Privacy policy
Thank you for visiting our website quanta-labs.ai and for your interest in our company.
The protection of your personal data, such as date of birth, name, telephone number, address, etc., is important to us.
The purpose of this privacy policy is to inform you about the processing of your personal data that we collect from you when you visit our site. Our data protection practices are in accordance with the legal regulations of the Swiss Federal Data Protection Act (FADP) and the EU's General Data Protection Regulation (GDPR). The following data protection declaration serves to fulfil the information obligations arising from the FADP and the GDPR. These can be found, for example, in Art. 19 ff. FADP as well as Art. 13 ff. of the GDPR.
Owner or responsible person
The controller within the meaning of Art. 5 let. j FADP or Art. 4 no. 7 GDPR is the person who alone or jointly with others decides on the purposes and means of the processing of personal data. The controller pursuant to Art. 4 No. 7 GDPR is also the recipient of the personal data within the meaning of Art. 4 No. 9 GDPR. Any third party recipient shall be identified separately.
With regard to our website, the owner or responsible person is:
Blorange AI AG
Oechsli 7
8807 Freienbach
Switzerland
E-mail: info@quanta-labs.ai
Tel: +491603750476
Provision of the website and creation of log files
Each time our website is accessed, our system automatically collects data and information from the device (e.g. computer, mobile phone, tablet, etc.) used to access it.
What personal data is collected and to what extent is it processed?
(1) Information about the browser type and version used;
(2) The operating system of the retrieval device;
(3) Host name of the accessing computer;
(4) The IP address of the retrieval device;
(5) Date and time of access;
(6) Websites and resources (images, files, other page content) accessed on our website;
(7) Websites from which the user's system accessed our website (referrer tracking);
(8) Message whether the retrieval was successful;
(9) Amount of data transmitted
This data is stored in the log files of our system. This data is not stored together with the personal data of a specific user, so that individual site visitors cannot be identified.
Legal basis for the processing of personal data
Personal data is processed in accordance with the principle of legality (Art. 6 para. 1 FADP) and the principle of good faith (Art. 6 para. 2 FADP or Art. 2 CC) as well as Art. 6 para. 1 lit. f GDPR (legitimate interest).
Purpose of data processing
The temporary (automated) storage of data is necessary for the course of a website visit in order to enable delivery of the website. The storage and processing of personal data is also carried out to maintain the compatibility of our website for as many visitors as possible and to combat abuse and eliminate malfunctions. For this purpose, it is necessary to log the technical data of the accessing computer in order to be able to react as early as possible to display errors, attacks on our IT systems and/or errors in the functionality of our website. In addition, we use the data to optimise the website and to generally ensure the security of our information technology systems.
Duration of storage
The deletion of the aforementioned technical data takes place as soon as they are no longer required to ensure the compatibility of the website for all visitors, but no later than 3 months after accessing our website.
Possibility of restriction, objection, correction and deletion
You may at any time request the restriction of processing pursuant to Art. 18 GDPR or object to processing pursuant to Art. 21 GDPR as well as request the correction or deletion of data pursuant to Art. 16 or 17 GDPR. You can find out which rights you have and how to exercise them in the lower section of this privacy policy.
Cookies
Cookies are small text files that a website stores in your browser. We use as few as possible and none for analytics, tracking or advertising.
This website (quanta-labs.ai)
This website sets no cookies.
The Blorange app (app.quanta-labs.ai)
The app sets only cookies that are strictly necessary to sign you in and keep you signed in:
- sb-…-auth-token (can be split into parts ending in .0, .1 and so on): holds your signed-in session. Set when you sign in, deleted when you sign out. Kept for up to 400 days and renewed while you use the app.
- sb-…-auth-token-code-verifier and related cookies ending in code-verifier: a random one-time value that protects the links in our sign-up and password reset emails against misuse. Set when you request such an email. Contains no personal data.
All of them are first-party cookies of Blorange, set through our authentication provider Supabase. They are restricted to our own domain and, on the live app, to encrypted connections. We use no third-party cookies.
Legal basis
These cookies are strictly necessary to provide the service you request, so they need no consent (§ 25 para. 2 no. 2 TDDDG; Art. 45c FMG). The processing of the session data is based on Art. 6 para. 1 lit. b GDPR (performance of a contract) and Art. 6 para. 1 FADP.
Your choice
You can delete or block cookies in your browser settings at any time. If you block them, you cannot sign in to the app. Should we ever want to use cookies that are not strictly necessary, for example for analytics, we will ask for your consent first, with a clear option to refuse.
Special functions of the website
Our site offers you various functions, during the use of which personal data is collected, processed and stored by us. We explain below what happens to this data:
Contact form
What personal data is collected and to what extent is it processed?
The details you enter in the contact form on quanta-labs.ai/contact: your name, email address, company (optional), the topic and your message. The form sends them to our inbox as one email through our email provider Resend (see Service providers). The website itself does not store them.
Legal basis for the processing of personal data
Art. 6 para. 1 lit. b GDPR (steps prior to a contract, e.g. a demo request) and Art. 6 para. 1 lit. f GDPR (our legitimate interest in answering enquiries), as well as Art. 6 para. 1 and 2 FADP.
Purpose of data processing
We use the data only to answer your request and, where you ask for it, to prepare a demo or an offer. We reply by email to the address you provide. We do not send you an automatic confirmation.
Duration of storage
We keep the email as long as it is needed to handle your request and any business relationship that follows from it, and delete it afterwards unless legal retention periods apply.
Possibility of restriction, objection, correction and deletion
You may at any time request the restriction of processing pursuant to Art. 18 GDPR or object to processing pursuant to Art. 21 GDPR as well as request the correction or deletion of data pursuant to Art. 16 or 17 GDPR. You can find out which rights you have and how to exercise them in the lower section of this privacy policy.
Necessity of providing personal data
Using the contact form is voluntary; you can also write to us by email. Name, email address, topic and message are needed so that we can answer you.
Login area / Registration
Scope of personal data processing and personal data collected
The registration and login details you have entered with us or have been provided to you.
Legal basis for the processing of personal data
Personal data is processed in accordance with the principle of legality (Art. 6 para. 1 FADP) and the principle of good faith (Art. 6 para. 2 FADP or Art. 2 CC) as well as Art. 6 para. 1 lit. b FADP (implementation of (pre)contractual measures).
Purpose of data processing
You have the option of using a separate login area on our website. In order for us to check your authorisation to use the protected area or the protected documents, you must enter your login data (e-mail or user name and password) in the corresponding form. If required, we can send you your login data or the option to reset the password by e-mail on request.
Duration of storage
The data collected will be stored for as long as you maintain a user account with us.
Possibility of restriction, objection, correction and deletion
You may at any time request the restriction of processing pursuant to Art. 18 GDPR or object to processing pursuant to Art. 21 GDPR as well as request the correction or deletion of data pursuant to Art. 16 or 17 GDPR. You can find out which rights you have and how to exercise them in the lower section of this privacy policy.
Necessity of providing personal data
Certain pages and their contents are not publicly accessible. Via the login area on our site, certain users can gain access to the protected area. The use of the content protected by the login area is not possible without entering personal data. If you wish to use our login area, you must fill in the fields marked as mandatory (user name and password). The entry of the data requires the existence of a user account. Registration is not possible if the data you have entered is incorrect. If the data you enter is incorrect or not entered at all, the protected area cannot be used. However, the rest of the site can still be used without a login.
Disclosure of information to third parties
Personal data is processed in accordance with the principle of legality (Art. 6 para. 1 FADP) and the principle of good faith (Art. 6 para. 2 FADP and Art. 2 CC).
The disclosure of information to third parties depends on the scope of the activities or offers of our website or our business model described below.
As a matter of principle, we only keep your information for as long as necessary and treat it confidentially. Exceptions to this are the transfer of personal data to debt collection service providers, to public bodies and authorities and to private individuals, who have a right to it due to legal regulations, court decisions or official orders as well as the transfer to authorities for the purpose of initiating legal proceedings or for law enforcement purposes if our legally protected rights are attacked.
Analytics
We want to know how our website and app are used without tracking you. We therefore use no analytics cookies, no advertising trackers and no cross-site profiles.
Vercel Web Analytics and Speed Insights
On the website and in the app we use Vercel Web Analytics and Vercel Speed Insights of Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. They count page views and measure loading times. Visitors are recognised only through a hash of the request that is discarded within 24 hours; no cookies are set and no data is stored on your device. Vercel records the page, the referring website, country, browser, operating system and device type, and provides us only with aggregated figures. In the app, names of agencies and brands are removed from the page address before it is sent.
The legal basis is our legitimate interest in a functioning and improving website (Art. 6 para. 1 lit. f GDPR, Art. 6 para. 1 and 2 FADP). Further information: https://vercel.com/docs/analytics/privacy-policy
PostHog (app only)
For the app we use PostHog, operated in the EU (PostHog Inc., data hosted in Frankfurt, Germany), to understand how agencies use Blorange, e.g. how many brands are set up or brand profiles confirmed. Our servers send these events directly to PostHog with your user ID and the IDs of your organisation and brand; they contain no names, email addresses or content, and nothing is stored in your browser.
The legal basis is our legitimate interest in improving our product (Art. 6 para. 1 lit. f GDPR, Art. 6 para. 1 and 2 FADP). You can object at any time by writing to us. Further information: https://posthog.com/privacy
Service providers
We use the following providers, who process personal data on our behalf and under our instructions:
- Vercel Inc. (USA): hosting of the website and the app; the app's server functions run in Frankfurt, Germany.
- Supabase Inc. (USA): database, sign-in and file storage of the app, hosted in Frankfurt, Germany.
- Resend (Plus Five Five, Inc., USA): sending of emails, e.g. sign-up confirmations, password resets and contact form messages.
- PostHog Inc.: product analytics of the app, EU hosting (see Analytics).
- Google Cloud (Google Ireland Limited): AI models for the app's content features, for the brand materials an agency uploads.
Where a provider processes data outside Switzerland or the EU/EEA, the transfer relies on an adequacy decision (e.g. the EU-US Data Privacy Framework for certified companies) or on the EU standard contractual clauses.
Your rights
In principle, you have the following rights under the FADP and the GDPR:
-
Right to information (Art. 25 FADP and Art. 15 GDPR)
-
Right to rectification (Art. 6 para. 5 FADP and Art. 16 GDPR)
-
Right to erasure (Art. 6 para. 5 FADP and Art. 17 GDPR)
-
Right to restriction of processing (Art. 18 GDPR)
-
Right to data portability (Art. 28 FADP and Art. 20 GDPR)
-
Right to object (Art. 21 GDPR)
-
Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)
If you have any questions about data protection or wish to exercise your rights, please contact us at info@quanta-labs.ai.
Changes to this privacy policy
We reserve the right to adapt this privacy policy at any time in order to always comply with the current legal requirements or to implement changes to our services in the privacy policy, e.g. when introducing new services. The new privacy policy will then apply to your next visit.
Last updated: October 2026