Privacy Policy

1. Introduction

Quantyra Labs LLC ("Company") operates the multi-tenant validation and verification Service. This Policy describes how we collect, use, disclose, and protect information.

2. Information We Collect

We collect tenant and account information (email, company and contact name, a hashed password), emails and phone numbers submitted for processing together with the results we compute or obtain for them (for example carrier, line status, ported status, caller name and do-not-call status), names and contact details you attach to verified sessions, usage and billing data (including wallet transactions that separately record paid top-ups and promotional bonus grants), technical information for abuse prevention (including IP address and a random demo device identifier stored in your browser), session cookies for admin and portal login, National Do Not Call Registry account identifiers (organization ID and subscription account number, never your registry password) you provide for DNC screening together with the registry files you upload, and, when you connect a CRM integration (LeadConnector), the contact email addresses and phone numbers you choose to validate and the tags we apply to them.

3. How We Use Your Information

We use information to deliver validation and verification results, screen numbers against do-not-call registry data for your account, apply validation tags to CRM contacts you connect, operate the prepaid wallet and billing system, operate promotional wallet bonus programs and prevent bonus abuse, send alerts and verification communications, prevent fraud and abuse, diagnose errors, maintain records and blocklists, operate the tenant portal and administrative tools, and improve the Service.

4. Legal Basis and Your Warranties

By submitting data or making payments, you warrant that you have all necessary rights and consents. You are responsible for compliance with applicable laws in your use of the Service and results. By using the Service through any client or automated agent, you (or the operator of such client/agent) agree to these policies.

5. Sharing and Disclosure

We may share information with service providers that assist with the Service, including payment processors (Stripe), email delivery (Amazon SES), SMS delivery and phone intelligence providers (which receive the phone number being checked), deliverability verification providers (which receive the email address being checked), a do-not-call lookup provider, an automated classification service that receives the email domain, the phone number prefix, derived signals about a request and aggregate statistics about uploaded registry files (never the full address or number), an error monitoring service that may receive request details when an error occurs, and hosting infrastructure. Public pages use self-hosted, cookieless analytics that no third party receives. See Subprocessors for categories. We do not sell personal information.

6. Data Retention

We retain the addresses and numbers you submit, and the results computed for them, for as long as your account is active and for the period afterwards during which we must keep billing and compliance records, and otherwise for as long as necessary to provide the Service, resolve disputes, comply with legal obligations, and enforce agreements. Cached validation results are reused only within limited windows (24 hours to 90 days for most data types, and up to three years for do-not-call registry status) and are otherwise kept as records of the checks performed. Verified sessions expire 48 hours after they are created and are deleted seven days after that; one-time codes expire after 10 minutes and are deleted after one hour. Free-demo counters reset 30 days after a browser's first check. Contact details read from a CRM you connect are deleted when the validation job that used them finishes (within a day if the job failed); only counts are kept. Signups that never reach checkout are deleted after seven days, and after 30 days once a payment was attempted. Wallet and transaction records — including paid top-ups and promotional bonus grants — are retained as required for tax, accounting, and legal purposes. Uploaded registry files are replaced by your next upload for the same area code and are deleted with your account.

7. Security

We implement reasonable measures to protect information.

8. Your Rights

You may have rights to access, correct, or delete certain personal information. Account holders can delete their account themselves from the portal home page: we then remove every private detail (sign-in, API key, uploaded registry lists, connected CRM access, verification sessions) and keep only the billing and compliance records the law requires us to retain. California residents may have rights under the CCPA/CPRA, including the right to know, delete, and opt out of the sale or sharing of personal information — we do not sell personal information. Requests may be submitted to the contact address below. We will respond within applicable legal timelines. See also: California Privacy Rights (CCPA).

Children: The Service is not directed to individuals under 13 years of age.

Security incidents: We will notify affected customers of confirmed security incidents affecting their data as required by applicable law.

9. International Data Transfers

Information may be processed in the United States and by service providers in other jurisdictions.

10. Changes to This Policy

We may update this Policy. Continued use constitutes acceptance.

11. Contact

Privacy inquiries: