1. Data controller
Qubit Page SRL, Romania, EU is the data controller for personal data processed via the CarphaCom platform. Contact: contact@qubitpage.com.
2. What we collect
Account data (email, name, billing details), platform usage telemetry (anonymised), and any data you upload as a merchant. We never collect biometric data or political/religious profile information.
3. Why we process it
To operate your store, process payments, provide customer support, comply with EU tax law, and improve the platform. Legal bases: contract performance, legal obligation, and legitimate interest.
4. Where data lives
All data is stored on bare-metal servers in EU datacentres (Romania, Netherlands). We never transfer personal data outside the EU. No US cloud providers are involved in core processing.
5. Your GDPR rights
You may request access, rectification, erasure, restriction of processing, data portability, and object to processing. Email contact@qubitpage.com — we respond within 30 days.
7. Retention
Account data: while your account is active + 30 days after closure. Order data: 10 years (EU tax law). Telemetry: 90 days. Backups: 30 days rolling.
8. Sub-processors
We use a small list of EU sub-processors (Stripe Ireland, PayU Romania, Hetzner & Vultr EU regions). Full list available on request.
9. Right to lodge a complaint
If you believe we are processing your data unlawfully, you may lodge a complaint with the Romanian Data Protection Authority (ANSPDCP) or your local supervisory authority.
Contact
Privacy questions or DSAR requests: contact@qubitpage.com.