Privacy Policy

Last updated: November 2025

Data Controller: Novense Quantum AI, S.L.
Trade name: QIU
Tax ID (NIF): B24759771
Address: C/ Suero de Quiñones 34, 28002 Madrid, Spain
Email: privacy@qiu.live

Table of Contents

1. Scope
2. Summary of Information
3. Rights of Data Subjects
4. Data Controller
5. Key Information for Users (Candidates and Recruiters)
    5.1. Purposes of Processing and Legal Basis
    5.2. Types of Data and Collection Methods
    5.3. Data Recipients and Disclosure
    5.4. Data Retention Periods
6. International Data Transfers
7. Automated Decision-Making and Profiling
8. Security Measures
9. Changes and Modifications
   Annex I – General Data Retention Periods

1. Scope

Our Commitment

QIU is committed to respecting the privacy of all individuals (“Data Subjects”) who access or use the platform, whether as candidates, recruiters, website visitors, or other related profiles. The purpose of this Privacy Policy is to inform you about how QIU processes personal data, in compliance with Regulation (EU) 2016/679 (GDPR) and Spanish data protection laws.

Purpose of this Policy

This document explains how we collect, use, store, and share personal data of users when they use our website, interact with QIU, or access services offered through the platform.

2. Summary of Information

Data Controller: Novense Quantum AI, S.L.
Rights of Data Subjects: Access, rectification, erasure, restriction, portability, and objection. You can exercise these rights by emailing privacy@qiu.live.
Main Purposes: Account registration and verification, AI-based matching, interview communication, service improvement, and marketing (with opt-out option).
Legal Basis: Contract performance, user consent, and the legitimate interests of the controller.
International Transfers: When applicable, QIU applies GDPR safeguards to ensure an adequate level of data protection.

3. Rights of Data Subjects

Users have the right to:

• Request access to their personal data.
• Request rectification of inaccurate or incomplete data.
• Request deletion of data when it is no longer necessary.
• Request restriction of processing in specific cases.
• Request data portability to another controller, where applicable.
• Object to processing based on legitimate interests.
• Withdraw consent at any time, without affecting the lawfulness of prior processing.

To exercise these rights, please email privacy@qiu.live, including sufficient identification details.
If you believe your rights have not been properly respected, you may file a complaint with the Spanish Data Protection Authority (AEPD) at www.aepd.es.

4. Data Controller

The data controller is Novense Quantum AI, S.L., with registered address at C/ Suero de Quiñones 34, 28002 Madrid, Spain.
For privacy-related matters, you can contact privacy@qiu.live.

5. Key Information for Users

5.1. Purposes and Legal Basis

Depending on the type of user (Candidate or Recruiter) and the functionalities used, QIU processes data for the following purposes:

• Account registration and verification, necessary for contract performance.
• AI-assisted matching between candidates and recruiters, based on contract performance and legitimate interest in improving service relevance.
• Interview scheduling and communication, based on contract performance.
• Direct marketing with QIU offers, based on consent or legitimate interest (with opt-out option).
• Security, fraud prevention, and risk analysis, based on legitimate interest or legal obligation.

5.2. Types of Data and Collection Methods

Data are collected when a user registers, completes their profile, uses the platform, or interacts during interviews. These may include:

• Identification and contact details: name, surname, email, phone number, company (for recruiters).
• Professional data: experience, education, skills, résumé, and availability.
• Usage data: activity history, preferences, interaction metrics.
• Technical data: IP address, device type, operating system, browser.
• Interview data: recordings or transcripts (if applicable) and related metadata.

Data may be collected via web forms, document uploads, or cookies and similar tracking technologies.

5.3. Data Recipients and Disclosure

Personal data may be shared with:

• Technology service providers (hosting, video-interview, AI, etc.) acting as data processors.
• Competent authorities where legally required.
• Affiliates or related entities of QIU, if necessary for service delivery and always under contractual safeguards.

QIU does not sell personal data to third parties for external commercial purposes.

5.4. Data Retention

Data are kept only as long as necessary for their purpose, to meet legal obligations, resolve disputes, or defend against claims.

Indicative period: while the account remains active and for a reasonable period afterward (for example, up to 2 years after inactivity), unless a longer retention is legally required.
Specific retention periods appear in Annex I below.

6. International Data Transfers

Where personal data are transferred outside the European Economic Area (EEA), QIU applies appropriate safeguards (such as Standard Contractual Clauses) and ensures that the receiving country provides an adequate level of protection as required by the GDPR.

7. Automated Decision-Making and Profiling

QIU uses AI algorithms to suggest matches and recommendations between candidates and recruiters.
These processes are human-supervised.
Automated decisions do not produce legal or similarly significant effects on users and do not solely determine selection outcomes.
Users may request human review of any automated results by contacting privacy@qiu.live‍.

8. Security Measures

QIU implements appropriate technical and organizational measures to protect personal data from unauthorized access, loss, alteration, or disclosure.
Users are also responsible for safeguarding their credentials and avoiding disclosure to third parties.

9. Changes and Modifications

As QIU’s business evolves, this Privacy Policy may be updated. Substantial revisions will be notified before taking effect, via email or website notice. Continued use of the service after such notification constitutes acceptance of the updated policy.

Annex I – General Data Retention Periods

Data Dhile the account remains active: Up to 2 years after account closure

Billing data (if applicable): 6 years

Legal, fraud-prevention, or litigation data: 10 years or as required by law

Profile and usage data for service improvement: While the purpose remains valid + 2 years