Privacy Notice | QueryTek

This notice describes how Extanto Technology, LLC, doing business as QueryTek™ ("we," "us"), handles personal information in connection with the public marketing site at querytek.io.

querytek.io is an informational and conversion site. It does not require you to create an account on this domain. Product applications such as QueryTek Review™ and QueryTek Tapestry™ may have separate notices on their own domains.

Enterprise relationship: When your employer or another organization ("Customer") subscribes to a QueryTek product, they typically govern workforce use under their policies. Where processing is covered by a Data Processing Agreement (DPA) between us and the Customer, that agreement controls our obligations as a processor for Customer-provided personal information. This page is a public summary for the marketing site.

What we process

Depending on how you interact with the site, we may process:

Information you send us — for example when you email support@querytek.io or use a product link that leaves this site.
Contact form submissions — the contact page form (work email, your stated goal, and optional name and context) is relayed as an email to our operations inbox through our email delivery provider (Postmark). Submissions are not stored in a database on querytek.io.
Technical information — our hosting provider (Upsun) processes standard web server data such as IP address, browser type, requested pages, and timestamps in access logs for security and operations. Contact form requests are additionally subject to short-term rate limiting by network address to prevent abuse.
Analytics — we do not use third-party marketing analytics scripts at initial launch. If we enable privacy-oriented analytics later, we will update this notice before turning them on.

Why we process it

Operate, secure, and maintain the marketing site
Respond to inquiries you initiate
Meet legal, security, and compliance obligations
Communicate about the platform where you have asked us to follow up

Sharing and subprocessors

We use infrastructure providers needed to run this site under contractual safeguards. Phase 1 subprocessors include Upsun (website hosting, TLS, HTTP logs), Postmark (contact form email delivery), and GitHub (source code — operations, not visitor-facing). We do not sell personal information.

Regional privacy rights

Privacy laws vary by location. Depending on your situation, you may have rights to access, correct, delete, or limit certain processing, or to appeal a decision. Contact us and we will respond per applicable law.

California (CCPA/CPRA): California residents may have rights to know, delete, and correct personal information. Extanto Technology, LLC does not sell personal information and does not share personal information for cross-context behavioral advertising as those terms are defined by the CPRA in connection with querytek.io. A sale/share “opt out” control is therefore not applicable to the marketing-site processing described here. For other California privacy questions, contact privacy@querytek.io. This page is not an automated rights-request portal.

Canada (PIPEDA): Individuals may have rights of access and challenge to accuracy, subject to exceptions. Contact us and we will respond per applicable law.

EEA, UK, Switzerland: If GDPR or UK GDPR applies, you may have rights including access, rectification, erasure, restriction, portability, and objection. Contact us and we will respond per applicable law.

How to exercise rights: If your question concerns a QueryTek product used through an employer or Customer, direct most privacy requests to that organization’s privacy or IT contact—they are often the controller. If you contact us about querytek.io, we may need to verify your request and, where we act as a processor, coordinate with the Customer.

Privacy inquiries: privacy@querytek.io (monitored mailbox). General contact: support@querytek.io.

Cookies and similar technologies

querytek.io shows a cookie consent banner to every visitor. Necessary cookies (for example the language preference and hosting security mechanisms) are always on because the site cannot function without them. Analytics and functional cookies are off by default and only run after you opt in; you can accept all, allow necessary only, or customize by category.

You can change your choice at any time using "Cookie Preferences" in the site footer. We do not currently deploy any analytics or functional cookies — the categories exist so consent is in place before we do.

Necessary: hosting and security mechanisms, plus the `qt-locale` language preference. Always on.
Analytics: off by default; no analytics provider is enabled today. `trackEvent` will not run until you opt in and a provider is turned on.
Functional: off by default; not in use today.

Retention, subprocessors, and transfers

We retain personal information only as long as needed for the purposes above, consistent with our retention practices and law. Hosting logs are retained per our hosting provider's operational practices. Email correspondence, including contact form submissions delivered to our inbox, is retained per our business records policy.

We use infrastructure and service providers (subprocessors) under contractual safeguards. Cross-border transfers use mechanisms appropriate to the jurisdictions involved.

Children

This site is not directed at children under 16.

Updates

We may update this notice from time to time. The effective date below reflects the latest revision posted here. Material changes may also be communicated through Customer administrators or contractual channels where required.

Privacy Notice — QueryTek™ (querytek.io)