Privacy Policy for Quantum AI App

Last updated: September 20, 2025

Introduction

This Privacy Policy explains how the Quantum AI App (the Chrome extension and associated agent features) collects, uses, and protects your information. By installing or using the App, you agree to this Policy.

Scope and Single Purpose

Quantum AI is a single-purpose extension: an agentic crypto wallet with built-in AI apps that analyze pages and help execute on-chain tasks you request. All privileged actions occur under your explicit control.

Data We Collect and Process

Data stored locally on your device

• Preferences and UI settings (language, theme, toggles) via chrome.storage and/or localStorage.
• Panel and tab state (UI context) via chrome.storage.session (ephemeral/volatile).
• Conversations with agents stored locally. By default, we do not use your conversations to train models.
• Installation ID generated locally to differentiate your extension instance.
• Wallet data (keys/seed) encrypted locally; never sent to our servers.

Data from your explicit actions

• Page content and selections captured only when you trigger a feature (toolbar click or context menu).
• Page metadata (title, normalized URL) and, if required by a specific AI app, visible image URLs and page text (capped for performance).
• On-chain context strictly required to prepare/sign transactions (e.g., public key, amounts), after your explicit approval.

Data sent to our servers (limited)

• API requests to allowed hosts to fetch quotes, obtain blockhashes, relay signed transactions you approve, or run AI-app workflows.
• Minimal technical logs (timestamps, endpoint paths, status codes) for reliability and abuse prevention. No wallet secrets or sensitive PII.
• Inaccuracy reports (if you submit one) may include the flagged message and a short context window, along with your auth token if logged in, to help us investigate.

Wallet Security

• Local-only key handling: Private keys and seed phrases are encrypted client-side (AES‑GCM 256, PBKDF2 with 310,000 iterations, unique salt) and kept in an offscreen document during an unlocked session.
• Approvals required: Every signing/transaction submission requires explicit user approval in a dedicated confirmation window.
• Session lock: Locking clears sensitive material from memory and closes the offscreen document.
• Backups: Export/import is encrypted with your password. You control your backup files.

Browser Permissions (Plain Language)

The App requests only the browser permissions needed to deliver the features you choose. These permissions allow the App to show UI in the side panel, respond to your context‑menu clicks, and—when you ask—read just the relevant parts of the current page to help an agent. They do not give us access to your private keys, personal files, or background browsing history.

• Actions run only after your explicit gesture (e.g., clicking the toolbar icon or a context‑menu item).
• Page content is processed solely for the feature you triggered and is not collected in the background.
• Cryptographic operations happen locally; sensitive material never leaves your device.

Third‑Party Services (Categories)

To provide requested features, the App may connect to a small number of services such as:

• Blockchain quote and routing providers (e.g., to fetch swap quotes or recent block data).
• Blockchain explorers and public APIs (read‑only market or mempool information).
• Content storage/CDN for static assets required by specific AI apps.
• Our backend to orchestrate AI‑app workflows you trigger or to relay transactions you approve.

We limit connections to what’s necessary for the features you use, and we may update specific providers over time to maintain reliability and security. Your private keys and seed phrases are never shared with these services.

Cookies and Tracking

• No advertising or tracking cookies are used within the extension.
• We use chrome.storage and localStorage for app state only.
• Metrics: We may collect opt‑out, privacy‑preserving metrics to improve reliability and detect abuse.

Data Retention

• Conversations and UI state: remain on your device until you delete them or uninstall.
• Server-side technical logs: retained for a limited, proportionate duration for reliability and security.
• Backups: under your control (encrypted files you export/import).

Your Rights

• Access/Rectification/Deletion: manage local data directly; for server-side items (e.g., submitted reports), contact us.
• Portability and objection: available where applicable by law.

International Transfers and Legal Bases

• Legal bases: contract (service provision), legitimate interests (security, quality), and consent where required.
• If processing occurs outside your jurisdiction, we apply appropriate safeguards (e.g., Standard Contractual Clauses) when required.

Children’s Privacy

The App is not intended for individuals under 18 years of age. We do not knowingly process data of minors.

Changes to This Policy

We may update this Policy from time to time. We will update the “Last updated” date above and notify you of significant changes via the App or our website.

Contact Us

Controller: INMANENCIA, 128 RUE LA BOETIE, PARIS — Email: contact@ppline.app