Privacy Policy

Last Updated: September 19, 2025 Effective Date: September 19, 2025

1. Introduction

Welcome to EyeQuant. This Privacy Policy describes the policies and procedures of EyeQuant, Inc. (“we”, “our”, or “us”) on the collection, use, and disclosure of your information when you use our website (https://eyequant.com) and the services, features, and content we offer (collectively, the “Service”).

By accessing or using the Service, you signify that you have read, understood, and agree to the collection, storage, use, and disclosure of your personal information as described in this Privacy Policy and our Terms of Service.

2. Information We Collect

We collect information in a few different ways to provide and improve our Service.

Information You Provide to Us

We collect personal information you provide directly to us when you:

Create an account: We collect your full name, email address, password, work address, and company name.

Make a payment: Our third-party payment processor collects your payment card information. We do not store this information directly on our servers. For more information, please see the relevant provider in Appendix A.

Contact us for support: We may collect your name, email, and any other information you provide in your support request.

Information We Collect Automatically

When you use our Service, we may automatically collect certain information about your device and usage:

Usage Data: We collect information about how you interact with our Service, such as the features you use, the analyses you run, and the time, frequency, and duration of your activities.

Device Information: We collect information about the computer or mobile device you use to access our Service, including the hardware model, operating system and version, unique device identifiers, and browser type.

Log Information: Like most websites and services, we collect log files that may include your IP address, browser type, internet service provider, referring/exit pages, and date/time stamps.

Cookies and Tracking Technologies: We use cookies and similar tracking technologies to track activity on our Service and hold certain information. To learn more, please see Appendix B: Cookie Policy.

3. Customer Content and Service Data

This section describes how we handle the content you submit to us for analysis through the Service.

Definition of Customer Content “Customer Content” refers to the designs, images, mockups, screenshots, and other visual materials that you upload to the Service for the purpose of receiving an analysis. Customer Content is distinct from the personal account information and usage data described elsewhere in this policy.

Use of Customer Content We use your Customer Content solely to provide you with the Service. This includes processing the content with our proprietary AI to generate the analyses and reports you request.

Unless individually agreed otherwise, we do not use your Customer Content to train our AI models. Your proprietary designs will not be used to improve our general predictive algorithms.

Ownership and License You retain all intellectual property rights to your Customer Content. By using the Service, you grant EyeQuant, Inc. a limited, non-exclusive, worldwide, royalty-free license to use, reproduce, modify, and process your Customer Content solely for the purpose of operating and providing the Service to you.

Confidentiality We treat your Customer Content as confidential information. We will not disclose your Customer Content to any third party or use it for any purpose other than to provide the Service, except as required by law.

Retention of Customer Content Your Customer Content and the analyses generated from it are retained for the life of your account to allow you to access them at any time. You may delete your Customer Content and associated analyses from the Service at any time. When you delete your content, it is permanently removed from our active systems. Please note that deleted content may persist in our backup archives for a limited period during the lifetime of the current backup cycle. Upon deletion from the active system, it will no longer be part of our ongoing backup strategy and will be permanently erased when the youngest backup containing the data expires.

Use of Third-Party AI Services To provide certain features of the Service, such as generating descriptive analyses or summaries of your Customer Content, we may send your Customer Content to third-party AI service providers, including OpenAI, LLC (OpenAI API) and Google, LLC (Gemini API). To monitor the performance and reliability of our use of these services, we may use observability tools like LangSmith.

We have chosen providers who have committed to strong privacy and security standards. According to their data usage policies, these providers do not use content submitted via their APIs to train their AI models. Your Customer Content is processed to provide a result and is not retained for model improvement by these third parties. For more information, please see the relevant providers in Appendix A.

4. How We Collect Your Information

We collect or receive information about you in the following manner:

• When you fill out a registration form or otherwise submit personal information.
• Through your interaction with the website.
• From third-party sources, such as our advertising and market research partners, or from public sources.

5. Legal Basis for Processing Your Information

We process your personal information based on the following legal grounds:

To Fulfill Our Contract with You: Much of our processing of personal information is to meet our contractual obligations to our users, or to take steps at users’ request in anticipation of entering into a contract with them. For example, we process your information to create and manage your account and to process payments.

Legitimate Interests: We process your information for our legitimate interests and those of third parties, such as improving our Service, conducting marketing, and for security purposes, provided that these interests are not overridden by your rights and interests.

Your Consent: In some cases, we process personal information based on the consent you expressly grant to us at the time we collect such data. When we process your personal data based on your consent, you have the right to withdraw your consent at any time.

To Comply with Legal Obligations: We may process your personal information to comply with our legal obligations, for instance, to meet tax and accounting requirements.

6. How We Use Your Information

We use the information we collect for various purposes, including to:

• Provide, operate, and maintain our Service.
• Process your transactions, manage your account, and handle invoicing and payments.
• Improve, personalize, and expand our Service, including through usage analytics.
• Monitor the security and availability of our Service.
• Communicate with you, either directly or through one of our partners, for customer service and user support.
• Provide you with updates, newsletters, and other information relating to the Service, and for other marketing and promotional purposes.
• Enforce our Terms and Conditions and other policies.
• For compliance purposes, including enforcing our legal rights, or as may be required by applicable laws and regulations or requested by any judicial process or governmental agency.

7. Newsletters and Marketing Communications

If you subscribe to our newsletter or consent to receive marketing communications, we will use your name and email address to send you newsletters and other marketing materials about our products and services.

You can opt-out of receiving these communications at any time by clicking the “unsubscribe” link provided in every email or by contacting us directly. If you are an EyeQuant customer and you opt-out from receiving our marketing messages, you may continue to receive transactional and product-related messages regarding your account and the Service.

8. How We Share Your Information

We do not sell your personal information. We may share your information in the following limited circumstances:

Service Providers: We may share your information with third-party vendors and service providers that perform services on our behalf, such as analytics, payment recovery services, payment processing, data analysis, email delivery, hosting and data storage providers, and customer support. We may also share information with external parties if you have provided your consent or if allowed due to a legitimate interest. We require such third parties to use the personal information we transfer to them only for the purpose for which it was transferred and not to retain it for longer than is required for fulfilling the said purpose. For a list of our key third-party service providers, please see Appendix A.

For Legal Reasons: We may disclose your information if required to do so by law or in the good faith belief that such action is necessary to comply with a legal obligation, protect and defend our rights or property, prevent fraud, or protect the personal safety of users or the public.

Business Transfers: If we are involved in a merger, acquisition, or asset sale, your personal information may be transferred as a business asset.

9. Data Retention

We will retain your personal information for as long as is necessary to fulfill the purposes for which it was collected, to comply with our legal obligations (for example, we are required to retain your data for 10 years to comply with applicable tax/revenue laws), resolve disputes, and enforce our legal agreements and policies.

10. Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information. These may include the right to:

• Access a copy of your personal data.
• Request correction or rectification of your personal data.
• Request erasure or deletion of your personal data.
• Object to the processing of your personal data.
• Request the restriction of processing of your personal data.
• Request to receive your data in a structured, commonly used, and machine-readable format (data portability).

To exercise any of these rights, please contact us at the email address provided below. We will respond to your request in accordance with applicable law. If you withdraw your consent, your data will no longer be processed for the purpose to which you agreed and will be deleted, provided there is no other legal basis (such as contract fulfillment or legal retention obligations) for its continued processing.

Do note that if you do not allow us to collect or process the required personal information or withdraw the consent to process the same for the required purposes, you may not be able to access or use the services for which your information was sought.

You also have the right to lodge a complaint with a supervisory authority or other relevant data protection authority, in particular in the country of your residence, your place of work, or the location of the alleged infringement, if you believe that the processing of your personal data infringes applicable data protection laws.

We will not discriminate against you for exercising any of your privacy rights.

11. Cookies

To learn more about how we use cookies and your choices in relation to these tracking technologies, please refer to Appendix B: Cookie Policy.

12. Analytics and CRM Services

We use third-party analytics and customer relationship management (CRM) services to help understand your usage of our services, manage our communications with you, and improve the Service. These services may use cookies and other tracking technologies to collect information about your use of our website and services.

For a detailed list of these providers and how we use them, please see Appendix A: Third-Party Service Providers.

13. Information for Job Applicants

We thank you for your interest in a career with EyeQuant, Inc. This section describes how we collect, use, and handle the personal information you provide when you apply for a position with us.

Information We Process

In the course of your application, we process personal information that you provide to us in your application materials and during the hiring process. This may include:

Contact Information: Your name, email address, phone number, and mailing address.

Application Documents: Your resume, CV, cover letter, academic transcripts, and any references or certificates you provide.

Publicly Available Information: We may process career-related information that you have made publicly available, for example, through a professional social media network.

Interview Information: Notes and feedback from interviews and communications related to the application process.

How We Use Applicant Information

We process your personal application data for the sole purpose of evaluating your qualifications and candidacy for current and future employment opportunities within our company.

How We Share Applicant Information

Your application data is shared internally only with those company departments and personnel responsible for the specific application process, such as the human resources department and the hiring managers in the relevant departments. Your information is not shared with third parties for other purposes, with the exception of recruitment agencies or ‘headhunters’ who may be contracted by us to assist in filling a vacancy.

Retention of Applicant Information

As a general rule, we will delete your personal application data three months after the completion of the application process. This does not apply if legal requirements prevent deletion, if continued storage is necessary for legal purposes, or if you have expressly consented to a longer storage period.

If we believe your profile may be a good fit for future job openings, we will ask for your explicit consent to retain your application data for an extended period, such as 12 months.

14. Information for Business Partners and Suppliers

If you represent one of our business partners or suppliers, we may process your personal information, such as your contact details (name, email, phone number) and professional information, to manage our business-to-business relationship with you. This processing is necessary for the fulfillment of our contracts, management of our vendor relationships, purchasing, and processing of payments. The data retention periods for this information are in line with our legal storage and archival requirements, typically 10 years.

15. Data Processing for Business Customers

When you, as a business customer, use our Service to analyze “Customer Content,” your company is the ‘data controller’ and EyeQuant, Inc. acts as the ‘data processor’ on your behalf for this content.

Our processing of your Customer Content is governed by the agreement between your company and us. For customers subject to data protection laws like the GDPR, we offer a Data Processing Addendum (DPA) that details our data processing obligations. Our DPA is available to all customers and can be requested upon contract formation or by contacting us at the email address below.

16. International Data Transfers

Your information, including personal data, may be transferred to — and maintained on — computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those of your jurisdiction. As EyeQuant, Inc. is based in the United States, your information will be processed in the United States. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy.

17. Security

The security of your information is important to us. We use commercially reasonable security measures to protect your information from loss, misuse, and unauthorized access or disclosure. However, please be aware that no security measures are perfect or impenetrable, and we cannot guarantee absolute security.

18. Children’s Privacy

Our Service is not intended for use by children under the age of 18. We do not knowingly collect personal information from children under the age of 18. If we become aware that a child under the age of 18 has provided us with personal information, we will take steps to delete such information.

19. Changes to This Privacy Policy

We may modify this Privacy Policy at any time. We will post the revised Privacy Policy on this page and update the “Last Updated” date. Your continued use of the Service after the revised Policy has become effective constitutes your acceptance of the new terms. We recommend that you periodically review this page.

20. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us.

EyeQuant, Inc. is registered in the United States.

Registered Office: 838 Walker Road, Suite 21-2, Dover, Delaware, United States of America, 19904

Mailing Address:
EyeQuant, Inc.
PO Box 13167
Research Triangle Park, NC 27709
United States of America

For inquiries specifically related to data protection, please direct your communication to our data protection contact at: contact@eyequant.com

Appendix A: Third-Party Service Providers

We use various third-party services to operate and improve our Service. Below is a list of our key service providers and a description of how we use them.

Analytics and Monitoring

Google Analytics Our website uses Google Analytics, a web analytics service by Google, Inc. (“Google”). Google Analytics uses “cookies,” which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website will be transmitted to and stored by Google on servers in the United States. We have enabled IP anonymization for Google Analytics. This means that your IP address will be truncated by Google within Member States of the European Union or in other states party to the Agreement on the European Economic Area before being transmitted to the U.S. Only in exceptional cases will the full IP address be transmitted to a Google server in the U.S. and truncated there. Google will use this information on our behalf for the purpose of evaluating your use of the website, compiling reports on website activity, and providing us with other services relating to website activity and internet usage. You can prevent the collection of the data generated by the cookie and related to your use of the website (including your IP address) by Google, as well as the processing of this data by Google, by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout.

PostHog For our customer application, we use PostHog, a product analytics platform, to monitor application performance and track issues. This helps us ensure the stability and reliability of our Service. PostHog captures usage data and error information within the application. This data is processed to help us identify, diagnose, and resolve technical problems to improve your experience. For more information on how PostHog handles data, you can review PostHog’s privacy policy.

