QuantumDrive Privacy Policy

1. Controller and scope

QuantumDrive, Sociedad Limitada (tax ID B-75303388), Urb. Veneziola s/n, Edif. 4, Bajo 4, 30380 San Javier (Murcia), Spain, is the data controller. Privacy contact: privacy@quantumdriveev.com; general contact: info@quantumdriveev.com.

This policy covers the website, the web app, the mobile app, QPilot (including when you use it from Claude, ChatGPT or WhatsApp) and CAE services. Available features vary by platform and version. Data comes from what you enter, your account and device, the features you use and, where applicable, CAE partners or the company that contracts fleet services.

2. Accounts, planning and requested services

We process account identifiers (including Firebase UID), email, name and profile image supplied by social sign-in, authentication, vehicle, battery, settings, routes, trips, favourites and locations you enter or allow us to access. Map services receive searches, coordinates and necessary technical metadata. Charging and payment data is processed when you use those features; advertising is not required to use route planning.

Data necessary to create an account and provide a requested feature is processed for performance of a contract or pre-contractual steps (GDPR Article 6(1)(b)). Optional location or microphone access requires device permission; this does not authorise analytics or advertising. You can enter a location manually and use QPilot through text. Strictly necessary security and abuse-prevention logs are assessed under legitimate interests (Article 6(1)(f)), with minimisation and a right to object; this basis does not automatically cover product analytics.

3. QPilot and artificial intelligence

QPilot uses your messages, responses, conversation context, selected vehicle, settings, supplied location and relevant routes and trips to answer and perform requested functions. Available name or email may be included in the context sent to the model. Tool results and conversation titles may also contain personal data. Do not include passwords, health data or unnecessary information about other people.

The current web app integration uses Gemini through Google Cloud Vertex AI for conversation, titles, image interpretation, transcription and speech generation. Some place searches use Google Maps grounding. Earlier backend QPilot services include an OpenAI fallback; this is separate from the current agent's provider.

We process what is needed to answer you and keep your history as part of the service you request (Art. 6(1)(b) GDPR). We do not use your conversations for advertising or to train artificial intelligence models; Google does not use the data we send to Vertex AI to train its models. Google keeps place queries made with Google Maps for 30 days and may log Vertex AI usage to prevent abuse, under its terms. QPilot is an AI assistant and can make mistakes: check its proposals before acting. QPilot does not make automated decisions with legal or similarly significant effects on you.

4. QPilot in Claude, ChatGPT and WhatsApp

You can use QPilot from third-party assistants such as Claude (Anthropic) or ChatGPT (OpenAI) by adding its connector. That assistant manages the conversation under its own terms: QPilot only receives the queries made by its tools (for example origin, destination, car and battery) and returns the results. We do not receive the rest of your conversation with that assistant.

Without an account, queries are computed without identifying you and are not stored. If you connect your QuantumDrive account on the Connect page, we securely store a session credential of your account so QPilot can use your car, settings and trips and save what you ask, as in the app, plus the list of connected assistants. You can disconnect them all in Privacy and your data → Connected assistants; changing your password or deleting the account also disconnects them.

When QPilot becomes available on WhatsApp, your messages will be transmitted by Meta (WhatsApp Business Platform), which processes them under its terms, and voice notes will be transcribed with Gemini on Vertex AI. We store your number only as an irreversible code (hash) to recognise your chat and, if you connect it, link it to your account. Write «desconectar» to unlink it or «borrar» to start over.

When a result can be shown on the map, we give you an «Open in QuantumDrive» link that stores the scene (the trip, chargers or range, without account data) for 30 days.

5. QPilot conversations, synchronisation and memory

The interface stores threads, titles, responses and result cards in browser IndexedDB. With an authenticated account, threads synchronise per user through Google Cloud Storage; signing in may import guest threads present in that browser into your account. Signing out through QPilot clears the local copy but retains account history.

QPilot's memory is the context of the current conversation (forgotten after six hours without use) and the car settings and preferences saved in your account, the same as in the app. Deleting a conversation does not delete those settings: change them in Settings.

From each conversation's menu you can delete it, also from your account (if you are offline, the deletion completes as soon as you reconnect and the conversation does not reappear on other devices), or download it as Markdown. In My car → Privacy and your data you can download all your QPilot data as JSON or delete it all at once.

6. Voice, transcription, images and community

When you activate voice, the browser requests microphone access. Audio is sent to the QPilot service and Gemini on Vertex AI for transcription. Dictation allows you to review the text; voice notes and conversation mode use transcription to answer. Voice notes may be stored as audio in device IndexedDB: the file is not part of thread synchronisation, although it is transmitted for transcription and the transcript may remain in synchronised history.

To read an answer aloud, its text is sent to Vertex AI to generate audio; if that fails, the browser or system voice is used. You can stop the voice and revoke microphone permission in your browser. We do not store voice note audio on our servers: it is sent for transcription and the transcript is kept in the conversation.

If you submit photos or community contributions, we process images and extracted data to prepare the requested contribution. Gemini performs interpretation and moderation. Reviews, photos or data you confirm for publication may be visible to others, depending on the feature and the name you choose to display. Avoid including faces, number plates or unnecessary information about other people.

7. Analytics, advertising and consent

With your consent we use PostHog (hosted in the EU) to measure screen and feature usage, campaigns, device data and errors, linked to your account identifier. An identifier or a hashed email is still pseudonymised personal data. We do not record sessions with PostHog.

Analytics and advertising measurement are only enabled if you consent (Art. 6(1)(a) GDPR and Art. 22(2) of the Spanish LSSI). On the website, the web app and the CAE form we ask when you arrive, with Accept, Reject and Configure at the same level; in the app, the first time you open it. Without your choice, PostHog, the Meta pixel and Microsoft Clarity are not loaded. Your choice expires after 12 months and we ask again.

