QVPN Privacy Policy

1. Introduction

This Privacy Policy explains how QuantumRonics Pvt Ltd. (“QuantumRonics”, “we”, “us”) processes information when you use QVPN, including its management dashboard, client applications, VPN services and licensing components. QVPN may be provided through an organization or administrator. Read this policy with any applicable customer agreement and organizational policy.

2. Information we process

• Account and identity information: name, email address, username or account identifier, organization/tenant association, role, account status, authentication data, licence or entitlement information and account-management events, depending on configuration. Accounts may be provisioned by an administrator or synchronized from directory services.
• Authentication and security information: password-verification data, authentication/session records, email-verification status, MFA/TOTP-related data where enabled, session or refresh tokens, certificates and PKI material, device registration/binding details and security or administrative events.
• VPN connection records: account or user association, source IP address, assigned VPN IP address, connection/disconnection timestamps, session duration, transferred byte or packet volumes, protocol and event details. A live-session view may be maintained while a tunnel is active.
• Device posture and diagnostics: device/client details and security or compliance status where device-posture features are enabled. Device-posture history is retained for approximately 180 days under the current configured process.
• Web, dashboard and infrastructure records: access logs, administrative audit records, server-health logs and diagnostics may contain IP addresses, timestamps, request/event details, account identifiers and administrator actions.

3. Browsing data and VPN logging

Based on the current implementation reviewed for this policy, QVPN does not intentionally record DNS queries, destination websites, destination ports, URLs, hostnames, browsing history, or packet contents as a user browsing-history log. This does not mean websites, DNS resolvers, network operators, endpoint software, an organization, or other third parties cannot independently observe information.

4. How we use information

• Authenticate users and administer accounts, organizations, licences and access permissions.
• Establish, monitor and terminate VPN sessions and enforce configured connection policies.
• Protect the service, investigate misuse, troubleshoot faults and maintain infrastructure security and availability.
• Maintain audit trails for administrative and security-relevant actions; respond to support requests and legal obligations.

5. Protocols, routing and DNS

QVPN currently supports SSTP on Windows clients and IKEv2/IPsec on iOS, android and site-to-site configurations, subject to deployment and client version. Full-tunnel SSTP configuration may use Google Public DNS (8.8.8.8) and Cloudflare DNS (1.1.1.1). DNS providers process requests sent to them under their own systems and policies. Routing, split/full tunnel behavior and DNS settings can vary by deployment.

6. Integrations and sharing

Depending on configuration, QVPN may integrate with LDAP/Active Directory, Windows NPS/RADIUS, email delivery services and related infrastructure. These systems may process information needed to authenticate users, synchronize accounts, send verification messages, or operate the service. Authorized QuantumRonics personnel and organization administrators may access operational information according to their roles. We may disclose information when required by law or reasonably necessary to protect users, systems, or legal rights.

7. Retention

• Historical VPN connection events: 90 days under the current automated retention process.
• Device-posture history: approximately 180 days under the current configured process.
• Live-session records: maintained while sessions are active and updated as gateway state changes.
• Administrative audit records and web-tier logs: no configured retention limit was identified in the reviewed implementation; these may remain until separately deleted or an operational retention policy is implemented.
• Account deletion does not automatically remove every related record. Connection records may remain in pseudonymized form until the 90-day cleanup; audit records identifying the user may remain. Tenant deletion is a separate process and may remove tenant-associated audit records.

8. Account deletion

You can initiate account deletion from the deletion option in QVPN Settings, where available. The current workflow requires password confirmation. After confirmation, the account is hidden or made unavailable and enters a 30-day pending-deletion period. Logging in during that period cancels the request. If not cancelled, permanent deletion is scheduled after 30 days, subject to applicable legal or contractual obligations. If you cannot use Settings, contact your administrator or submit a ticket at https://support.quantumronics.com/. See https://quantumronics.com/qvpn/account-deletion.

9. Storage, hosting and backups

The source materials used to prepare this policy do not establish all hosting locations, backup arrangements, backup retention periods, or subprocessors. This policy therefore does not promise a particular hosting region or backup-retention period. Operational deployment and applicable customer agreements may provide additional details.

10. Your requests

For access, correction, privacy, or other data-related requests, contact your organization’s administrator or submit a ticket through https://support.quantumronics.com/. We may need to verify your identity and coordinate with the organization managing your account. Requests are handled subject to applicable law, security requirements and records that must be retained.

11. Security

We use measures intended to protect accounts, communications and service infrastructure, but no service can guarantee absolute security. VPN encryption operates according to the negotiated protocol, configuration and cryptographic settings; it does not mean every system record or stored account field is end-to-end encrypted.

12. Changes and contact

We may update this policy as functionality, deployment, data practices, or legal requirements change. Updated versions will be published at https://quantumronics.com/qvpn/privacy-policy.

QuantumRonics Pvt Ltd.
Office #107, 1st Floor, Evacuee Trust Complex, Agha Khan Road, F-5/1, Islamabad, Pakistan
Support tickets for all QuantumRonics products: https://support.quantumronics.com/
Email: support@quantumronics.com
QVPN Privacy Policy: https://quantumronics.com/qvpn/privacy-policy
QVPN Terms & Conditions: https://quantumronics.com/qvpn/terms-and-conditions
QVPN Account Deletion Policy: https://quantumronics.com/qvpn/account-deletion