Privacy Policy

01Introduction & Data Fiduciary Identity

QuantumAstra (“we,” “us,” or “our”) operates the decentralized quantum research collaboration platform. We are committed to safeguarding the personal data of all users (“Data Principals”) in strict accordance with the Digital Personal Data Protection Act, 2023 (DPDP Act, Act No. 22 of 2023) and global data protection standards (including the General Data Protection Regulation “GDPR”).

QuantumAstra acts as the Data Fiduciary for all personal data processed within the QuantumAstra research network, upholding statutory responsibilities regarding data minimization, purpose limitation, and timely erasure.

02Personal Data We Collect

We collect only the information strictly necessary to provide and operate the QuantumAstra research network:

• Google Single Sign-On Identity: Email address, verified full name, unique Google subject identifier, and Google avatar profile picture.
• Researcher Profile Information: Chosen unique handle (@username), professional role, headline, institutional affiliation, laboratory location, and researcher biography (“About”).
• Academic History & Interests: University degrees, fields of study, enrollment years, and quantum physics / algorithm specialization tags.
• User-Generated Content & Media: Research updates, simulation snippets, and media attachments uploaded to our isolated filesystem storage.
• Session Credentials: Cryptographically generated, HTTP-only session tokens (qa_session) to maintain authenticated sessions without storing plaintext passwords.

03Lawful Basis for Processing (Section 6, DPDP Act 2023)

Your personal data is processed exclusively on the basis of your freely given, specific, informed, and unambiguous consent provided during registration. You have the right to withdraw your consent at any time without affecting the lawfulness of processing based on consent prior to withdrawal.

04Storage & User-Isolated Architecture

All personal data is maintained locally in our high-performance SQLite database engine, and user uploads (profile photos, banner images, and post media) are stored in dedicated, isolated directory structures (storage/<userId>/).

Data isolation safeguards ensure that no user can traverse directory structures or access private researcher media belonging to other accounts.

05Rights of the Data Principal (Section 11-14, DPDP Act 2023)

Under applicable statutory regulations, you possess the following enforceable rights:

• Right to Access Information (Section 11): Right to obtain a summary of your personal data processed by us and the identities of any Data Processors.
• Right to Correction & Erasure (Section 12): Right to update outdated information or demand complete purging of your personal records and files. You may submit an erasure request directly via our Account Deletion Request Portal.
• Right of Grievance Redressal (Section 13): Right to have complaints resolved within 72 business hours by our appointed Data Protection team.
• Right to Nominate (Section 14): Right to nominate an individual to exercise privacy rights on your behalf in the event of death or incapacity.

06Inquiries, Grievance Redressal & Support

To exercise your statutory rights or submit a privacy grievance, contact our dedicated team: