It does not cover:

• Rumin, our AI marketing platform, at burraquantum.com/rumin and rumin.burraquantum.com. It has its own privacy policy.
• Client engagements. Information a client shares with us during an engagement is governed by the agreement for that engagement.

What we collect

When you send a brief. The diagnostic form asks for your name, work email, company, role, the topics you want help with, your timeline, your region and a message. Only your name, email and message are required. We also receive whatever you write in emails to us.

When you visit. Like every web server, ours records each request: your IP address, browser, the page requested, the page you came from and the time. When you send a brief, we also keep a one-way code derived from your IP address for one hour, to stop the form being flooded.

To prepare our reply. When you send a brief from a work email address, we read the public pages of your company’s website and use an AI service to summarize what your company does, so that our reply is relevant. We look up your company, not you, and nothing is looked up for personal email addresses. If you accepted analytics cookies, your brief also lists the pages of this site you read before sending it.

When you talk to Q. Q is the AI assistant on this site. What you write to it, its replies and the page you were on are kept for 30 days and then deleted. If you ask Q to email you a summary, the summary becomes a brief and is kept as described below. Q may note business details you share with it: your name, company, role, website, need, timeline and region. If you tick “Remember this conversation on this device”, a code kept in your browser lets Q pick up where you left off; untick it to forget. We also keep de-identified copies of conversations, with names, email addresses and phone numbers removed, to improve Q and to choose which questions our public pages answer. A question used this way is rewritten in general terms and never quoted.

Only with your permission. If you accept analytics cookies, Google Analytics records the pages you view and what you do on them, such as scrolling, opening a question or starting the form, together with your device type and approximate location. If you accept advertising cookies, the advertising platforms we use (Google, LinkedIn and Meta) may set cookies so that we can measure our ads and show them to people who have visited. Nothing you type into the form is sent to analytics or advertising platforms.

When you subscribe to our weekly email. We keep your email address, your name if you give it, when you confirmed, and which issues reached you and whether you opened them or clicked a link in them, as our email provider reports. Each issue carries a link of your own for sharing it. If someone subscribes through it, we note that you brought them, so that we can thank you.

If we invited you. Some business contacts we hold get one email inviting them to subscribe. We send it once, and keep your address afterwards only so that we never send it again. You are added to the weekly email only if you press its button and confirm. If you do not, we do not write to you again.

We do not ask for sensitive personal data, such as health or financial details, and ask you not to include any in a brief.

Cookies and similar storage

Nothing beyond what the site strictly needs is stored until you choose. The cookie bar asks about analytics, advertising and local time separately, and declining takes as many clicks as accepting.

• Your choice is stored in your browser under bq_consent, and as a cookie of the same name on burraquantum.com so that our Rumin pages and app respect it too. It is kept for one year.
• Analytics cookies, such as Google Analytics’ _ga, are set only if you accept analytics.
• Advertising cookies, such as Google’s _gcl cookies and those of LinkedIn and Meta, are set only if you accept advertising.
• Local time. If you allow it, the clock in the top corner reads your browser’s time zone to show your local time. This happens in your browser and nothing is sent to us. Otherwise it shows the time in Dubai.

You can change your choice at any time with “Cookie choices” at the foot of every page.

How we use it, and why

• To reply to your brief and discuss working together. We rely on your request, and on the consent you give by sending it.
• To prepare our reply to your brief, including the summary of your company described above. We rely on our legitimate interest in replying usefully.
• To answer you through Q, to improve it, and to choose which questions our pages answer. We rely on your request when you write to Q, and on our legitimate interest in improving the assistant and our pages for the de-identified copies.
• To send the weekly email you subscribed to. We rely on your consent, which you can withdraw with one click in any issue.
• To invite business contacts, once, to subscribe. We rely on our legitimate interest in telling relevant businesses about our work. One click in that email, or doing nothing, ends it.
• To keep the site running and secure, and to stop abuse. We rely on our legitimate interest in protecting the site and the people who use it.
• To understand which pages are useful and improve them. We rely on your consent.
• To measure and target our own advertising. We rely on your consent.

We do not sell personal data, and we do not use it to make automated decisions about you.

Who we share it with

Only with services that help us run the site and reply to you, and only what each needs:

• Hostinger hosts this website and the database that stores briefs, on a server in Mumbai, India.
• Resend delivers our emails: the note that tells us a brief has arrived, the thank-you we send you, the weekly email and the invitations to it.
• Google Workspace runs our email.
• Anthropic runs Q, with OpenAI as its backup: what you write to Q is sent to Anthropic to write its replies, or to OpenAI when Anthropic cannot answer. Under their terms for business use, it is not used to train their models.
• Telegram carries short alerts about Q conversations and briefs to us, including what you wrote and the business details you shared.
• Calendly handles the booking if you pick a time for a call in Q, and receives the details you enter there, under its own privacy policy.
• Anthropic and OpenAI receive your brief and your company’s public website text, to prepare that summary. They also receive de-identified questions from Q conversations when we choose what our pages answer. Under their terms for business use, data sent through their APIs is not used to train their models.
• Google Analytics and Google Tag Manager, only if you accept analytics.
• Google, LinkedIn and Meta advertising, only if you accept advertising.

We may also disclose information where the law requires it or to protect our legal rights, and to a successor if our business is sold or reorganized, who would be bound by this policy.

Where it is processed

Briefs and server logs are stored in India. Resend, Google, Anthropic, OpenAI, Telegram and Calendly may process data in the United States and other countries. Where personal data leaves India, the European Union or the United Kingdom, we rely on the safeguards in these providers’ terms, such as standard contractual clauses where they apply.

How long we keep it

• Briefs: 24 months from the day you send one, after which it is deleted automatically, unless we go on to work together. If we do, the engagement agreement governs it.
• Q conversations: 30 days. De-identified copies, without names or contact details, are kept to improve Q and our pages.
• Emails: for as long as we need them to deal with what you wrote to us about.
• The weekly email: while you are subscribed. After you unsubscribe, or if you never answered an invitation, we keep only your address and that fact, so that we never email you again.
• Server logs: 14 days.
• The rate-limit code: one hour.
• Analytics data: no longer than 14 months.

Your rights

You can ask us to:

• tell you what personal data we hold about you and how we use it;
• correct or complete it;
• delete it;
• stop using it for a purpose you consented to (withdrawing consent does not affect what we did before);
• act on the instructions of someone you nominate to exercise these rights if you are unable to.

If you are in the European Union, the United Kingdom or a place with similar laws, you can also object to processing based on our legitimate interests, ask us to restrict processing, ask for a copy of your data in a portable form, and complain to your data protection authority.

To exercise any of these rights, email [email protected]. We may need to confirm your identity first, and we will reply within one month.

Grievance Officer

If you have a concern about how we handle your personal data, contact our Grievance Officer, Habib Mehmoodi, at [email protected]. We address grievances within one month of receiving them.

Security

The site is served only over encrypted connections. Briefs are stored in a database that cannot be reached from the internet, on a server we keep updated, and only people at Burraq Quantum can read them. No system is perfectly secure; if a breach affects your personal data, we will tell you and the relevant authorities as the law requires.

Children

This site is meant for businesses. It is not directed at anyone under 18, and we do not knowingly collect their personal data.

Changes to this policy

If we change this policy, we will update the date at the top of this page. If a change is significant, we will say so here.

Contact

Burraq Quantum · [email protected] · Mumbai and Dubai.