Privacy Policy

Last updated: 30 October 2026

quittum’s document recognition and document database run locally on your own devices. The local text recognition and the local AI model do not transfer your documents to our servers. This also applies when importing bank statements and when creating the financial plan or the financial overview for the bank. The file import does not connect to your bank.

This statement covers our website, purchases, existing instalment purchases and update subscriptions, as well as the desktop application quittum, including the version from the Microsoft Store. What the application stores on your computer, when it establishes connections and how you can control this is described in section 15. If you set up email retrieval or sending yourself, quittum communicates with the providers and recipients you have chosen.

1. Controller

MBYT LTD Floor 2, 16 Apostolou Pavlou 8046 Paphos, Republic of Cyprus Email: office@mbyt.eu Phone: +357 99 868569

No data protection officer has been appointed, because the legal requirements for doing so are not met. For all questions about data protection you can reach us at the email address given above.

2. Hosting and server logs

This website runs on a server of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, in the Helsinki data centre (Finland), i.e. within the European Union. A data processing agreement under Art. 28 GDPR (DSGVO) is in place with Hetzner.

When the page is accessed, the web server necessarily processes connection data for technical reasons: IP address, time of access, requested address, amount of data transferred, response status and the identifier of your browser (user agent). This data serves exclusively to provide the service and to keep its operation secure (Art. 6(1)(f) GDPR); it is stored in server logs. The intended retention period is fourteen days. However, the operational check on 30 October 2026 found older entries in a remaining mail log file. Effective retention limits across all log sources have therefore not yet been fully verified. It is not combined with other data.

3. Cookies and local settings

This website sets at most two cookies:

• _quittum_key: a session cookie that protects forms against abuse without a fixed expiry date. If the browser restores a session, the cookie may survive closing the browser.
• quittum-sprache: only if you choose a language or open a page in a language other than the default, for example under /en/. It remembers this language for one year and contains only the language code, for example en.

If you choose the light or dark appearance, your browser remembers this choice locally (localStorage); it is not transmitted to us. All three are strictly necessary for the service you have requested and do not require consent (Section 25(2) no. 2 TDDDG, German Telecommunications Digital Services Data Protection Act); the legal basis for the related processing is Art. 6(1)(f) GDPR.

There is no tracking, no analytics, advertising or social media services are embedded, and no fonts or scripts are loaded from third-party servers. No consent banner is provided for this technical setup. Before activating additional services, we reassess whether consent is required. This concerns our own website; after redirection to payment, Stripe’s information applies (section 6).

4. Trial licences from the period up to 19 September 2026

We no longer offer a free trial version; we have not issued new trial licences since 19 September 2026.

For trial licences issued before that date, we have stored your email address, the name you provided, the date, the chosen language and the identifier of the licence. We continue to process this data for as long as the licence runs, so that we can resend it to you on request (Art. 6(1)(b) GDPR).

We delete the data of a trial licence no later than twelve months after the end of the trial period, unless you have purchased a licence by then.

To ward off mass requests, we count requests to individual forms per origin for one day; for this we store only a shortened check value (hash) of the IP address. This is pseudonymisation, not anonymisation: in particular, IPv4 addresses can be matched by comparing computed hashes. We delete these counts after two days.

5. Purchase and licence

What data. When you make a purchase, we process: your email address, your name, the package purchased, the chosen language, the date of purchase, the identifier of your licence and the customer and transaction number at our payment service provider. For legacy contracts we additionally process the agreed update periods, subscription data and, for instalment purchases, the payment and crediting status. For business purchases we additionally process company name, billing address and VAT identification number, where you provide them.

What for. To perform the purchase contract (Art. 6(1)(b) GDPR): we issue your licence, send it to you, resend it if you lose it, and manage existing instalment purchases and update subscriptions according to your respective legacy contract. A new purchase does not require an update subscription. To comply with tax and commercial law retention obligations (Art. 6(1)(c) GDPR).

