Privacy Policy

Last updated: 30 June 2026

1. Introduction and scope

This Privacy Policy explains how QuantProc — a brand of ADS Infra Solutions Pvt Ltd ("QuantProc", "we", "us" or "our") — collects, uses, discloses and safeguards personal data when you visit our website, create an account, or use our products and services — including QuantProc ERP, Skils and ProcureAI (together, the "Services"). It also describes the choices and rights available to you regarding that data.

This policy applies to personal data we process as a controller — for example, information about website visitors, prospects and the administrators who manage our Services. Where we process personal data on behalf of a customer under their instructions (for instance, data your employer loads into the Services), we act as a processor, and that processing is governed by the agreement between QuantProc and that customer rather than this policy.

2. Information we collect

We collect the following categories of information:

• Account and contact information. Your name, work email address, company, job title, phone number and login credentials when you register, request a demo, or contact us.
• Usage and device information. Information about how you interact with our website and Services, such as pages viewed, features used, IP address, browser type, device identifiers, operating system, referring URLs and timestamps.
• Communications. The content of enquiries, support requests and other messages you send us, along with our responses.
• Billing information. Where you purchase a paid plan, billing contact details and transaction records (card data is handled by our payment processors, not stored by us).
• Cookies and similar technologies. Data collected through cookies, pixels and local storage, as described in the Cookies section below.

3. How we use information

We use personal data to:

• Provide, operate, maintain and improve the Services and our website.
• Create and administer accounts, authenticate users and provide customer support.
• Process transactions and send related information such as invoices and renewal notices.
• Respond to enquiries, schedule demos and communicate about products, features and updates you have requested.
• Send service and security notices, and — where permitted — relevant marketing communications you can opt out of at any time.
• Monitor and analyse usage and trends to improve performance, reliability and security.
• Detect, investigate and prevent fraud, abuse and security incidents, and comply with our legal obligations.

4. Legal bases for processing

Where the EU or UK General Data Protection Regulation applies, we rely on the following legal bases:

• Performance of a contract — to provide the Services you or your organisation have requested.
• Legitimate interests — to operate, secure and improve our Services and to communicate with prospects and customers, provided those interests are not overridden by your rights.
• Consent — for certain marketing communications and non-essential cookies, which you may withdraw at any time.
• Legal obligation — to comply with applicable laws, tax requirements and lawful requests from authorities.

5. How we share information

We do not sell your personal data. We share it only in the following circumstances:

• Service providers. With vendors who process data on our behalf — such as hosting, analytics, payment processing, email delivery and customer support — under contracts that require them to protect your data and use it only for the services they provide to us.
• Legal and compliance. Where required to comply with applicable law, regulation, legal process or an enforceable governmental request, or to protect the rights, property or safety of QuantProc, our customers or others.
• Business transfers. In connection with a merger, acquisition, financing or sale of assets, subject to appropriate confidentiality protections.
• With your direction. When you ask us to share information, or integrate the Services with third-party tools you choose to connect.

6. International data transfers

QuantProc operates globally, so your personal data may be transferred to, stored in and processed in countries other than the one in which you reside. Where we transfer personal data out of the European Economic Area, the United Kingdom or other regulated regions, we put appropriate safeguards in place — such as the European Commission's Standard Contractual Clauses and equivalent mechanisms — to ensure your data remains protected to the standards required by applicable law.

7. Data retention

We retain personal data only for as long as necessary to fulfil the purposes described in this policy, including to provide the Services, comply with our legal, accounting and reporting obligations, resolve disputes and enforce our agreements. When data is no longer needed, we securely delete or anonymise it. Retention periods vary depending on the type of data and the context in which it was collected.

8. Security

We treat security as foundational. QuantProc maintains a comprehensive information security programme that includes administrative, technical and physical safeguards designed to protect personal data against unauthorised access, disclosure, alteration and loss. These measures include:

• Independently audited controls aligned to SOC 2 Type II and ISO 27001.
• Field-level encryption for sensitive data, with encryption in transit and at rest.
• Role-based access controls, least-privilege access and continuous monitoring and logging.
• Regular vulnerability testing, secure development practices and incident response procedures.

No method of transmission or storage is completely secure, but we work continuously to protect your data and to respond promptly if an issue arises.

9. Your rights

Depending on where you live, you may have the following rights over your personal data:

• Access — to request a copy of the personal data we hold about you.
• Correction — to ask us to correct inaccurate or incomplete data.
• Deletion — to request that we erase your personal data, subject to legal exceptions.
• Portability — to receive certain data in a structured, commonly used, machine-readable format.
• Objection and restriction — to object to or restrict certain processing, including direct marketing.
• Withdraw consent — where we rely on consent, to withdraw it at any time without affecting prior processing.

To exercise any of these rights, contact us using the details below. We will respond within the timeframes required by applicable law. You also have the right to lodge a complaint with your local data protection authority.

10. Cookies

We use cookies and similar technologies to operate our website, remember your preferences, measure performance and understand how the site is used. Essential cookies are required for the site to function; analytics and marketing cookies are optional and used only where permitted. You can manage or disable cookies through your browser settings, though some features may not work as intended if you do.

11. Children's privacy

Our Services are intended for businesses and are not directed to children. We do not knowingly collect personal data from anyone under the age of 16. If you believe a child has provided us with personal data, please contact us and we will take appropriate steps to delete it.

12. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements or other factors. When we make material changes, we will update the "Last updated" date above and, where appropriate, provide additional notice. We encourage you to review this policy periodically.

13. Contact us

If you have questions about this Privacy Policy or how we handle your personal data, please email our privacy team at privacy@quantproc.com or reach out through our contact us page.

14. Grievance Officer — India (DPDP Act 2023)

In accordance with the Digital Personal Data Protection Act, 2023 (India), QuantProc has appointed a Grievance Officer to address concerns raised by data principals regarding the processing of their personal data.

Name	Suresh Jha
Designation	Grievance Officer
Organisation	ADS Infra Solutions Pvt Ltd
Address	Tower-F, 501, Manesar, Sector-79, Gurgaon, Haryana — 122 052, India
Email	privacy@quantproc.com
Response time	Within 30 days of receipt of the grievance

If your grievance is not resolved to your satisfaction, you may escalate it to the Data Protection Board of India (DPBI) once it is constituted and operational under the DPDP Act.