Skip to content

Privacy — website and native workshops

QubitumAI SASU is the publisher and controller for its own correspondence and any personal data it actually receives. Contact contact@qubitumai.com, or write to the registered office shown in the legal notice.

In the native private workshop, your content, saved versions and imported files are processed on your device for editing, recovery and export. The publisher receives no automatic copy and has no remote access to that local notebook. An optional Fortune account and an explicitly submitted creation are separate server actions, described below; submitting an editable creation sends a complete copy, even with private visibility. Do not include someone else’s private information without an appropriate right to use it.

This site has no form, advertising tracker, audience counter, remote font or automatic upload of workshop files. Your IP address and connection information are processed to deliver the requested page, based on our legitimate interest in operating a secure site (GDPR Article 6(1)(f)). The site and its reverse proxy do not keep access logs or a browsing history. Transient connection data is needed for the connection; the site's operation records contain only fixed service events. Hostinger hosts the VPS in Paris, France, as processor under its data processing agreement. Its own infrastructure, security and legal operations follow its privacy policy, with retention determined by service necessity and legal obligations. Applicable contractual safeguards cover transfers outside adequately protected countries; the Paris location does not imply that every provider operation stays in France. No analytics consent is collected.

The notebook retains saved content until you remove the application's local data or delete the application using your operating system. Device backups may contain copies under your own backup settings. A forced closure may lose an unsaved draft. Storage and import limits can refuse an action; they are not a promise of permanent archiving.

An export or native share is voluntary. The file and any personal information it contains are sent to the destination you select, under that destination's terms. Cancelling, refusing access or an unconfirmed share is not proof of delivery. Exported copies remain outside the application; deleting its notebook does not delete those copies. Import reads only the file you choose.

Voluntary support emails are handled through contact@qubitumai.com at Infomaniak Network SA, Switzerland. Our legitimate interest is to answer and resolve your request (GDPR Article 6(1)(f)); send only necessary information. For new ordinary cases explicitly assigned to LARGESS, GIVE ME or TOPSHELF, closure is recorded and current case copies are manually reviewed at least every 30 days, removed after 90 days from closure and no later than 120 days. A legal or dispute hold must be justified and reviewed individually. This procedure does not purge the existing shared mailbox. Provider backups and copies held elsewhere are separate; immediate erasure of every replica is not promised. These pages collect no newsletter or marketing consent.

For data the publisher holds, you may request access, correction, erasure, restriction or portability where applicable and object where the processing basis allows it. We cannot remotely read or erase a notebook that remains solely on your device. You can complain to the CNIL or your competent supervisory authority. No analytical cookie consent is requested because these pages set no analytical cookies.

Fortune — optional server service

Sending data

The private workshop remains on your device. Only an explicit Fortune action sends a product identifier, an account UUID, your chosen alias, message and optional links, and a cryptographic control-key fingerprint to the server. A separately submitted creation sends its complete editable document and revision information, even when you choose private visibility. No automatic upload of your notebook is required.

Purpose and visibility

QubitumAI provides the account, editable creation and purchase service you explicitly request (GDPR Article 6(1)(b)). Publishing a profile and publishing a creation require separate, withdrawable consent (Article 6(1)(a)) and moderation; sending or buying does not publish either. Private means not publicly displayed, not device-only storage. Security, abuse prevention, moderation and minimal erasure evidence rely on necessary, proportionate legitimate interests (Article 6(1)(f)); necessary accounting documents follow applicable legal duties (Article 6(1)(c)). In TOPSHELF, the author-requested sponsored project, its account identifier and purchases determining visibility also serve third-party promotion. This does not authorise behavioural targeting or tracking across apps or websites. Payments and paid publication remain unavailable.

Recipients and location

Fortune runs on Hostinger in Paris, France; its database is hosted by Neon in Frankfurt, Germany. Authorised service and moderation staff access only necessary data. Neon operates under the Databricks contract and incorporated data processing agreement; its provider operations and subprocessors, including Grafana Labs in the United States, can involve transfers outside the European Economic Area. Applicable standard contractual clauses and processing agreements cover the relevant transfers; EU hosting does not mean every operation stays in Europe. Apple handles its own store transactions. Fortune retains the verified identifiers, dates, amounts, currency and refund state necessary for reconciliation, without card details. Website and proxy access logging are not enabled; this does not exclude the providers’ own infrastructure and security records. Voluntary support goes to Infomaniak Network SA in Switzerland, separately from the Fortune database.

Account erasure

Deleting the Fortune account erases this product’s profile content and history, submitted creations and versions, moderation details, reports, blocks and control-key fingerprint from the active service in both test and production environments. Other products are preserved and the former account key is revoked. Minimal financial reconciliation records and an erasure receipt remain separate from the erased content. Account erasure is not a refund or delivery of a purchase. Removing public visibility is a separate action. Your local workshop remains; local deletion does not erase the server account, and server erasure does not remove your exports or copies held by others. Erasures must be replayed and checked before reopening a restored service. No receipt promises immediate removal of every provider backup.

Retention

Profile and creation content remains for the requested service until account erasure; no automatic inactivity expiry is qualified. Unresolved purchase intentions retain only necessary reconciliation data after erasure and require review at least every 30 days. The absence of a received transaction does not prove no payment occurred; a dated, justified resolution is needed to close a case. Minimal erasure records are reviewed with related transactions and restorable copies, and removed or anonymised when their remaining purposes are closed and those copies have expired. Review does not automatically renew retention. Necessary accounting documents are kept for ten years from the end of the relevant financial year; this does not apply to every intention, token or log. Dispute holds must be individually justified and reviewed. Expired rate-limit counters are intended for bounded removal after more than 24 hours; periodic production maintenance is active: it removes expired counters and flags cases for review. It does not replace justified financial-case review and closure or full qualification of restorable copies. Neon’s observed project recovery history is six hours, with no configured snapshot schedule; this is not a promise about all internal provider backups or exports. Ordinary future support cases explicitly assigned to these apps are reviewed within 30 days and their current copies removed 90 days after closure, at the latest within 120 days, except justified holds. This excludes the existing shared mailbox and residual provider backups. Payments stay closed until the remaining retention controls are qualified. Server backup copies are kept separately in Germany and replaced under the provider’s weekly schedule. Mail restoration is not available in the current Starter plan; the provider describes daily backups. Once upgraded, recovery may include messages deleted less than 30 days earlier, subject to available daily backups. These mechanisms do not guarantee a universal erasure deadline; before any recovery, erasures must be replayed and financial records reconciled.

Your choices and rights

Read this notice before sending a profile, creation or purchase request. Public consent can be withdrawn separately; hiding a profile or creation does not erase the whole account. You may request access, correction, erasure, restriction, portability or object where applicable at contact@qubitumai.com. Keep your private control key to exercise account actions; never send it, card details or unnecessary personal information by email. You can complain to the CNIL or your competent authority.