What we do not process. No payment data: card numbers and bank details never reach us, they are held exclusively by the payment service provider. From the program we receive only what is described in sections 8, 9 and 15: the daily licence report, update checks, error reports triggered by you and, if you switch it on, the request for a home network certificate. We do not learn from this which documents you process or how you use quittum.

How long. We keep the licence data for as long as your licence is valid, that is, indefinitely, because the licence does not end, so that we can resend the licence file to you at any time; at your request we delete it, in which case it can no longer be resent. We keep accounting records as required by the law of the Republic of Cyprus. Tax books and supporting records are retained for at least six years from the later of the applicable filing deadline or the actual filing date of the original or amended tax return. Statutory extensions, including those relating to an ongoing tax audit, are taken into account. After the applicable obligation expires and no other lawful reason for retention remains, the data is deleted.

Advertising by email. We also use the email address you provided when purchasing to occasionally inform you about updates, upgrades and extensions of your quittum licence, where these are our own similar products within the meaning of Section 7(3) UWG (German Act against Unfair Competition). A purchase alone does not permit advertising for every other offer, in particular not automatically for Connect. We point this out to you during the ordering process and in every such email; for purchases without this notice in the ordering process we do not use the address for advertising. The legal basis is our legitimate interest in advertising our own products (Art. 6(1)(f) GDPR).

We only write to you about further news and offers with your consent (Art. 6(1)(a) GDPR). You give it via the link „Ja, Neuigkeiten und Angebote schicken“ (“Yes, send news and offers”) in the email about your purchase and the button on the following page. Because the link only arrives in your inbox, this confirms that the address belongs to you. As proof we store the time, the version and language of the text you agreed to, the email from which the link came, and the IP address from which you consented.

You can object to advertising at any time and withdraw consent at any time with effect for the future, without giving reasons and without costs other than transmission costs at basic rates: via the link „Keine Werbung mehr“ (“No more advertising”) in every one of our emails, for advertising emails also via the unsubscribe function of your email program, or by email to office@mbyt.eu. After that we will send you no more advertising; you will continue to receive emails about your licence and your contracts.

How long. We keep proof of consent for as long as the consent is valid and, after a withdrawal or objection, for another three years, so that we can prove it in the event of a dispute (regular limitation period, Art. 6(1)(f) GDPR); after that we delete it automatically. We keep your address and the time of the objection in a block list for as long as we send advertising by email, so that we can permanently respect the objection (Art. 6(1)(c) and (f) GDPR). If you delete your licence data, only this entry remains. The links in our emails carry your address only in encrypted, unreadable form.

6. Payment processing (Stripe)

We use Stripe for payment processing: Stripe Payments Europe, Limited, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland. During the payment process you are redirected to a Stripe page. There Stripe processes your payment data as an independent controller; the Datenschutzerklärung von Stripe (Stripe privacy policy) applies. We receive from Stripe the confirmation of payment, your email address, your name and the billing details, but not the payment data itself.

Stripe may transfer data to Stripe, LLC in the USA. Stripe, LLC is certified under the EU-US Data Privacy Framework; the transfer is therefore based on the adequacy decision of the European Commission (Art. 45 GDPR), supplemented by standard contractual clauses.

Legal basis: Art. 6(1)(b) GDPR.

7. Sending email (Google Workspace)

We send the licence file and our replies to your enquiries via Google Workspace: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, under a data processing agreement. In doing so, Google processes your email address, your name and the content of the message including the licence file. A transfer to Google LLC in the USA is based on the EU-US Data Privacy Framework, under which Google LLC is certified, supplemented by standard contractual clauses.

Legal basis: Art. 6(1)(b) GDPR (sending the licence, handling your enquiry); for advertising, the bases stated in section 5.

8. Store distribution, update check and licence report

Microsoft Store. If you obtain quittum from the Microsoft Store, Microsoft processes data for the store download and the distribution of updates under its own responsibility. According to Microsoft’s statement, this includes information about installations and updates, device identifiers and, where used, your Microsoft account. The Microsoft-Datenschutzbestimmungen (Microsoft privacy statement) apply, in particular the section “Microsoft Store”, as well as your Store and Windows settings. Store updates are managed via the Store. Switching off a quittum update check of its own does not switch off Store updates. Store distribution does not, through quittum, transfer any document content to Microsoft. Licence purchases via quittum.de continue to be processed as described in section 6.

