Privacy Policy

Your privacy is important to us. This policy explains how we collect, use, and protect your information.

Last Updated: October 17, 2026

1. Introduction

QCEgateway ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services, including our Unified Gateway, Global CDN, Edge Compute, Agent Runtime, Identity & Access, Object Storage, and Observability services.

By accessing or using our services, you agree to this Privacy Policy. If you do not agree with the terms of this policy, please do not access our services.

2. Information We Collect

2.1 Information You Provide

  • Account Information: Name, email address, phone number, company name, job title, and billing information when you create an account or request our services.
  • Communication Data: Information you provide when contacting us through forms, email, phone, or our agent runtime, including support requests and feedback.
  • Business Data: Project requirements, technical specifications, and business information you share during consultations and service delivery.
  • Payment Information: Credit card details, billing addresses, and transaction history processed through our secure payment providers.

2.2 Information Collected Automatically

  • Usage Data: Pages visited, features used, time spent on our platform, click patterns, and navigation paths.
  • Device Information: IP address, browser type, operating system, device identifiers, and screen resolution.
  • Log Data: Server logs, error reports, and system performance data to maintain and improve our services.
  • Analytics Data: Aggregated metrics about service usage, performance, and user behavior patterns.

2.3 Cookies and Tracking Technologies

We use cookies, web beacons, and similar technologies to:

  • Remember your preferences and settings
  • Authenticate your identity and maintain session security
  • Analyze usage patterns and improve our services
  • Deliver relevant content and communications

You can control cookie preferences through your browser settings. However, disabling certain cookies may limit functionality.

3. How We Use Your Information

3.1 Service Delivery

  • Provision and maintain our Unified Gateway, Global CDN, Edge Compute, Agent Runtime, Identity & Access, Object Storage, and Observability services
  • Process transactions and send related information
  • Provide customer support and respond to inquiries
  • Deliver agent-assisted assistance through our platform agents

3.2 Service Improvement

  • Analyze usage patterns to enhance user experience
  • Develop new features and services based on user needs
  • Train and improve our AI and machine learning models
  • Conduct research and analytics to optimize performance

3.3 Communications

  • Send service updates, security alerts, and administrative messages
  • Provide newsletters, marketing communications, and promotional offers (with consent)
  • Respond to comments, questions, and support requests

3.4 Security and Compliance

  • Detect, prevent, and address security incidents and fraud
  • Enforce our terms of service and acceptable use policies
  • Comply with legal obligations and regulatory requirements

4. Information Sharing

4.1 Service Providers

We share information with trusted third-party vendors who assist in operating our platform, including cloud infrastructure providers, payment processors, analytics services, and customer support tools. These providers are contractually obligated to protect your data. Customer payloads are never shared with third parties, subject to the QCEgateway Zero-Egress Guarantee.

4.2 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the business transaction. We will notify you of any such change.

4.3 Legal Requirements

We may disclose information when required by law, court order, or government request, or when necessary to protect our rights, safety, or property.

4.4 With Your Consent

We may share your information with third parties when you have given explicit consent for such sharing.

5. Data Residency and Zero-Egress

QCEgateway operates a zero-egress data architecture. When you provision a workspace, you select a jurisdictional boundary (for example, Singapore, Frankfurt, or Virginia). The following guarantees apply:

  • Boundary Persistence: Customer payloads remain within the selected jurisdictional boundary. QCEgateway does not replicate payloads across jurisdictional boundaries.
  • No Third-Party Telemetry: Customer payloads are not transmitted to third-party telemetry, analytics, or logging endpoints.
  • Control-Plane Isolation: Control-plane operators do not inspect customer payload contents. Operational telemetry is metadata only.
  • Cross-Jurisdictional Metadata: Metadata required for billing, audit, and identity is transmitted only over mutually authenticated channels, and is subject to the dual-HQ jurisdiction terms in our Terms of Service.

6. Data Security

We implement robust security measures aligned with our zero-trust High Value Data (HVD) security framework, including:

  • Encryption: Data encrypted in transit (TLS 1.3) and at rest (AES-256)
  • Quantum-Resilient Key Custody: Post-quantum key exchange and signature schemes for long-lived secrets
  • Access Controls: Role-based access control (RBAC) with principle of least privilege
  • Multi-Factor Authentication: Required for all administrative access
  • Monitoring: 24/7 security monitoring and intrusion detection
  • Regular Audits: Periodic security assessments and penetration testing

For more details, please review our Security Policy.

7. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law. Retention periods vary based on:

  • Active account status and service usage
  • Legal, tax, and regulatory requirements
  • Dispute resolution and enforcement of agreements
  • Legitimate business needs

When data is no longer needed, we securely delete or anonymize it in accordance with industry best practices.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

  • Access: Request a copy of the personal data we hold about you
  • Rectification: Request correction of inaccurate or incomplete data
  • Erasure: Request deletion of your personal data under certain circumstances
  • Restriction: Request limitation of processing in specific situations
  • Portability: Receive your data in a structured, machine-readable format
  • Objection: Object to processing based on legitimate interests or direct marketing
  • Withdraw Consent: Withdraw consent where processing is based on consent

To exercise these rights, contact us at privacy@qcegateway.com.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place for international transfers, including:

  • Standard Contractual Clauses approved by relevant authorities
  • Data processing agreements with service providers
  • Compliance with applicable data protection frameworks
  • Zero-Egress boundary enforcement for customer payloads

10. Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact us immediately for removal.

12. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify you of material changes by posting the updated policy on our website and updating the "Last Updated" date. Continued use of our services after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: