Privacy Policy

01About this policy

This explains how Quant Suite handles information when you use the website or the apps — QuantPlot, QuantRecce and QuantCrew — when you buy a licence, or when you contact us. It describes how the apps work today.

Quant Suite is a product of Flusso Lighting Ltd, a company registered in England & Wales (no. 16271539), whose registered office is at 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ. In these documents “we”, “us” and “our” mean Flusso Lighting Ltd, trading as Quant Suite. You can reach us at contact@quant-suite.com. We are the controller of the personal information described here, except for the information a company puts into QuantCrew, which we handle on that company's behalf (see “QuantCrew is hosted”).

02Local-first by design

QuantPlot and QuantRecce store your projects and app data locally on your device, and once they've been opened online they keep working offline; signing in, sync and QuantPlot's Community Fixture Library need a connection. We do not access, inspect or collect the contents of your plots, recces, notes or other locally stored projects unless you deliberately give them to us — for example by e-mailing them to us, by signing in to QuantRecce (which carries its shorthand library to your account), or by turning on Plot sync or Recce sync (see “Optional sign-in (QuantPlot & QuantRecce)” below). This section does not apply to QuantCrew, which is a hosted service — see “QuantCrew is hosted” below.

In those two apps you can move your work between devices by exporting a backup file (.qplot or .qrec) and opening it on another device. Because that work lives on your device, clearing your browser or app storage, or losing the device, can remove locally stored data — so please keep your own backups of anything important.

03Optional sign-in (QuantPlot & QuantRecce)

Signing in is optional and off unless you choose it. QuantPlot and QuantRecce share one passwordless sign-in, with a one-time code sent to your e-mail address, so your own data can follow you between your devices. If you sign in, we process your e-mail address — to send the code, to identify your account and to match it to any licence you hold — and store:

• QuantPlot — only if you turn on Plot sync on a device: your plots, each with a small preview picture, and your libraries (favourites, custom fixtures, beams and machines, the fixtures you've hidden, and any grandMA fixture library you've imported), so they follow you between your devices. Deleting a plot that syncs removes it from your account too — at once, or, if that device is offline, signed out or has Plot sync off, the next time it syncs with your account — unless another of your devices has changed the plot in the meantime, in which case it stays in your account with those changes. Your other devices keep their own copies, and stopping Plot sync doesn't delete what is already in your account. A plot's background plan travels between your devices through temporary private storage in your account. Once a computer running QuantPlot's Auto Backup (which keeps backup files in a folder on that computer) has saved it in a backup file, your syncing devices delete it from that storage — the next time a device that has fetched it syncs, and in any case once it has been stored for 14 days. It is also deleted once no synced plot uses it. If none of your devices keeps backup files, it stays in that storage for as long as a synced plot uses it. Your own devices do this when they're online, so a plan stays until one of them next syncs, or until you delete your account. Plot sync is off until you choose it, and you can stop it on any device.

• QuantRecce — your library: the shorthand it learns when you correct or confirm a match (each phrase, with the item name and code it matched on your order form), the custom items you build, and your accessory rules, including built-in ones you switch off. These follow your account as soon as you sign in, including anything learned on that device beforehand. Your order forms themselves stay on your device. Please don't enter other people's personal details as shorthand.

• QuantRecce, if you turn on Recce sync on a device — your recces: their names and areas, the notes, kit lists (with the item names and codes from your order form), sketches and labels in them, when each was made, changed or archived, a fingerprint of each photograph, and a small square preview picture so the recce is recognisable on your other devices. Turning it on sends every recce on that device to your account and brings your account's recces down to it. Deleting a recce on a device that syncs, while that device is online, removes it from your account; copies already on your other devices stay there, and a recce deleted while offline stays in your account until you delete it on another device that has it, or delete your account. Recce sync is off until you choose it, separately on each device; you can stop it on any device, and stopping it doesn't delete what is already in your account.

• Photographs in a synced recce are uploaded to private storage in your account so your other devices can fetch them, and each is deleted from it once another of your devices has downloaded and verified its own copy. They are never readable by any other account. A photograph that no other device has collected stays in that storage — if you sync on only one device, for as long as Recce sync is on there — until it is collected, its recce is deleted, or you delete your account. Photos you add are resized and re-saved on your device first, which removes their location and other camera details. The small preview picture mentioned above is kept with the recce — so if a recce is of somewhere private, bear in mind a thumbnail of it stays in your account until you delete the recce.