With advertising consent, the web app and the download page use the Meta pixel, and the app sends usage events to the Meta SDK to measure our campaigns; events of users who accepted are also sent to Meta from PostHog. On iOS, the advertising identifier (IDFA) also requires Apple's tracking permission (ATT); on Android, the advertising identifier is disabled. The app automatically sends Meta the install and first-open events, without an advertising identifier, to attribute downloads to our campaigns.

With your analytics consent, the CAE form uses Microsoft Clarity (heatmaps and session replay) with field contents masked. Provider notice: https://privacy.microsoft.com/privacystatement. The main website uses Google Analytics 4 with Google consent mode.

You can change or withdraw your consent at any time, as easily as you gave it: in the web app under My car → Privacy and your data, in the app under Account → Analytics and advertising, and on the website and the CAE form from the cookies link. Withdrawal does not affect prior processing; to have data already received deleted, email privacy@quantumdriveev.com.

8. CAE, communications, payments and fleets

For CAE applications we process identification, contact details, vehicle and project documents, invoices, signatures, IBAN and supporting evidence where relevant. Necessary data is used to process the application and remuneration (Article 6(1)(b)), meet applicable obligations (Article 6(1)(c)), and address claims or prevent fraud where justified (Article 6(1)(f)). Document reading may use OpenAI and Google Vertex AI alongside application storage and management.

Support enquiries are processed to handle your request; optional newsletters and marketing require their own basis and choice, normally consent. You can unsubscribe using the available message link or the privacy contact. Necessary account or application communications are separate from advertising.

Charging and payments may involve Cariqa, Stripe and, depending on the channel, Apple or Google. Fleet and telemetry services are described in their specific notices when contracted: QuantumDrive may act as the client company's processor; the company contract alone is not a legal basis for every use of driver data.

9. Providers and recipients

Depending on the feature, Google Cloud/Firebase (authentication, infrastructure, storage and QPilot/Vertex AI), Neon (databases), Vercel (web), PostHog, Google Analytics and Meta (measurement, with your consent), Mapbox (maps, addresses and traffic), Google Maps (places), Open-Meteo (weather, with coordinates), OpenAI (CAE document reading and earlier QPilot services), Resend (email), Meta (WhatsApp, if you use QPilot on WhatsApp) and the payment or charging providers indicated are involved. Location service queries may reveal the area or route queried.

We also use Google Workspace, DocuSign, Atlassian and HubSpot for email, signatures, documentation and communications where applicable. Anthropic (Claude) and OpenAI (ChatGPT) are independent controllers of the conversations you have in their assistants. Meta and payment or platform providers may act as controllers of their own processing. We disclose data to authorities when required by law and to professionals involved in handling or defending claims.

In CAE, ipapi.co receives the IP address to suggest a region, and Cloudflare (cdnjs) and Google Fonts serve document-viewer resources and fonts; these requests disclose the IP address and technical data to those providers.

10. International transfers

Some providers may process data outside the European Economic Area, for example in the United States. In those cases the transfer relies on the EU-US Data Privacy Framework where the provider is certified, or on the standard contractual clauses approved by the European Commission included in their data processing agreements. We host our services in the EU whenever the provider allows it (Google Cloud in Belgium, PostHog in the EU).

You can request information or a copy of the applicable safeguards at privacy@quantumdriveev.com.

11. Retention and deletion

Your account and its data (cars, settings, trips, saved and shared routes, favourites, charging cards, QPilot conversations, connected assistants and community contributions) are kept while you have the account. Deleting it erases them all. We only keep a minimal deletion record (identifier, date and, if you give it, the reason) and data the law requires us to keep, such as invoices (six years), with restricted access. Deleted data is removed from our recovery copies within 7 days at most.

QPilot conversations in your account are kept until you delete them; those inactive for 24 months are deleted automatically. In the browser they remain until you delete them or clear the site data. Conversations from Claude, ChatGPT or WhatsApp are not stored: QPilot only keeps the context in memory for six hours without use. «Open in QuantumDrive» links expire after 30 days.

Connected assistant credentials are kept until you disconnect them (the access tokens we issue expire after one hour and can be renewed for at most 90 days without use). Connection requests and one-time codes expire within minutes. CAE files are kept during processing and then for the period required by each grant's rules and applicable law. Analytics events are kept pseudonymised and deleted on request.

12. Rights and available controls

You may request access, rectification, erasure, restriction, objection and portability where applicable, and withdraw consent, by writing to privacy@quantumdriveev.com. We respond without undue delay and within one month of receipt; complexity or the number of requests may justify up to two additional months, with notice and reasons within the first month.

Additional identity information will only be requested where there are reasonable doubts and proportionately; routinely sending a complete identity document is unnecessary. You may complain to the Spanish Data Protection Authority (https://www.aepd.es/) or the competent authority where you habitually live or work.

In the web app, My car → Privacy and your data gathers your controls: cookies and analytics, download or delete your QPilot data, connected assistants and account deletion. Account deletion is confirmed by email and erases all your data (see Retention); giving a reason is optional. For any other right, or for a complete copy of all your data, email privacy@quantumdriveev.com. You do not need to accept advertising, answer a survey or explain why you exercise a right.

13. Security, children and changes

We apply access controls, authentication, encryption in transit and at rest at our providers, and store assistant access credentials only as a hash. We review measures according to risk. QuantumDrive is not directed at children under 14; services requiring legal age keep their requirements. If we detect data of a minor processed without a valid basis, we will delete it.

Material changes will be published with their date and additional information where required. Updating a policy does not grant retrospective consent or automatically activate new purposes. Read this version alongside cookie information and the specific notices shown when using each feature.