top of page

Terms of Service

Effective Date: July 20, 2026
Last Updated: July 20, 2026
Entity: SuperQ Quantum ("SuperQ", "Company", "we", "us", or "our")
Applicable Services: Super™ Platform, ChatQLM, AI Agentic Interfaces, API Endpoints, and related quantum/classical optimization services (collectively, the "Platform").

1. Introduction & Global Scope

SuperQ Quantum is committed to maintaining the highest standards of data protection, algorithmic transparency, and privacy governance. This Privacy Policy outlines how we collect, process, disclose, and safeguard personal information and operational input data across our Platform.
 

Whether you access our Platform as an individual user or as an enterprise tenant, this policy applies globally and aligns with international regulatory frameworks, including:

  • The European Union Artificial Intelligence Act (EU AI Act) (including Articles 26, 50, and 53).

  • The EU and UK General Data Protection Regulation (GDPR / UK GDPR).

  • The California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA / CPRA).

  • The Canadian Personal Information Protection and Electronic Documents Act (PIPEDA) and British Columbia privacy legislation.

  • US Federal and State AI Transparency Guidelines.
     

By accessing or using the Platform, you acknowledge the data practices described in this Privacy Policy.
 

2. Information We Collect


We collect information directly from you, automatically through your interaction with the Platform, and via specialized agentic translation workflows.
 

A. Information Provided Directly by You

  • Account & Contact Data: Name, business email address, organization name, subscription tier, payment information, and authentication credentials.

  • Tenant Input Data & Prompts: Natural language text, mathematical equations, constraints, operational data, code scripts, and problem parameters submitted to ChatQLM or the Super™ platform for optimization framing.

  • Feedback & Support Data:
    Communications, bug reports, and diagnostic feedback provided to our engineering teams.

​​

B. Information Collected Automatically

  • Telemetry & System Usage: IP address, browser type, operating system, session duration, API call frequency, resource utilization (quantum vs. classical solver execution time), and system performance logs.

  • Cookies & Tracking: Session management identifiers and security tokens strictly necessary for secure authentication and platform load balancing.

​​

3. Global AI Data Governance & Processing Framework
Our data governance framework distinguishes between subscription tiers to protect enterprise intellectual property while maintaining platform safety.

​

A. Enterprise & Commercial Tier Tenants (Zero-Retention Standard)


For Enterprise and paid Commercial tenants, SuperQ operates a strict Zero-Retention Processing Architecture:

  • In-Memory Transit Processing: Natural language prompts, operational constraints, and optimization parameters submitted to our AI agent layers (including ChatQLM) are processed strictly in-transit (in-memory) to execute the translation into structured computational scripts (e.g., Python, QASM, mathematical models).

  • No AI Model Retraining: Enterprise tenant inputs, operational datasets, and agent outputs are explicitly excluded from any localized fine-tuning loops, foundational LLM retraining, or solver optimization algorithms.

  • Tenant Data Isolation:
    Operational workflows execute within isolated containerized environments to ensure complete data separation between enterprise tenants.


B. Free, Public, and Beta Tier Users

For users on Free or pre-release Beta tiers, SuperQ may retain anonymized and de-identified prompts and operational interactions. This data is used exclusively to evaluate system accuracy, train problem-framing heuristic models, and improve platform safety. Users on non-enterprise tiers can opt out of data usage for model improvement by contacting support@superq.co.
 

4. Upstream Foundational AI Models & Sub-Processors


To translate natural language inputs into structured mathematical models, SuperQ utilizes third-party foundational Large Language Models (LLMs) as upstream sub-processors.

​

A. Strict Vendor Data Protection Agreements
All third-party LLM vendors integrated into the SuperQ pipeline are subject to enterprise data processing agreements (DPAs) that legally bind them to:

  • Prohibit the storage, caching, or retention of SuperQ tenant prompts beyond the immediate request-response cycle

  • Prohibit the use of SuperQ tenant inputs or outputs to train, fine-tune, or validate their commercial foundational models.

  • Maintain strict zero-data-retention (ZDR) API posture for all enterprise traffic.
     

B. Regulatory Compliance & Upstream Due Diligence

We continuously audit our upstream AI sub-processors to verify alignment with global governance standards, including verifying vendor compliance with the EU AI Office Code of Practice and archiving vendor Article 53 Technical System Cards under the EU AI Act.​

Our core service architecture remains model-agnostic, allowing SuperQ to instantly re-route agent traffic to alternative compliant backends if an upstream provider fails regulatory standards.
 

5. AI Transparency, Watermarking, & Diagnostic Audit Logging

A. Transparency & Agent Disclosures (EU AI Act Article 50(1))
When interacting with ChatQLM or AI-driven framing interfaces on the Super™ platform, users are explicitly notified that they are interacting with autonomous AI agents tasked with interpreting, breaking down, and structuring optimization requests.
 

B. Machine-Readable Watermarking & Metadata (EU AI Act Article 50(2))
To comply with global synthetic content marking standards, all mathematical scripts, Python code, and QASM (Quantum Assembly Language) files generated by SuperQ AI agents embed machine-readable, detectable metadata. This metadata identifies the content as algorithmically framed synthetic output and preserves provenance tracking without altering the execution logic of downstream solvers.
 

