QuantaNex logoQuantaNex

Privacy Policy

Last Updated: May 20, 2026

1. Introduction

This Privacy Policy outlines how Quantanex ("we," "our," or "us") collects, uses, and protects the information of individuals ("users") who access and use our authentication services. Our app provides secure, password-free authentication by offering TOTP and optional multi-layered verification methods, including face recognition, device-based TPM, and FIDO-compliant physical keys, ensuring robust security.

2. Information We Collect

Personal Data

  • Name, Date of Birth, and Email: These details are collected during account creation by your organization's admin for identification purposes. Your date of birth, though collected, is not actively used within the application.

Authentication Data

  • Public Cryptographic Keys (Passkeys): Unique public keys are generated and stored for each device associated with your account. Only the public portion of these cryptographic keys is stored on our servers; they are device-specific, secure, and cannot be reused across different services.
  • Image Data: For facial recognition-based authentication, image data is temporarily processed using Azure's Face Recognition API to verify your identity. Image data is not stored on our servers.
  • IP Address: We collect the IP addresses of both the service provider and user devices to validate access origins, monitor for suspicious activity, and verify legitimate authentication requests. Additionally, vpnapi.io is used to detect if any VPN is in use, helping to secure the authentication process.
  • Location Data: While location-based geofencing functionality is built into our app, it is currently disabled to improve app performance. If this feature is activated in the future, users will be notified through the app or by their organization.

3. Data Usage

We use the information we collect strictly to deliver, manage, and enhance our authentication services. Specifically:

  • Personal Data: Enables account identification and user management.
  • Authentication Data: Ensures the secure, multi-layered verification process.
  • Image Data: Used only at the moment of authentication to validate your identity through Azure's API.
  • IP and VPN Detection: Enhances security by validating access origins, monitoring for suspicious activity, and detecting possible anonymity methods like VPNs.

4. Data Sharing

We maintain strict data confidentiality. Personal data, image data, and authentication data are not shared with any external parties, with the following exceptions:

  • Recognition API: Used exclusively for real-time image verification. Facial data is processed transiently for the authentication request and is not retained by Quantanex.
  • vpnapi.io: Utilized solely to detect the use of VPNs in real-time, helping maintain the integrity of access to our services.

5. Data Retention

The organization that utilizes Quantanex sets the duration for how long user data is retained. For specific information on retention periods, please consult your organization's data retention policies. If you have questions about your data, contact your organization's admin.

6. User Rights

As a user, you have the right to:

  • Request Data Modification: Contact your organization's admin if your information needs to be updated or corrected.
  • Request Data Deletion: Should you wish to delete your account or associated data, you may request this through your organization's admin, who will coordinate with us.

7. Security Measures

We use industry-standard security practices to protect your data, including encryption during data transmission (TLS) and at rest. Only public cryptographic keys are stored on our servers, minimizing the security risks associated with storing private data.

8. Children's Privacy

Quantanex is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If you believe a minor has provided us with personal data, please contact us immediately so we can take appropriate action.

9. Governing Law

This Privacy Policy is governed by and construed in accordance with the laws of India. Any disputes arising under or in connection with this policy shall be subject to the exclusive jurisdiction of the courts of India.

10. Notification of Changes

If any changes are made to this Privacy Policy, users will be notified through the app or by their organization's admin. The "Last Updated" date at the top of this policy will reflect the most recent revision.

11. Contact Information

For questions regarding our Privacy Policy, please contact us at contact@quantanex.io.