Own update check. In installations with quittum’s own update check, quittum asks us at most once a day whether a newer version is available. In doing so, a file containing version information is retrieved. For technical reasons your IP address and the identifier of the program (“quittum”) are transmitted, no document data. Like any page request, the check appears in the server logs under section 2 and is deleted as described there. It can be switched off in the settings of quittum; quittum then simply no longer learns whether there is anything new.

Licence report. A purchased quittum also reports to us once a day that it is running: the identifier of your licence, a randomly generated identifier of this installation and the version number of the program. The installation identifier is created on first start and contains no hardware identifier. Via the licence identifier, however, it can be assigned to your licence and thus to your customer data stored with us; it is not anonymous. For each licence we store the reported installation identifiers with the time of the last report and delete any identifier that has not been reported for thirty days. This is how we count on how many devices a licence is running at the same time. A trial licence reports nothing. If the number exceeds the device count of your package, quittum shows this; after fourteen days it pauses the processing of new documents until the number is correct again (section 3 of the licence terms). Viewing and searching always remain possible, as does exporting within the scope of the package. The report contains no document data, no email address and no information about your usage; it cannot be switched off, because it ensures compliance with the licence. It also applies to the version from the Microsoft Store and only begins once quittum has been set up and a purchased licence has been installed. With the report we receive your IP address for technical reasons; it appears only in the server logs under section 2, not in the device counter.

Licence pickup after purchase. If you buy from the quittum start window, quittum creates a random pickup key on your computer and keeps it there. In the link to our order summary quittum only passes a check value derived from it, which identifies neither you nor your computer. We keep it in your browser session for one hour, then store it together with the identifier of your order and pass it as a detail of the order to Stripe (section 6). After payment quittum asks us with the pickup key and receives your licence file once, the same one you also get by email: with your name, your email address and your package. While the start window is open, quittum asks at short intervals. In doing so we technically receive your IP address; it appears in the server logs under section 2 and, only as a shortened check value, in a daily counter against too many requests, which we delete after two days. We delete the check value and the order identifier after seven days, whether picked up or not. If you buy directly on quittum.de, you get no pickup key and add the licence file from the email.

Renewal of a time-limited licence from a legacy contract. For an existing instalment purchase, your licence is valid for one paid period at a time until the agreed purchase price has been reached. So that it keeps running, we send a new licence file back in the response to the licence report just described. This file contains the same information as the one you received by email when purchasing: your name, your email address, your package and the new period. It goes exclusively back to the installation that reported with your licence identifier.

Nothing additional is transmitted to us as a result: the report itself remains unchanged. We built it this way so that you need no account and no login for the renewal. Purchased licences do not receive such a file back: they are indefinite and do not need to be renewed.

Legal basis: for the update check Art. 6(1)(f) GDPR, our legitimate interest in ensuring that security fixes reach their users; for the licence report Art. 6(1)(b) GDPR, performance of the licence agreement, and (f), our legitimate interest in protection against unauthorised copying; for the licence pickup Art. 6(1)(b) GDPR, delivery of the purchased licence; for the renewal of a time-limited licence from a legacy contract Art. 6(1)(b) GDPR: it is the service you pay for.

9. Error reports from the program

quittum can send an error report to us, but only if you trigger it yourself in the program under „Fehler melden“ (“Report an error”). The report always contains your note and technical information that the program displays before sending: version, operating system, memory, free disk space, model and folder settings without credentials, the identifier and package of your licence, the result of the environment check, the number of documents per processing status and the last processing run.

Only if you enter or tick them are the following added: a reply address, up to five screenshots and the last lines of the program log. The log is not ticked by default; document file names in it are shortened and folder paths before the data folder removed.