C. Translation Audit Logging Pipeline
Because natural language prompts are translated by AI agents into executable solver parameters, SuperQ maintains a security-focused Translation Audit Log.

Purpose: Audit logs record the exact mapping between the user's original natural language prompt and the resulting structured mathematical parameters.
Isolation & Defense: These logs are stored in encrypted, immutable data stores completely disconnected from AI model training environments. They are retained strictly for security monitoring, algorithmic error diagnosis, and legal liability defense (e.g., proving translation integrity in the event of an operational dispute).

6. Legal Roles: Data Processor & AI Provider Status


A. SuperQ as the "AI Provider" and "Data Processor"
Under global privacy laws (GDPR, CCPA, PIPEDA) and AI regulations (EU AI Act), SuperQ Quantum acts as:

  • A Data Processor / Service Provider handling personal data solely on behalf of the customer.

  • A Provider of a Specialized Optimization Interface, offering general-purpose AI agent framing and quantum/classical computational capabilities.


B. Enterprise Client as the "Data Controller" and "AI Deployer"
The enterprise client retains full ownership and control over its input data and operational workflows.

If a client integrates, deploys, or executes SuperQ platform outputs (including AI-generated models, Python scripts, or QASM files) within high-risk operational environments—such as critical energy infrastructure, medical supply chains, logistics grids, or workforce scheduling—the client acts as the sole "Deployer" of the system under Article 26 of the EU AI Act and equivalent global frameworks.
 

As the Deployer, the client retains sole legal responsibility for:

  • Establishing human oversight mechanisms over solver outputs.

  • Conducting Fundamental Rights Impact Assessments (FRIAs) or sector-specific risk reviews.

  • Mitigating downstream bias or operational execution risks within their specific industry deployment.


7. How We Share Information
SuperQ does not sell, rent, or trade personal data or enterprise operational inputs. We share information only under the following limited circumstances:

  • Authorized Sub-Processors: Infrastructure hosts (e.g., secure cloud providers, quantum hardware facilities) and vetted LLM API vendors operating under strict confidentiality and zero-retention obligations.

  • Legal and Regulatory Compliance: When compelled by valid legal process, subpoena, or government investigation, provided we promptly notify the tenant unless prohibited by law.

  • Corporate Transfers:
    In connection with a merger, acquisition, re-organization, or sale of company assets, subject to the acquiring entity honoring this Privacy Policy.


8. Data Security & International Data Transfers
A. Technical and Organizational Safeguards
We maintain rigorous security controls to protect tenant data, including:

  • End-to-end encryption in transit (TLS 1.3) and at rest (AES-256).

  • Role-Based Access Control (RBAC) and Multi-Factor Authentication (MFA).

  • SOC 2 Type II compliance controls and continuous vulnerability monitoring (in the process of obtaining SOC 2 Type I followed by SOC 2 Type II compliance).


B. Cross-Border Data Transfers
SuperQ Quantum is headquartered in British Columbia, Canada. Data collected globally may be processed in Canada, the United States, or the European Economic Area (EEA). For transfers of personal data outside the EEA or UK, we rely on standard contractual clauses (SCCs), adequacy decisions (including Canada's PIPEDA adequacy status under the EU), or equivalent lawful transfer mechanisms.
 

9. Your Privacy Rights (Global Specifics)
Depending on your location, you possess specific statutory rights regarding your personal information:
 

A. European Union (EU / EEA) & United Kingdom Rights (GDPR)

  • Right to Access & Data Portability: Request a copy of your personal data in a structured, machine-readable format.

  • Right to Rectification & Erasure: Request the correction of inaccurate data or the deletion ("Right to be Forgotten") of personal data.

  • Right to Restrict or Object: Object to data processing or request processing restrictions.

  • Automated Decision-Making Rights:
    Request human review or explanation regarding automated processing workflows under GDPR Article 22.


B. California Residents (CCPA / CPRA)

  • Right to Know & Deletion: Request details regarding personal information collected and request deletion.

  • Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.

  • Opt-Out of Sale/Sharing: SuperQ does not "sell" or "share" personal information for cross-context behavioral advertising as defined under the CCPA.


C. Canadian Residents (PIPEDA)
Canadian users may request access to their personal information, challenge its accuracy, or withdraw consent for data collection by contacting our Privacy Officer.

To exercise any of these rights, submit a request to support@superq.co.
 

10. Children's Privacy
The Platform is an enterprise business application intended strictly for adult professionals and corporate entities. We do not knowingly collect personal information from individuals under sixteen years of age. If we learn that we have collected information from a minor without parental consent, we will delete it immediately.
 

11. Changes to this Privacy Policy
We may update this Privacy Policy periodically to reflect technological advancements, operational changes, or evolving regulatory legal frameworks (such as additional enforcement phases of the EU AI Act).

When material changes occur, we will update the "Last Updated" date at the top of this document and provide prominent notification via the Platform interface or direct email communication to enterprise account administrators.
 

12. Contact Us & Data Protection Office
If you have questions, concerns, or requests regarding this Privacy Policy, our data governance practices, or our AI safety framework, please contact our Data Protection Officer (DPO):
 

Support: support@superq.co
Mailing Address: SuperQ Quantum Computing Inc., 2200-885 West Georgia Street, Vancouver, British Columbia, V6C 3E8
Attn: Privacy & Data Governance Office, British Columbia, Canada

bottom of page