Privacy policy

1. Who we are

CommandCC is operated by Quantinoid LLC, a company registered in the United Arab Emirates with operations in the United States and Europe. In this policy, “we”, “us” and “our” mean Quantinoid LLC, and “you” means anyone who uses CommandCC.

2. What we collect

We collect what we need to run the service: account information (name, email address and a password hash), the company and programme data you enter (such as risks, issues, decisions, budget figures and meeting notes), and usage data such as sign-in times, features used and browser type.

If you use voice or import a meeting, the recording is turned into text by your AI provider's speech service, or on your device (always on your device if your provider is Anthropic), and we do not store it. The text is kept only if you save it.

If you sign a record with CommandCC's e-signature, we keep your typed or drawn signature, the time you signed, and the IP address and browser user agent of the request you signed from. They are printed on the signature certificate, which is filed in the project's documents.

We do not collect data we do not need.

3. How we use it

We use data to run and improve CommandCC, to send the notifications you have opted into, to answer support requests, and to detect and prevent abuse.

We never sell your data. We never use your programme data to train AI models. We never share your data with third parties for marketing.

4. Data storage and security

Your data is stored on Supabase infrastructure. Data is encrypted in transit and at rest. Access to production systems is limited to authorised personnel using multi-factor authentication.

5. Sub-processors

We use a limited set of sub-processors to operate the service. Each one is bound by a data processing agreement and maintains its own security certifications. We have no AI sub-processor.

• Supabase, for the database, authentication and file storage
• Vercel, for application hosting and content delivery
• Resend, for transactional email

6. AI features and your own key

AI is optional, on Professional and Enterprise. Each person turns it on in their own settings and chooses whether to use it for agents and project updates, for speech to text, or both. A company admin can block AI for the company. The providers are Anthropic, OpenAI, OVHcloud, Mistral or Groq. When the desktop app is released, it will also be able to use another OpenAI-compatible service. Each person adds their own key for one of them.

When you record, import a meeting, ask a question or run an analysis, the request goes from your device directly to the AI provider you chose, under your own account and that provider's terms. It carries the recording or what the request needs from that programme's records, which can include the names and roles of team members and the names of milestones. We do not receive your key or your prompts, and we do not store recordings.

We store what you keep from AI. When you accept a proposed change, we store the change together with the passage of the meeting or request it was based on and, for a typed request, its first 500 characters. A health assessment is saved to the project when it runs.

On the web, keys are kept in the browser, encrypted with a key the browser cannot export. When the desktop and mobile apps are released, they will keep keys in the device's secure store. A key belongs to one person and is forgotten on that device when they sign out.

Speech, including dictation into a record's text fields, is turned into text by your provider's speech service or on your device, as you choose (always on your device if your provider is Anthropic, which has no speech service). In the browser, you can choose on-device speech, so the audio does not leave your device. The speech model is downloaded once from Hugging Face, without any audio or programme data. The desktop apps, which are coming soon, will also be able to turn speech into text on the computer itself.

7. Your rights

Ask us to export or delete your data. If you are in the European Union, you have rights under the GDPR, including the rights of access, rectification, erasure and data portability, and the right to object to processing.

To exercise these rights, email: support@noeldcosta.com

8. Cookies and browser storage

The CommandCC app keeps your sign-in session, your light or dark theme choice and whether the sidebar is collapsed in your browser's storage. During sign-in it also keeps a short-lived note of a failed attempt so it can show you a message. This website does not store anything in your browser. Neither uses tracking cookies, advertising cookies or third-party analytics.

9. Data retention

We keep your data while your account is active. When your account is deleted, we permanently delete your data within 30 days. Backups that contain deleted data are purged after 30 days. Audit logs are kept for 12 months.

10. Children

CommandCC is not intended for anyone under 16. We do not knowingly collect information from children.

11. Changes to this policy

We may update this policy from time to time. If we make significant changes, we will tell you by email or in the app. The date at the top of this page shows when the policy last changed.

12. Contact

If you have questions about this policy or how we handle your data, contact us.

Privacy questions: support@noeldcosta.com