If you never sign in to QuantPlot or QuantRecce, none of your work leaves your device in those apps. While they're open — when they start, when you come back to them, when they reconnect, when you sign in or out, and every half hour — they ask our server whether licences are in use. If you aren't signed in, that request carries no account and none of your work; if you are, it carries your sign-in, as every request from a signed-in app does. You can sign out at any time. You can delete your account and everything stored in it yourself while signed in — in QuantPlot, Edit Library → Delete account… (Edit Library is on Home, and under File ▾ in a plot; on a phone, Account → Delete account…); in QuantRecce, Account → Delete account… (at the foot of Home, or Library → Account) — or by e-mailing contact@quant-suite.com. QuantPlot and QuantRecce share one sign-in, so whichever way you do it, this deletes your synced data, files and Community Fixture Library records in both. It doesn't delete the record of any licence you've held (see “Licences and payments”). Work kept only on your devices isn't affected; you can remove that yourself. QuantCrew works differently — see “QuantCrew is hosted” below.

04Community Fixture Library (QuantPlot)

Browsing the Community Fixture Library and copying fixtures from it needs no account, and we don't record what you look at or copy.

If you share a fixture, its fixture data becomes public (see the Terms of Use), and we privately record which account shared it — so you can see and withdraw your own uploads, and so we can deal with misuse. That record is never shown to anyone or published with the fixture.

If you report a fixture, we privately record which account reported it and the reason and note you give, so one person can't report the same fixture repeatedly. Reports are seen only by us.

If you delete your account, these records are deleted with it. Fixtures you shared stay in the library with no link to you, because they were dedicated to the public domain when you shared them.

05QuantCrew is hosted

QuantCrew is a hosted web service, not an on-device app. It needs an account, and the productions, crews, schedules and any pay rates entered into it are stored on our servers rather than on your device.

If you've had a QuantCrew invitation, or your name is on a production's crew list, this section is for you — every QuantCrew invitation links here. A production company has put your details into QuantCrew to run its schedule. That company decides what is held and why, and we hold it for them, as their processor. Most crew never sign in at all.

What we hold about account holders: your e-mail address (or addresses) and name; your password as a cryptographic hash; your two-factor secret and recovery codes, if you turn two-factor sign-in on; the companies and productions you belong to, your role on each and any exceptions to it; the version of these terms you agreed to; and your sign-in sessions (for up to 30 days).

What a company enters about its crew: names — on the company's Core Team list, which is kept between jobs, and on each production; departments, roles and crews; who is booked where and when, including sixth and seventh days; weekly rates for each role, and the weekly rates and box money of heads of department; anything typed into titles, notes and alerts; and location names and addresses.

Invitations hold the invited e-mail address until the invitation is accepted or cancelled, or until 90 days after it lapses (an invitation lapses after 14 days). Once it's accepted, the address is removed and only a scrambled fingerprint of it is kept.

Security log: QuantCrew records sign-ins, failed sign-ins, lockouts, password changes and resets, name changes, agreement to these terms, refused pages, invitations, changes to access, exports, setup changes, and licence and billing events. Each entry says who and when, with a scrambled fingerprint of the network and of the sign-in session, and the browser and operating-system family (for example, Chrome on Windows) — your full IP address is never stored in it. To stop password guessing, the IP address of sign-in, sign-up and reset attempts is held briefly and deleted within a day, and repeated failed sign-ins to an address are counted against a scrambled fingerprint of it, kept for 30 days after the last failure.

Change history: each production keeps a record of names, notes and pay changes as they were made. It can't be edited, and it's kept until the production is deleted.

Who can see what: everyone on a production can see its crew names. Account e-mail addresses are shown only to the people who manage a production's access, and to the roles it allows to see contact details. Rates and box money are shown only to the roles a production allows to see money, and the change history only to its admins and senior roles. A company's Core Team list is shown to the company's owner and admins, and to whoever crews one of its jobs. We look at a company's QuantCrew data only when it asks us to help, to keep the service secure, or where the law requires it. Separately, to run licences and billing, our staff see each company's name, its owners' and account holder's e-mail addresses and its licence details (see “Licences and payments”).

Where: the application runs in Germany (Render, behind Cloudflare) and the database is in the United Kingdom (Supabase, London). E-mails — address-confirmation and password-reset codes, account notices, invitations and renewal reminders — are sent through Resend, and a reply to any of them comes to us at contact@quant-suite.com. QuantCrew contains no analytics, no advertising and no behaviour tracking.

