Privacy Policy

Last updated: April 30, 2026

This Privacy Policy describes the policies and procedures of QubitOwl, Inc. ("QubitOwl," "we," "us," or "our") regarding the collection, use, and disclosure of your information when you visit or use our website located at qubitowl.com (the "Website"). It also describes your privacy rights and how applicable law protects you.

We use your personal data to operate and improve the Website and to communicate with you about our products and services. By using the Website, you agree to the collection and use of information in accordance with this Privacy Policy.

1. Scope of This Policy

This Privacy Policy applies exclusively to information collected through the QubitOwl website (qubitowl.com) and related marketing communications.

It does not govern personal data or organizational data processed through the CONTINUUM Cryptographic Asset Discovery and Inventory (CADI) platform or any other QubitOwl product or service. Data collected, processed, and stored through the CONTINUUM platform — including cryptographic asset inventories, network telemetry, scan results, and customer-generated content — is governed exclusively by the applicable Customer Agreement, Order Form, and Data Processing Agreement (DPA) between QubitOwl and the relevant enterprise customer.

If you are a CONTINUUM customer or prospective customer inquiring about platform data handling, please refer to your Customer Agreement or contact us at privacy@qubitowl.com to request a copy of our standard Data Processing Agreement.

2. Interpretation and Definitions

Interpretation

Words with an initial capital letter have specific meanings as defined below. These definitions apply whether the terms appear in the singular or plural.

Definitions

For the purposes of this Privacy Policy:

  • Account means a unique account created for you to access our Service or parts of our Service.

  • Affiliate means an entity that controls, is controlled by, or is under common control with a party, where "control" means ownership of 50% or more of the shares, equity interest, or other securities entitled to vote for the election of directors or other managing authority. QubitOwl's affiliates include Ostrich Cyber-Risk, Inc.

  • Company (referred to as "the Company," "we," "us," or "our") refers to QubitOwl, Inc., 2825 E Cottonwood Parkway, Ste 310 Cottonwood Heights, UT 84121.

    For the purposes of the GDPR, the Company is the Data Controller.

  • Consumer, for purposes of the CCPA, means a natural person who is a California resident.

  • Cookies are small files placed on your device by a website, containing details of your browsing history or session preferences.

  • Country refers to: Utah, United States.

  • Data Controller, for purposes of GDPR, refers to the Company as the legal person which alone or jointly with others determines the purposes and means of the processing of Personal Data.

  • Data Processing Agreement (DPA) means the written agreement governing QubitOwl's processing of personal data on behalf of enterprise customers in connection with the CONTINUUM platform.

  • Device means any device that can access the Website, including a computer, mobile phone, or digital tablet.

  • Do Not Track (DNT) is a concept promoted by U.S. regulatory authorities, particularly the FTC, for the Internet industry to develop mechanisms for allowing users to control the tracking of their online activities.

  • GDPR means the General Data Protection Regulation (EU) 2016/679.

  • Personal Data is any information that relates to an identified or identifiable individual. For purposes of GDPR, Personal Data means any information relating to you such as a name, identification number, location data, or online identifier. For purposes of the CCPA, Personal Data means any information that identifies, relates to, describes, or could reasonably be linked with you.

  • Service refers to the Website.

  • Service Provider means any natural or legal person who processes data on behalf of the Company. It refers to third-party companies or individuals employed by the Company to facilitate the Website, provide the Website on behalf of the Company, perform services related to the Website, or assist the Company in analyzing how the Website is used. For purposes of GDPR, Service Providers are Data Processors.

  • UK GDPR means the United Kingdom General Data Protection Regulation, as defined by the Data Protection Act 2018.

  • Usage Data refers to data collected automatically, either generated by use of the Website or from the Website infrastructure itself (for example, the duration of a page visit).

  • Website refers to the QubitOwl website, accessible at qubitowl.com.

  • You means the individual accessing or using the Website, or the company or other legal entity on behalf of which such individual is accessing or using the Website, as applicable. Under GDPR, You may be referred to as the Data Subject or User.

3. We Do Not Sell Your Personal Information

QubitOwl does not sell, rent, or trade your personal information to third parties for monetary or other valuable consideration.

This commitment applies to all personal data collected through the Website, including contact information submitted through demo request or contact forms, usage and analytics data, and any other personal information described in this Privacy Policy.

We do not engage in cross-context behavioral advertising that constitutes a "sale" or "sharing" under applicable U.S. privacy laws. If you are a California resident, your additional rights under the CCPA are described in Section 14.

4. Personal Data We Collect

4.1 Information You Provide to Us

When using or interacting with the Website, we may ask you to provide personally identifiable information. This may include, but is not limited to:

  • First name and last name

  • Email address

  • Phone number

  • Job title and professional role

  • Company name and industry

  • Address, state, province, ZIP/postal code, city

  • Questions or messages you submit through contact or inquiry forms

This information is typically provided when you request a product demo, contact us with an inquiry, subscribe to marketing communications, register for an event or webinar, or otherwise interact with the Website.

