Privacy Policy

Effective date: October 16, 2026

1. Who we are

Quanta is a time-tracking, project-management, and invoicing service (the "Service") operated by Stackfee Technologies Inc., a business incorporated in the Province of Quebec, Canada ("Quanta," "we," "our," or "us"). Our registered address is 1203-190 rue Murray, Montréal, QC H3C 2C7, Canada. This Privacy Policy explains how we collect, use, disclose, and protect personal information when you visit our website at quanta.is or use the Service.

We are committed to handling personal information in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and Quebec's Act respecting the protection of personal information in the private sector (the "Quebec Privacy Act," as amended by Law 25).

2. Information we collect

We collect the following categories of personal information:

A. Information you provide

  • Account information: your name, email address, password, organization (workspace) name, and role.
  • Billing information: when you subscribe to a paid plan, payment is processed by our payment provider (Stripe). We receive limited billing details (such as the last four digits of your card, billing name, and country); we do not store full card numbers.
  • Content you create: time entries, projects, tasks, clients, invoices, expenses, and any other data you enter into the Service.
  • Support communications: information you provide when you contact us.

B. Information collected automatically

  • Usage and device data: log files, IP address, browser type, pages viewed, and feature interactions, used to operate, secure, and improve the Service.
  • Cookies and similar technologies: used for authentication, preferences, and product analytics. See section 11.

C. Information from connected services

  • Google Sign-In: if you sign in with Google, we receive your name and email address from Google.
  • QuickBooks Online (Intuit): if you connect your QuickBooks Online account, we access and exchange accounting data needed to sync invoices, customers, products/services, tax rates, and payments. See section 6.
  • Google Calendar and Microsoft Outlook calendar: if you connect your calendar, we read the meetings on the calendars you choose so you can log them as time. See section 6.

3. Why we use your information

We use personal information to:

  • provide, operate, and maintain the Service, including authentication and security;
  • process subscriptions, payments, and invoices;
  • sync data with integrations you enable, such as QuickBooks Online;
  • show the meetings on a calendar you connect beside your time entries;
  • provide customer support and respond to your requests;
  • analyze usage to maintain and improve the Service;
  • send service-related and, where you have consented, marketing communications; and
  • comply with legal obligations and enforce our Terms of Service.

We rely on your consent and on the necessity of processing to provide the Service you have requested. You may withdraw consent to non-essential processing (such as marketing) at any time.

4. How we share information

We do not sell your personal information. We share it only as follows:

  • Service providers (processors): we use trusted providers who process data on our behalf and under contract, including:
    • Microsoft Azure — application hosting and database
    • Vercel — website and front-end hosting
    • Stripe — payment processing
    • Resend — transactional and marketing email delivery
    • PostHog — product analytics
    • Google — sign-in and Google Calendar (where you choose them)
    • Microsoft — Outlook calendar (where you connect it)
    • Intuit — QuickBooks Online integration (where you enable it)
  • Within your workspace: data you enter is visible to other members of your organization according to their roles and permissions.
  • Legal and safety: where required by law, court order, or to protect our rights, users, or the public.
  • Business transfers: in connection with a merger, acquisition, or sale of assets, subject to this Privacy Policy.

5. International transfers

Some of our service providers store or process personal information outside of Quebec and Canada, including in the United States. As a result, your information may be subject to the laws of those jurisdictions, including lawful access by foreign authorities. We take reasonable contractual and technical measures to ensure a comparable level of protection. For more information about how your personal information is handled outside Quebec, contact our Privacy Officer (section 10).

6. Connected integrations

QuickBooks Online

If you choose to connect QuickBooks Online, you authorize Quanta, through Intuit's authorized API, to access and exchange the accounting data required to provide the integration — for example customers, invoices, items (products and services), tax rates, and payments. We use this data solely to provide and operate the sync features you have enabled. We do not use your QuickBooks data for advertising and we do not sell it. You can disconnect QuickBooks at any time from the integration settings, which revokes our access. Your use of QuickBooks Online is also governed by Intuit's own terms and privacy policy.

Google Calendar and Microsoft Outlook calendar

Each person can choose to connect their own Google Calendar or Outlook calendar. Quanta asks for read-only access and never creates, changes, or deletes anything on your calendar. We read the meetings on the calendars you select (title, start and end time, and whether you accepted) and show them beside your time entries. A meeting becomes a time entry only when you choose to log it, and that entry then holds the details you saved. We do not otherwise keep a copy of your calendar: we store the email address of the connected account, the calendars you selected, and the access tokens needed to read them, encrypted. To mark meetings you have already logged, a time entry also stores a one-way fingerprint of the meeting's identifier, not the meeting itself.

We use calendar data only to provide this feature to you. We do not use it for advertising, we do not sell it, and we do not share it with anyone except as needed to run the Service (section 4). People cannot read it, except with your permission, for security purposes, or where the law requires. Quanta's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. You can disconnect your calendar at any time from the integration settings, which deletes the stored tokens; you can also remove Quanta's access from your Google or Microsoft account settings.

7. Data retention

We retain personal information for as long as your account is active and as needed to provide the Service, then for the period necessary to meet legal, accounting, and security obligations. When information is no longer required, we delete or anonymize it. You may request deletion of your account and associated data as described in section 9.

8. Security

We maintain reasonable administrative, technical, and physical safeguards appropriate to the sensitivity of the information, including encryption in transit, access controls, and tenant isolation. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If we become aware of a confidentiality incident that presents a risk of serious injury, we will notify affected individuals and the Commission d'accès à l'information as required by law.

9. Your privacy rights

Subject to applicable law, you have the right to:

  • access the personal information we hold about you;
  • request correction of inaccurate or incomplete information;
  • request deletion of your personal information, subject to legal requirements;
  • withdraw consent to non-essential processing, including marketing;
  • request portability of computerized personal information you have provided; and
  • file a complaint with the Commission d'accès à l'information du Québec or the Office of the Privacy Commissioner of Canada.

To exercise these rights, contact our Privacy Officer at the address in section 10. We will respond within the time limits required by law.

10. Privacy Officer

In accordance with the Quebec Privacy Act, we have designated a person responsible for the protection of personal information. You may contact our Privacy Officer with any question, access or correction request, or complaint:

Harley McPhee
Stackfee Technologies Inc.
1203-190 rue Murray, Montréal, QC H3C 2C7, Canada
Email: privacy@quanta.is

11. Cookies and analytics

We use cookies and similar technologies that are necessary to operate the Service (such as authentication and session cookies) and, with your consent where required, cookies for product analytics (PostHog) and marketing measurement. You can control cookies through your browser settings; disabling necessary cookies may affect how the Service works.

12. Children's privacy

The Service is intended for use by businesses and is not directed to children. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.

13. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through the Service. The "Effective date" above indicates when this version took effect.

14. Contact us

Questions about this Privacy Policy or our privacy practices can be sent to privacy@quanta.is or to the Privacy Officer at the address in section 10.