Skip to content
QUANDIS

Privacy Policy

Last updated October 15, 2026

This policy explains how Quandis, Inc. (“Quandis”, “we”, “us”) handles personal information collected through www.quandis.com and its subdomains (the “Site”): what we collect, why, who we share it with, how long we keep it, and the choices and rights you have.

In short: we collect what you give us when you contact us or request a demo or trial, plus limited technical information needed to run and secure the Site. Analytics and advertising cookies stay off unless you allow them. We don’t sell personal information.

Scope: the Site, not our products

This policy covers the Site. It does not cover personal information that our customers process using Quandis products and services, such as the QBO platform, QDocs, Military Search, Bankruptcy Search, Title Direct, ADR, and DRA. For that information, Quandis acts as a service provider (or processor) on our customer’s behalf, under our agreement with that customer, and the customer’s privacy notice applies. If your information is in a system one of our customers runs on Quandis, please contact that organization; we will assist them as our agreement requires.

Military Search and Bankruptcy Search are business-to-business services, available only to organizations with a permissible purpose under applicable law. They are not offered to consumers.

Information we collect

Information you give us

  • Demo and contact requests: first and last name, work email, phone (optional), company, job title, role, the product you’re interested in, and your message.
  • Free trial requests: the same contact details, plus your industry, expected monthly volume, and your certification that your organization has a permissible purpose.
  • Partner referrals and other correspondence: whatever you include when you email us, such as a referred company’s contact details.
  • Support requests: your name, email, and the details of your request.

Please don’t send sensitive personal information (such as Social Security numbers or financial account numbers) through Site forms or email.

Information collected automatically

  • Request and security data. When you visit, our hosting and content delivery providers process your IP address, browser and device type, the pages you request, the referring page, and the time. We use this to deliver pages, keep the Site secure, and diagnose problems.
  • Bot protection. Our forms use Cloudflare Turnstile to tell people from automated abuse. Turnstile evaluates signals from your browser and IP address when you use a form. It’s strictly necessary for the forms to work and doesn’t use advertising cookies.
  • Campaign information. If you arrive from an ad or a tracked link, we note the campaign parameters in the link (such as utm_source or a Google click ID) and the page you landed on, for the length of your browser session. If you then submit a form, we save them with your request so we know which campaigns lead to conversations. If you don’t submit a form, they’re discarded when you close the tab.
  • Analytics and advertising, only with your consent. If you choose Allow analytics, we load Google Tag Manager, Google Analytics, and HubSpot tracking, and may load advertising conversion tags (for example, Google Ads). These use cookies and similar technologies to measure visits, page views, and form completions, and, for advertising, to measure which ads lead to inquiries. See Cookies and similar technologies.

Information from other sources

We may receive business contact information about you from partners who refer you to us, from event organizers, or from publicly available professional sources, and combine it with information you give us.

How we use information

Purpose Information used Legal basis (where GDPR or UK GDPR applies)
Respond to your request: schedule a demo, set up a trial, answer questions, provide support Information you give us Taking steps at your request before a contract; our legitimate interest in responding
Verify trial eligibility (permissible purpose) Trial request details Legal obligation; legitimate interests
Follow up about Quandis products and services relevant to your request Contact and request details Legitimate interests; consent where required. You can opt out at any time
Operate, secure, and improve the Site; prevent fraud and abuse Request, security, and bot-protection data Legitimate interests
Measure Site usage and marketing effectiveness Analytics and campaign data Consent (analytics and advertising cookies)
Comply with law, enforce our terms, and protect rights and safety Any of the above, as needed Legal obligation; legitimate interests

We don’t make decisions about you based solely on automated processing that produce legal or similarly significant effects.

How we share information

We don’t sell personal information, and we don’t share it for cross-context behavioral advertising without your consent. We share it only as follows:

  • Service providers that process it on our behalf and under contract:

    • Amazon Web Services (hosting, content delivery, form processing)
    • Cloudflare (form bot protection)
    • Google (Tag Manager, Analytics, and advertising measurement, only with your consent)
    • HubSpot (website analytics, only with your consent)
    • UptimeRobot (our public status page at status.quandis.com; API documentation pages fetch the current service status from it, which shares your IP address with the provider but sets no cookies)
    • Providers of email and communications tools

    Requests you submit are stored in our own QBO platform, which we operate on AWS.

  • Partners, when you ask to be connected with one or a partner referred you, so we can coordinate the introduction.

  • Legal and safety: when required by law, subpoena, or other legal process, or to protect the rights, property, or safety of Quandis, our customers, or others.

  • Corporate transactions: as part of a merger, acquisition, financing, or sale of assets, subject to this policy’s protections.

  • With your direction or consent.

Cookies and similar technologies

Type Examples When used Purpose
Strictly necessary Your cookie choice and display theme (stored in your browser’s local storage); Cloudflare Turnstile on forms; campaign parameters for the session Always Make the Site and its forms work and stay secure; remember your choices
Analytics Google Analytics (via Google Tag Manager), HubSpot Only after you choose Allow analytics Count visits, understand how pages are used, measure form completions
Advertising measurement Google Ads conversion tracking Only after you choose Allow analytics Measure which ads lead to inquiries

Your choices:

  • Change your mind at any time with Cookie settings at the bottom of every page. If you withdraw consent, we stop loading these tags, ask HubSpot to stop tracking, and reload the page without them.
  • Global Privacy Control. If your browser sends a Global Privacy Control signal, we treat it as a choice to reject analytics and advertising, and we don’t show the banner.
  • Do Not Track has no common standard, so we rely on Global Privacy Control and your banner choice instead.
  • Browser controls. You can also block or delete cookies in your browser settings.

How long we keep information

Information How long we keep it
Demo, trial, and contact requests While we’re in discussions with you and for a reasonable period afterward. If you become a customer, contact records are kept for the life of the relationship under our customer agreement. Prospect records are reviewed at least annually and deleted or de-identified when no longer needed
Form-processing logs 30 days
Analytics data According to the retention settings of the analytics tool, which we set to 14 months for Google Analytics
Records we must keep by law As long as the law requires

How we protect information

We use administrative, technical, and physical safeguards appropriate to the information, including encryption in transit (TLS) and at rest, access controls, and monitoring. Quandis maintains a SOC 2 Type 2 attestation report for the QBO platform, and an information security management system (ISMS) certified to ISO/IEC 27001:2022. Our security documentation and policies are available in the Quandis Trust Center. No method of transmission or storage is completely secure, but we work to protect your information and will notify you of a breach where the law requires.

Where information is processed

Quandis is based in the United States, and the Site and our systems are hosted in the United States. If you’re outside the United States, your information will be transferred to and processed in the United States. Where required, we rely on appropriate safeguards for these transfers, such as the European Commission’s Standard Contractual Clauses.

Your rights and choices

Depending on where you live, you may have the right to:

  • Know and access the personal information we hold about you, and get a copy in a portable format
  • Correct inaccurate information
  • Delete your information
  • Opt out of marketing communications (use the unsubscribe link in any marketing email, or contact us)
  • Opt out of “sale” or “sharing” of personal information, and of targeted advertising. We don’t sell personal information. Analytics and advertising tags load only with your consent, and you can withdraw it with Cookie settings or by enabling Global Privacy Control
  • Withdraw consent where we rely on it, without affecting earlier processing
  • Object to or restrict processing based on legitimate interests (GDPR and UK GDPR)
  • Appeal our decision on your request, where state law provides that right
  • Complain to your data protection authority, if you’re in the EEA, UK, or Switzerland

California residents. Under the California Consumer Privacy Act (CCPA), in the past 12 months we collected these categories of personal information:

  • identifiers, such as name, email, and IP address
  • professional or employment information, such as company and job title
  • internet or network activity, such as pages visited
  • approximate location derived from IP address

We collected them from the sources and for the purposes described above. We disclose them to the service providers listed above for those business purposes. We haven’t sold personal information, and we don’t share it for cross-context behavioral advertising unless you allow analytics and advertising cookies. We don’t knowingly sell or share the personal information of consumers under 16. We don’t use sensitive personal information to infer characteristics about you. We won’t discriminate against you for exercising your rights.

Making a request. Email info@quandis.com with “Privacy request” in the subject line, call 949.525.9000, or write to us at the address under Contact us, and tell us what you’d like us to do.

  • Verification: we’ll verify your request by matching information you provide against information we hold, and may ask for more.
  • Authorized agents: you may use one to submit a request on your behalf, with your signed permission.
  • Response times: we respond within the time the law requires: generally 45 days in the United States, and one month in the EEA and UK.

Children

The Site is for businesses and isn’t directed to children. We don’t knowingly collect personal information from anyone under 16. If you believe a child has given us personal information, contact us and we’ll delete it.

The Site links to other websites and services, such as the Trust Center and partner sites, whose privacy practices we don’t control. Please review their privacy policies.

Changes to this policy

We review this policy at least once a year and update it when our practices change. We’ll post the updated version here with a new “Last updated” date. If we make material changes, we’ll give additional notice, such as a banner on the Site, and ask for your consent again where the law requires.

Contact us

Questions or requests about this policy or your personal information:

Quandis, Inc.
30021 Tomas, Suite 200
Rancho Santa Margarita, CA 92688, USA
Phone: 949.525.9000
info@quandis.com

Policy revision history

Updated Name Title Update summary
10/15/2026 Eric Patrick CTO Approved for publication. Added phone and mailing address as request methods, and described SOC 2 as an attestation report and ISO/IEC 27001:2022 as a certified ISMS.
10/9/2026 Eric Patrick CTO Rewritten for the new website: consent banner and Global Privacy Control, named analytics and advertising tools, bot protection, scope (Site vs. products), retention, international transfers, and US state and GDPR rights.
6/12/2025 Rodney Cadwell CEO Refined Document
11/14/2024 Eric Patrick CTO Annual Review