4.2 Usage Data

Usage Data is collected automatically when you use the Website. It may include:

  • Your device's Internet Protocol (IP) address

  • Browser type and version

  • The pages of the Website you visit

  • The time and date of your visit and time spent on each page

  • Unique device identifiers and diagnostic data

  • Referring URL and traffic source information

When you access the Website from a mobile device, we may collect additional information including mobile device type, mobile device unique ID, mobile operating system, and mobile browser type.

4.3 Tracking Technologies and Cookies

We use cookies and similar tracking technologies to track activity on the Website and store certain information. The technologies we use may include:

  • Browser Cookies. A cookie is a small file placed on your device. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. If you do not accept cookies, some parts of the Website may not function properly.

  • Web Beacons. Certain pages of the Website and our email communications may contain small electronic files known as web beacons (also referred to as clear gifs, pixel tags, or single-pixel gifs) that permit us to count users who have visited those pages or opened an email and to gather related website statistics.

Cookies can be Persistent (remain on your device when you go offline) or Session (deleted when you close your browser). We use the following categories of cookies:

  • Necessary / Essential Cookies Type: Session Cookies | Administered by: Us Purpose: Required to provide services available through the Website and to enable core features. These authenticate users and prevent fraudulent use. Without these cookies, certain services cannot be provided.

  • Cookie Policy / Notice Acceptance Cookies Type: Persistent Cookies | Administered by: Us Purpose: Identify whether users have accepted the use of cookies on the Website.

  • Functionality Cookies Type: Persistent Cookies | Administered by: Us Purpose: Allow us to remember choices you make when using the Website, such as language preferences or previously entered form data.

  • Tracking and Performance Cookies Type: Persistent Cookies | Administered by: Third Parties Purpose: Used to track information about traffic to the Website and how users interact with it. Information gathered via these cookies may indirectly identify you as an individual visitor and may be linked to a pseudonymous identifier. We may also use these cookies to test new pages or features.

5. How We Use Your Personal Data

The Company may use your personal data for the following purposes:

  • To operate and maintain the Website, including monitoring usage and ensuring security and reliability.

  • To manage your Account, including managing your registration as a user of the Website or any related service portal.

  • To fulfill a contract or pre-contractual obligations, including development and performance of any purchase, trial, or service agreement you have entered into with us.

  • To contact you by email, telephone, SMS, or other equivalent forms of electronic communication regarding updates, security notices, or informative communications related to the functionalities, products, or services you have requested or are considering.

  • To provide marketing communications — with your consent or where otherwise permitted by law — about news, special offers, events, and information about products and services similar to those you have already requested or purchased. You may opt out at any time as described in Section 5.

  • To manage your requests, including attending to and processing inquiries, support requests, or demo requests you submit to us.

  • For business transfers, to evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets.

  • For analytics and improvement, including data analysis, identifying usage trends, determining the effectiveness of promotional campaigns, and evaluating and improving the Website, our products, and your experience.
    Opting out of marketing communications: You may opt out of receiving marketing or promotional emails from us at any time by clicking the unsubscribe link in any email we send or by contacting us at privacy@qubitowl.com. Opting out of marketing communications does not affect your receipt of transactional or service-related communications.

6. How We Share Your Personal Data

We may share your personal information in the following situations:

  • With Service Providers. We may share your personal information with Service Providers to monitor and analyze the use of the Website, to host and operate our Website, to send emails on our behalf, or to otherwise support our business operations. Service Providers are contractually required to handle your data in accordance with this Privacy Policy.

  • With Affiliates. We may share your information with our affiliates, including Ostrich Cyber-Risk, Inc., in which case we will require those affiliates to honor this Privacy Policy. Any sharing between QubitOwl and Ostrich Cyber-Risk is limited to the purposes described in this Privacy Policy and will not include platform or product data.

  • For Business Transfers. We may share or transfer your personal information in connection with any merger, sale of Company assets, financing, or acquisition of all or a portion of our business to another company. We will provide notice before your personal information is transferred and becomes subject to a different privacy policy.

  • With Business Partners. We may share your information with business partners to offer you certain products, services, or promotions related to QubitOwl's offerings.

  • For Legal Compliance. Under certain circumstances, we may be required to disclose your personal data if required by law or in response to valid requests by public authorities (such as a court or government agency), to protect and defend our rights or property, to prevent or investigate possible wrongdoing, to protect the personal safety of users or the public, or to protect against legal liability.

  • With Your Consent. We may disclose your personal information for any other purpose with your explicit consent.

7. Cookies and Tracking Technologies

For more detail on the cookies we use, see Section 4.3 above. You have the following choices regarding cookies:

Note that opt-outs are specific to the browser you use. If you change browsers or delete cookies, you will need to opt out again.