The error report does not transmit document files by itself. However, whatever you write in the note yourself or show in a screenshot, such as an open document with amounts, names or bank details, reaches us exactly as you send it. Please therefore check screenshots before sending. Without an internet connection, quittum saves the report as a ZIP file in the data folder instead of sending it.

We process the report in order to fix the error and to reply to you (Art. 6(1)(b) GDPR for licence customers, otherwise (f): our interest in an error-free program). It reaches us as an email via the service named in section 7 and is additionally stored on our server (section 2) until we have dealt with it, for at most six months; then it is deleted.

10. Contact by email

If you write to us, we process your email address, your name and the content of your message in order to answer your enquiry (Art. 6(1)(b) GDPR for contractual matters, otherwise (f): our interest in answering enquiries). We delete the correspondence as soon as the matter has been settled and no retention obligation prevents this. Please do not send us any documents: we do not need them, and quittum has them on your side anyway.

11. No automated decisions

We do not make any decisions based solely on automated processing and do not create profiles.

12. Your rights

Under the GDPR you have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). Where we process data on the basis of legitimate interests (Art. 6(1)(f) GDPR), you may object on grounds relating to your particular situation (Art. 21(1)). You may object to advertising by email at any time without giving reasons (Art. 21(2) and (3)) and withdraw consent at any time with effect for the future (Art. 7(3)), as described in section 5. To do so, contact office@mbyt.eu.

You also have the right to lodge a complaint with a data protection supervisory authority: with the authority responsible for us, the Office of the Commissioner for Personal Data Protection, 1 Iasonos Street, 1082 Nicosia, Republic of Cyprus, or with the supervisory authority at your place of residence.

A note that is exceptionally useful here: we cannot answer a request for access regarding your document data, not out of unwillingness, but because we do not have it. It is on your computer, and you can view, export and delete it there at any time.

13. Changes

We adapt this statement when the processing changes, for example with a new service provider. The current version is always on this page; the date at the top shows when it was last updated.

14. Google account in quittum

Connection and permission. If you voluntarily choose „Mit Google verbinden“ (“Connect with Google”) in the desktop application, quittum opens the Google sign-in in your normal browser. There you grant quittum read permission for Gmail (gmail.readonly). With it, quittum can read messages, senders, subject, date, labels and attachments. The read permission serves solely to import into quittum the document attachments captured by your local rules. quittum does not use it to change or delete messages and does not mark them as read.

Optional sending permission. Only if you additionally choose „Auch zum Versenden nutzen“ (“Also use for sending”) when signing in do you also grant permission to send (gmail.send). quittum uses it exclusively to send messages that you trigger yourself or whose regular sending you have switched on, for example the monthly package to the address of your accountant that you entered. The message is created on your computer and passed directly to the Gmail API. It then appears in your Gmail “Sent” folder. The sending permission does not allow reading, changing or deleting messages. Without this choice, sending continues to take place only via an SMTP account you have set up or by handing a prepared message over to your email program. You can revoke the permissions at any time in quittum with „Trennen“ (“Disconnect”) or in your Google account.

Data flow and storage. The desktop application connects directly from your computer to the Gmail API via an encrypted connection. The short-lived access token is held only in memory during retrieval. The longer-lived refresh token is stored in the system keychain or, if no suitable secret store is available there, in the encrypted secrets file of your local quittum data folder. Sender, subject, retrieval time, technical message identifier and the link to the imported document are stored locally so that quittum does not process messages twice. Selected attachments are copied as documents into your local quittum collection. The local text recognition and the local AI model generate the document data from them, which is likewise held only in your local database. MBYT LTD receives neither your Gmail messages nor these attachments, derived document data or access tokens.

Purpose limitation. Google user data is not used for advertising, profiling, credit decisions, the sale of data or the training of general AI models. Employees of MBYT LTD do not view it. quittum does not transfer this data to a server operated by MBYT or a processor. After import, the attachment is a normal local document. It is only transferred to another destination if you yourself set up or trigger a corresponding function, for example the direct link between your devices, a storage folder you have chosen, an export or sending by email. You alone determine the destination and recipient. If you expressly attach log lines to an error report, quittum shows them to you before sending; they may contain shortened file names, but no message content or attachments (section 9).

quittum’s use of information received from Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements.

