Privacy Policy

1. Who we are and our role

QuantifyQS is operated by Obedience Global Ltd ("we", "us"), company number 17363431, registered in England and Wales. Our registered office is 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom. We provide quantity surveying software at quantify.obedience.global. For privacy matters contact privacy@obedience.global.

We are the controller for account, website, support, security and company administration data. Where a business customer puts project or commercial data into its QuantifyQS workspace, that customer is normally the controller and we process the data on its documented instructions under our Data Processing Agreement.

2. What we collect

Account data: name, email address and authentication identifiers, processed by our authentication provider (Clerk).

Commercial content you create: projects, Bills of Quantities, rates, variations, approvals and uploaded documents. This content belongs to you.

Support and communications data: messages, support history and information you choose to provide when requesting help.

Usage data: consent-gated product analytics events (PostHog), error diagnostics (Sentry), and security logs used to protect accounts and improve reliability.

3. Why we process it (lawful bases)

To provide the service you contracted for (performance of contract).

To secure, debug and improve the service (legitimate interests).

To run optional analytics where you have made a consent choice (consent).

To meet legal obligations, including tax and accounting requirements.

4. Where your data lives

Customer project data is stored in the United Kingdom. Supporting services may process limited data in the EEA or the United States under the safeguards stated in the canonical Subprocessor List.

We never sell personal data. The current subprocessors, purposes, locations and transfer safeguards are published at obedience.global/policies/subprocessors.

5. Retention

Some working product records are stored on the device and some commissioned services store account, project, file, security or support records in the hosted platform. The location depends on the feature being used.

We keep personal data only for its stated purpose. Account data is scheduled for deletion within 30 days after contract end, subject to legal holds; backups age out through their controlled cycle. Customer project records remain customer-controlled. The full schedule is published at obedience.global/policies/data-retention.

Use the product export tools before clearing a local workspace or closing an account if you need to retain a copy.

6. Your rights

Under UK GDPR you may request access, rectification, erasure, restriction or portability, object to processing, and withdraw consent where consent is the basis. Some rights depend on the circumstances and lawful basis.

Write to privacy@obedience.global. We verify identity proportionately and respond without undue delay and within one calendar month unless the law permits an extension. If the request concerns a customer-controlled workspace, we may need to coordinate with that customer.

You may complain to the Information Commissioner’s Office (ico.org.uk).

7. Cookies and device storage

We use strictly necessary cookies for authentication and session integrity. Analytics cookies or equivalent storage are used only after the applicable consent choice. Product workspace preferences and local working data may also be stored on your device.

The current inventory and choice controls are described at obedience.global/policies/cookies.

8. Complaints

Email privacy@obedience.global with the subject "Data protection complaint". We will acknowledge and investigate through our data protection complaints process. You can also complain to the Information Commissioner’s Office at any time.

9. Changes

We will notify account holders of material changes to this policy by email and in-product notice.