Changing your name, password or sign-in e-mail address: do it yourself under Your account (select your name at the foot of the sidebar). Closing an account or getting a copy of your data: QuantCrew can't do these in the app yet — e-mail contact@quant-suite.com from the address you sign in with. A company's owner or admin can delete a production, and everything in it, in the app. When an account is closed, your identity is removed from your security-log entries (the entries themselves stay), and your name stays on crew lists and change histories until those productions are deleted. If your details are there because a company put them there, you can also ask that company.

06When you contact us

If you e-mail us or use the website's contact form, we receive what you send: your name and e-mail address, and — where you give them — your company or production, your department, the apps you're interested in, roughly how much you'd use them, and your message.

Only we see it. We use it to reply to you, and to shape the apps around the people who use them. It isn't shared or sold, and it doesn't put you on a mailing list.

If you use the website's feedback form (the Feedback button in each app opens it), we receive only the app you choose and what you write. It doesn't ask for your name or e-mail address, so we can't reply to it — unless you choose to send it from your own e-mail app instead, which shows us your address like any other e-mail.

Messages from the contact and feedback forms are delivered to our mailbox by Resend; when the contact form can't send a message itself, it opens your own e-mail app with the message filled in, and it reaches us like any other e-mail. Our mailbox is hosted by Fastmail. The website itself keeps no copy.

07Licences and payments

When we sell or grant a licence, we keep a record of it: the app, its term, its start and end dates, whether it's active, the e-mail address it's for, and our own notes about the sale. A QuantCrew company licence also records the e-mail address of the company's account holder, who gets QuantRecce with it, so we keep a QuantRecce licence for that address too. QuantPlot and QuantRecce licences are stored with Supabase in Frankfurt, and QuantCrew's in QuantCrew's own database. Our staff manage them on a licence screen that runs on QuantCrew's servers; for QuantPlot and QuantRecce it can read the licences and the e-mail addresses of accounts, and nothing else of yours.

If you pay for a licence, you pay through Stripe, on Stripe's own payment and customer-portal pages. Stripe collects your payment details (such as your card) and the name, e-mail address and billing details you give, takes the payment, and keeps the record of each payment, subscription and invoice for us. It also uses some of this for its own legal obligations, such as preventing fraud, as its own privacy policy explains. We never see or store your full card details.

So that a licence follows its payments, QuantCrew keeps a link to the subscription — Stripe's reference numbers for it and for you, its status, its billing period and any renewal or cancellation dates — and a record of each notification Stripe sends about it (never its contents). It reads your billing e-mail address from Stripe, without storing it, to send you one reminder 14 days before an annual subscription renews, and records when that reminder went and the date and price it gave.

08Hosting & security

To deliver and protect the website and apps, our hosting and database providers process standard request information: your IP address, the time of the request, the page or endpoint requested, basic browser request details, and security or abuse signals. This is ordinary server operation to run and secure the service — it is not used to profile you or monitor your behaviour.

Everything travels encrypted (HTTPS), stored data can be reached only by the people it belongs to or is shared with — and by us only in the cases this policy describes — and we collect as little as the apps need. No system is perfectly secure; if a breach puts your information at risk, we'll tell you, and the Information Commissioner's Office (ICO) where the law requires.

09Local app storage

QuantPlot and QuantRecce use your browser's storage and local databases to save your projects, preferences, app settings and offline data, plus a small record that you've accepted their usage notice — the app, the accepted version and the date — and the last answer about whether licences are in use. If you sign in, they also keep your sign-in session (which includes your e-mail address), which account the device syncs for, and sync bookkeeping with a random device ID. This stays on your device unless you deliberately export it, sync it, sign in or submit it to us. Neither app sets cookies, and neither asks for your location or microphone. The website keeps just two small things in your browser: whether you chose its light or dark theme, and — only until you close the tab — whether its opening drawing has already played.

10What we don't collect or do

• QuantPlot and QuantRecce don't require a name, e-mail address or phone number — an e-mail address is used only if you choose to sign in. QuantCrew does require an account.
• We don't monitor or read the contents of your locally stored projects.
• We run no analytics and no behaviour tracking.
• We use no advertising trackers and don't profile you for advertising.
• We don't sell your personal information.
• We don't make decisions about you by automated means alone.
• We don't collect more information than is reasonably needed to run and secure the service.