Revocation and deletion. Under „Postfach“ (“Mailbox”) you can disconnect the Google account at any time. quittum then revokes the token at Google and deletes the local token, the associated retrieval rules, retrieval states and message metadata. Attachments you have deliberately imported into your local document collection remain as your business records until you delete them in quittum. Alternatively, you can revoke access in the permissions of your Google account. Your messages in the Gmail mailbox are never changed or deleted by quittum at any time.

The legal basis is your consent (Art. 6(1)(a) GDPR), which you give through the Google authorisation and can withdraw at any time with effect for the future. Without this authorisation quittum continues to work; only the voluntary Gmail retrieval is then not available.

15. The desktop application quittum

Microsoft account in quittum

If you choose „Mit Microsoft verbinden“ (“Connect with Microsoft”), you open the Microsoft sign-in in the browser of your quittum computer. quittum asks for permission to read your own profile (User.Read), to read your own mailbox (Mail.Read) and to renew this connection (offline_access). Supported are personal Outlook accounts and work or school accounts with Exchange Online. Your organisation’s rules may require administrator approval.

Retrieval runs directly from your computer via TLS to Microsoft Graph. quittum does not change or delete messages, does not mark them as read and does not request any sending permission via this connection. The short-lived access token remains in memory. The refresh token is stored in the system keychain or in the secrets file of the local data folder encrypted with your master password. Account details, retrieval data and imported document attachments are stored locally. MBYT LTD receives neither your Microsoft messages and attachments nor your access tokens.

„Trennen“ (“Disconnect”) deletes the locally stored Microsoft access and prevents new retrieval runs. The account settings, rules and documents already imported remain. „Entfernen“ (“Remove”) additionally deletes the account settings, associated rules and local retrieval data; imported documents remain. You can additionally remove the consent granted at Microsoft in your Microsoft account or via your organisation’s administrator. Messages in your Microsoft mailbox remain unchanged.

Consent before processing. Documents, receipts and bank statements contain financial data such as amounts, bank details, tax numbers, names and addresses. Before quittum takes in your own documents, it expressly asks you whether it may process and store this data on your computer. Without this consent quittum does not take in any of your own documents: no uploading, no reading from document folders or mailboxes, no bank statement import, no background processing. You can withdraw the consent at any time under Einstellungen → Datenschutz (Settings → Privacy); after that quittum takes in nothing new, and existing documents remain until you delete them. This consent concerns processing on your own computer; MBYT LTD receives no document data as a result.

What is stored on your computer. Text recognition, AI model and database run on your computer. The data folder (by default quittum-daten in your user folder) contains: copies of your documents, the information recognised from them and your corrections in an SQLite database, settings, backups of the database, the program log (up to five files of 2 MB each; it may contain document file names) and unsent error reports. Document folders you specify are only read by quittum; depending on the setting, it moves imported originals into a subfolder, leaves them in place or removes them after a verified copy.

Protection. The database, the document copies and the backups are not encrypted. Settings, backups, home network credentials and the keys of the certificates are restricted to your user account. Passwords for mailboxes and email sending as well as the Google access are stored in the operating system’s keychain or, if none is available, in a file in the data folder encrypted with a master password, never in the settings. Anyone with access to your user account can read your documents; for additional protection you can place the data folder on an encrypted drive.

How long. Documents and information remain until you delete them. Deleted documents first go to the quittum recycle bin and disappear on permanent deletion. Of the backups, quittum keeps the ten most recent, unless you configure otherwise.

Your control. You can delete individual documents, choose „Alle Daten entfernen“ (“Remove all data”) under Einstellungen → Zurücksetzen und Entfernen (Settings → Reset and remove), or withdraw your consent. „Alle Daten entfernen“ (“Remove all data”) removes the contents of the data folder including backups (unless you choose to keep them) and quittum’s credentials in the keychain. What remains: the licence file, the downloaded AI runtime including models (removable under Einstellungen → Zurücksetzen und Entfernen → „Ollama und Modelle entfernen“ (Settings → Reset and remove → “Remove Ollama and models”)), update files, backups in an external folder you have chosen and the originals in your document folders. When you uninstall the version from the Microsoft Store, the data folder is kept; if you want to remove everything, first choose „Alle Daten entfernen“ and „Ollama und Modelle entfernen“ and then delete the data folder.

Downloads during setup. During setup, quittum downloads the AI runtime Ollama from GitHub (GitHub, Inc., USA) and the chosen language model from the model library of Ollama (Ollama, Inc., USA); it downloads further language data for text recognition only if you request it, likewise from GitHub. These connections go directly from your computer to these providers, not via us. For technical reasons the providers receive your IP address and the requested file, no documents; their own privacy policies apply to their processing.

Home network and device link. If you switch on home network sharing, quittum is reachable in your local network, encrypted with a certificate generated on your computer and only after signing in with your password. If you pair devices into a device link (Verbund), they synchronise documents, information and notes directly with each other, encrypted and only with the secret agreed during pairing. During pairing, the displayed code is not sent over the line: both devices derive a shared key from it, with which the other device proves that its certification authority is genuine. Only after that, and via the connection verified in this way, does the joining device receive the secret; from then on it checks every connection against this authority, and without it quittum does not pair or synchronise. Devices that were paired before 26 September 2026 must be paired again once. You can unpair at any time under Verbund (Device link).

Licence pickup. If you buy from the start window, quittum sends the pickup key to us until pickup and then receives your licence file once (section 8). No other details go to us in the process.

Home network certificate. Only if you use home network sharing and quittum obtains a publicly trusted certificate for your home network does quittum send us the identifier of your licence, a random identifier and a certificate request; the private key remains on your computer. The certificate is issued by Let’s Encrypt; the associated name contains only the random identifier and, as with all such certificates, is recorded in public certificate logs. Name queries for these addresses are answered by our name server; they reveal the local IP address of your computer in the home network.

Mailbox and email sending. You set up mailbox retrieval (IMAP or Google, section 14) and sending to your accountant (SMTP) yourself. quittum then connects directly to your provider; for retrieval encrypted and with verification of the server certificate, for sending with the encryption you configure. The recipient of a sending is whoever you specify. Both run automatically only if you switch this on.

AI answers. The „Fragen“ (“Questions”) function answers your questions with the local language model from your own documents. Questions and answers remain on your computer. Answers may be wrong; you can report inappropriate or incorrect answers to us via „Fehler melden“ (“Report an error”) (section 9).

16. quittum Connect (access on the go)

With the quittum Connect subscription you use the browser of your phone or another device to access quittum running on your own computer via connect.quittum.de. Your receipts, documents and bookkeeping data stay on your computer. We do not store them, not even temporarily.

End-to-end encrypted. Device and computer first connect through our brokering service via WebSocket and, as soon as possible, directly via WebRTC. On both paths the content is encrypted with keys that only your device and your computer know: through the brokering service with AES-256-GCM, directly with DTLS. Our server cannot read it, neither when brokering the connection nor when forwarding it.

What we process. To operate Connect we process the following on our server at Hetzner (section 2):

• Connect account: email address, name, language, chosen billing period, term and status of the subscription, the customer and subscription identifiers at Stripe and the link to your quittum licence (section 5). Payment itself is processed by Stripe (section 6); we send confirmation emails via Google Workspace (section 7).
• Account code: To link your computer to your account, we create a one-time account code in the customer area. We only store a check value of it (SHA-256); the code is valid for 24 hours.
• Device identifiers: random identifiers and public keys of your computer and your paired devices, the assignment of devices to the computer, the time of pairing, when your computer was last connected and whether a device has been revoked. We never receive private keys; they stay on the devices.
• Names of computers and devices: the name of your computer in quittum and the names you assign to your paired devices on the computer. If the device itself suggests a name in its request, we keep that suggestion only until you accept or reject the pairing on the computer.
• Signalling: To set up the connection, our server forwards connection offers between device and computer. They contain technical details for establishing the connection, including the IP addresses and ports of both sides. We only forward them; as configured, we do not write their content to the log (not yet verified on the server). A pairing offer (invitation) is valid for fifteen minutes; after your decision on the computer we keep the result available for collection by the device for at most thirty minutes.
• Forwarding through the brokering service: As long as there is no direct connection, and if none is possible, our brokering service forwards the end-to-end encrypted data packets between device and computer via WebSocket. It only sees the identifiers of device and computer, the start and end of the connection and the amount of data transferred, not the content.
• Direct path (STUN): For the direct connection, device and computer ask our STUN service under which public address they can be reached. For this it only processes the IP address and port of the request, keeps them in memory for a few seconds to limit requests per address. As configured, it does not write them to the log (not yet verified on the server). It does not forward any data.
• Server logs: IP address, time, device identifier and result of a sign-in or brokering, as described in section 2. Your computer and your device connect to quittum.de for this; the IP address of that connection is recorded in our web server log.

Purposes and legal basis. We process this data to perform the Connect contract (Art. 6(1)(b) GDPR): managing account and subscription, assigning devices, brokering and forwarding connections. We use the names of computers and devices so that each of your computers shows the devices of the others recognisably, and for the list in the customer area and the email notice when a new computer signs in. The server logs serve the security of operation and the prevention of misuse (Art. 6(1)(f) GDPR).

Retention.

• Server logs: we have configured deletion after fourteen days. We have not yet verified on the server that it works that way; until then we do not promise a fixed period.
• Signalling and forwarding: only for the duration of the connection setup and the connection; pairing offers at the latest thirty minutes after your decision, account codes after 24 hours.
• Device identifiers: until you remove the device on the computer or the Connect account is deleted.
• Device names: until the device is revoked, that is until you remove or replace it on the computer. Computer names: until the computer is signed out or the Connect account is deleted.
• Connect account: until thirty days after the subscription ends; we then delete the account together with all device identifiers.
• We retain invoices and payment records for as long as tax and commercial law require (Art. 6(1)(c) GDPR).

For businesses. If you use Connect as a business, we conclude a data processing agreement under Art. 28 GDPR with you as standard, insofar as we process data on your behalf. You receive the template with your order or on request to office@mbyt.eu.

Processor. The server is operated for us by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, in the Helsinki (Finland) data centre as a processor under Art. 28 GDPR. The data does not leave the European Union.

On your device. The web application connect.quittum.de stores the pairing key in your device’s browser storage and, while there is no connection, the encrypted captures still to be sent to the computer. We do not receive this data. You delete it by removing the site data of connect.quittum.de in your browser. This storage is strictly necessary for the service you have requested (Section 25(2) No. 2 TDDDG); no consent is required for it.

On your computer. quittum stores which devices are paired and when they were last connected on your computer (section 15).

Electronic withdrawal declarations

If you use the „Vertrag widerrufen“ (“Withdraw from contract”) function, we store your name, the email address provided, the contract details specified, your declaration as well as receipt identifier, time of receipt and sending status of the confirmation. This serves to receive and process your withdrawal and to send the legally required acknowledgement of receipt (Art. 6(1)(c) GDPR, Section 356a BGB, German Civil Code). The information is not used for advertising. A failed sending is retried; receipt of the declaration remains validly stored. The declaration is made available to MBYT LTD for processing. We keep the information until the end of the regular limitation period of three years from the end of the year in which the declaration was received, so that we can prove receipt in the event of a dispute (Art. 6(1)(f) GDPR); records relating to a refund, insofar as they are accounting records, for as long as stated in section 5.

Open withdrawal cases and records subject to a documented retention hold, for example because of an unresolved legal dispute, are not deleted automatically. We review the continued need while handling the case. Once the case is closed and the hold has ended, the stated retention period applies; if it has already expired, the record is deleted during the next daily cleanup.