Grafana Cloud We use Grafana Cloud as an observability platform to monitor the health and performance of our infrastructure and applications. It processes metrics, logs, and traces to help us visualize system activity and detect issues. For more information on how Grafana Labs handles data, you can review their Privacy Policy.

Customer Relationship Management (CRM)

HubSpot We use HubSpot as our customer relationship management (CRM) platform. When you interact with our website, for example by submitting a contact form or requesting information, the data you provide is stored in HubSpot. We use this information to manage our communications with you, provide effective customer support, and send you information about our services. You can opt-out of marketing communications at any time by following the unsubscribe instructions in those communications. For more details, you can review HubSpot’s privacy policy.

Payment Processing

We use third-party payment processors to handle payment card information securely. We do not store your payment card information directly on our servers. Our primary providers include:

Stripe: We use Stripe for payment processing. Stripe is a global online payment services provider that allows us to securely accept and manage customer payments. When you make a payment, your payment card details are provided directly to Stripe via a secure connection. EyeQuant does not store your full payment card information on its servers. Stripe is PCI-compliant and handles your sensitive financial data in accordance with their security and privacy policies. For more information, you can review Stripe’s privacy policy.

AllInOne Accounting: We also use AllInOne Accounting to facilitate customer transactions and manage financial operations. AllInOne Accounting acts as a payment services provider to process payments securely. For more details on how AllInOne Accounting handles your data, we recommend reviewing their privacy policy.

AI and Machine Learning Services

We use the following third-party AI services to process your Customer Content to power certain analytical features.

OpenAI API (OpenAI, LLC): We use the OpenAI API to access large-scale language models. When you use features that leverage this technology, we may send your Customer Content to OpenAI to generate analyses or summaries. According to OpenAI’s API data usage policy, they do not use data submitted via their API to train their models. You can review their policy for more details.

Gemini API (Google, LLC): We use the Google Gemini API to access Google’s family of generative AI models. Similar to our use of OpenAI, certain features may send your Customer Content to Google for processing to provide a result. According to Google’s policies, data from their enterprise-level APIs is not used for model training. You can review their data usage terms for more information.

LangSmith (LangChain, Inc.): We use LangSmith as an observability and debugging platform for our LLM applications. LangSmith helps us monitor the performance, trace the execution, and ensure the reliability of our interactions with AI services like OpenAI and Gemini. LangChain acts as a data processor on our behalf and is committed to strong privacy and security. According to their policies, they do not use customer data from LangSmith to train any models, and we retain ownership of all data processed through the service.

Infrastructure Providers

We use third-party infrastructure providers to host our applications, run computations, and store data.

Modal: We use Modal to manage and scale our cloud infrastructure for high-performance computing tasks. Modal processes data to execute our code and applications securely in the cloud. For more details on their data practices, please review Modal’s Privacy Policy.

Amazon Web Services (AWS): We use Amazon Web Services (AWS) for server hosting and cloud infrastructure. Our servers are located in the Ireland (EU) region. For more information on how they handle data, please review the AWS Privacy Notice.

Appendix B: Cookie Policy

Last Updated: September 17, 2025

What Are Cookies?

A cookie is a small text file that a website stores on your computer or mobile device when you visit the site. It enables the website to remember your actions and preferences (such as login, language, and other display preferences) over a period of time, so you don’t have to keep re-entering them whenever you come back to the site or browse from one page to another.

How We Use Cookies

We use cookies for a variety of reasons detailed below. Importantly, cookies help us provide, protect, and improve our Service. We classify our cookies into the following categories:

Technical Cookies (Strictly Necessary) These cookies are essential for you to browse the Service and use its features. They are used for core functionalities such as user authorization, security controls, and the general provision of our services. Without these cookies, the services you have asked for cannot be provided. Because these cookies are strictly necessary to deliver the Service, you cannot refuse them.

Analytics Cookies (Performance) These cookies collect information about how you use our Service, for instance, which features you use most often and if you get error messages. We use this information to track issues, monitor the performance of our Service, and make improvements. The information collected by these cookies is aggregated and used to improve how the Service works. For example, we use analytics cookies from our partners like Google Analytics and PostHog to understand user behavior and identify technical problems.

Your Choices and How to Manage Cookies

You have the right to decide whether to accept or reject certain cookies. You can exercise your cookie preferences by setting or amending your web browser controls. If you choose to reject cookies, you may still use our Service, though your access to some functionality may be restricted.

Most web browsers provide controls that allow you to see what cookies you have, delete them individually, or block cookies from particular or all websites.