11Why we use it — and our lawful basis

• To provide the website and the apps, and the sign-in, sync and features you choose to use — because it's needed to give you the service you asked for (contract).
• To manage licences and take payment for them — keeping a licence in step with its subscription and sending renewal reminders — because it's needed for the licence you bought (contract).
• To keep the service secure, prevent abuse and fix faults — our legitimate interest in running a safe, working service.
• To run QuantPlot's Community Fixture Library — keeping shared fixtures available, letting you manage your own uploads, and acting on reports — our legitimate interest, and its users', in a reliable shared library.
• To reply to messages you send us, and to learn what each department needs from the apps — our legitimate interest in answering you and improving the apps.
• For the information a company puts into QuantCrew, that company decides the purpose and lawful basis, and we process it on its instructions.
• To meet legal obligations, such as keeping licence, payment and other business records — legal obligation.

12Where information is stored & processed

The website, QuantPlot and QuantRecce are hosted on Vercel, which processes the request information above to serve and secure them. If you sign in to QuantPlot or QuantRecce, your account e-mail address and the data described above are stored using Supabase (our database provider) in Frankfurt, Germany, with each account's data locked to its owner, and your sign-in codes are e-mailed through Resend. QuantCrew runs on Render (Germany, behind Cloudflare) with its database on Supabase (United Kingdom), and sends its e-mails through Resend. Messages from the website's contact and feedback forms are delivered by Resend to our mailbox, which is hosted by Fastmail. Payments and subscriptions are processed by Stripe. We use only these providers to run the service, and share only what they need to do so. Fonts and app files are served from the website and the apps themselves, not from third-party font or script services.

13International transfers

Some of these providers are based in, or process information in, countries outside the UK. Vercel, Fastmail and Stripe process information in the United States, and Render, Supabase, Resend and Cloudflare are United States companies, even where the data itself is kept in the UK or the EU: QuantPlot's and QuantRecce's in Germany, and QuantCrew's in the UK and Germany. Where personal information leaves the UK, it is protected by UK adequacy regulations (such as the UK–US Data Bridge, for certified companies) or by the UK's approved contract terms for international transfers.

14How long we keep it

• Data stored only on your device stays until you remove it — you control it directly.
• QuantPlot and QuantRecce account and synced data is kept while your account is active, and deleted within a reasonable period after you delete it or ask us to.
• In QuantCrew, a production and everything in it is kept until the company deletes it, and Core Team names until they're removed. Unaccepted invitations are deleted 90 days after they lapse (cancelled ones straight away), and expired sign-in sessions are cleared daily. Security-log entries are kept so that what happened can be checked later; after 12 months, the network, browser and session fingerprints are removed from them. Our encrypted backups are kept for up to 12 months, and our database provider's own backups follow its plan.
• Photographs in synced QuantRecce recces, and QuantPlot's background plans, are deleted from your account's storage as described above.
• Licence records, and the payment, subscription and invoice records Stripe keeps for us, are kept as our accounting and tax records — normally for six years after the end of the financial year they belong to. Deleting your account doesn't remove them; they hold none of your work, only what “Licences and payments” lists.
• Our hosting providers' request logs, and our sign-in provider's records of sign-ins, follow their standard retention.
• Messages you send us are kept for as long as we need them to reply and to plan the apps, and for no more than two years — or deleted sooner if you ask.

15Your rights

Under UK data-protection law you can ask to access, correct, delete or export your information, object to or restrict certain processing, and complain to the Information Commissioner's Office (ICO). To use any of these rights, e-mail contact@quant-suite.com; we'll reply within one month. In QuantPlot and QuantRecce much of your data never leaves your device, so we often can't identify or retrieve it — but you control it directly, and can export or clear it from within those apps.

16Cookies & local storage

We use local storage and cookies for essential purposes only — remembering your projects, preferences, offline data, your usage-notice acceptance and, if you sign in, your session. The website sets no cookies at all, and QuantPlot and QuantRecce set none either (see “Local app storage”). No analytics, advertising or cross-site tracking cookies. Stripe's payment and customer-portal pages are Stripe's own, and the cookies they use are covered by Stripe's own policies.

QuantCrew's cookies: sessionid keeps you signed in (up to 30 days); csrftoken protects its forms (1 year); messages carries a one-off notice to the next page; qc_view remembers whether you chose the phone companion or the full app, and qc_prod which production the phone companion last opened (1 year each). Its browser storage holds display preferences, where you left each page and which notices you've seen, and on a phone it also keeps a “No connection” page; some of these entries are labelled with a production's name. No schedule, crew or pay data is kept on your device.

17Children

Quant Suite is a professional tool for people working in film, television and live production, and isn't directed at children.

18Changes & contact

We may update this policy. If we make a material change, we'll say so here and tell you as the Terms of Use describe. For privacy questions, or to use any of the rights above, e-mail contact@quant-suite.com.