Privacy Policy

Last updated: August 10, 2026

QStart Labs, LLC ("QStart Labs," "we," "us") builds and operates custom software. This policy explains how we handle information collected through this website, qstartlabs.com. We have written it to describe what the site actually does, in plain language, rather than to reserve every right we could.

1. Information you give us

The only place this site asks you for information is the contact form. When you submit it, we receive:

• Your name and email address — required, so we can reply.
• Company, service of interest, and budget range — optional. Leaving them blank does not stop the form from working.
• Your message — required, and whatever you choose to put in it.
• The page you submitted from — recorded automatically so we know which part of the site prompted you to get in touch.

Submissions are stored in our database and emailed to our team. Please do not send confidential, regulated, or sensitive personal information through this form — it is a first-contact channel, not a secure one. If you need to share something sensitive, tell us and we will arrange a secure method.

If you book a call, scheduling is handled by Calendly, a third party. The name, email, and any details you enter there go to Calendly under their privacy policy, and they share the booking with us. Calendly's code is only loaded if you open the scheduler.

2. Information collected automatically

Server logs. Our servers record standard request information — IP address, browser and device type, pages requested, timestamps, and referring page. We use it to keep the site running, diagnose faults, and investigate abuse.

Analytics. We use Google Tag Manager to load Google Analytics and, where relevant, Google Ads conversion measurement. These record which pages you view, how you arrived, and general device and approximate location information derived from your IP address. We use it to understand which pages are useful and which marketing is working. We do not use it to try to identify you personally. Analytics is deliberately deferred until your browser is idle or you interact with the page, so it never delays the content you came for.

Fonts. Our typeface is served from Fontshare's CDN. Loading a font means your browser makes a request to that CDN, which necessarily discloses your IP address to them.

3. Cookies

This site sets very few cookies, and none of them are advertising cookies of our own:

• qstart-theme — remembers whether you chose light or dark mode. Expires after one year. It holds a single word and identifies nothing.
• access_token and refresh_token — set only when a QStart Labs staff member signs in to our private portal. They are httpOnly session cookies for authentication. If you are a visitor, you will never receive these.
• Google Analytics / Tag Manager cookies — set by Google when analytics loads, to distinguish repeat visits and measure sessions.

You can block or delete cookies in your browser settings. The theme cookie is the only one whose absence you will notice — the site will simply forget your display preference. To opt out of Google Analytics specifically, you can install Google's opt-out browser add-on. We honor Global Privacy Control (GPC) signals where our analytics tooling supports them.

4. How we use information

• To reply to your inquiry and discuss a possible engagement.
• To provide, maintain, secure, and improve this website.
• To understand which content and marketing channels are effective.
• To meet legal, accounting, and contractual obligations.

We do not sell your personal information, and we never have. We do not share it with third parties for their own marketing.

5. Who we share information with

We share information only with service providers who help us run the business:

• Amazon Web Services — hosting and infrastructure.
• Google — analytics and advertising measurement.
• Calendly — scheduling, if you book a call.
• Our email provider — delivering contact form notifications.

We may also disclose information if the law requires it, to enforce our agreements, or to protect the rights and safety of QStart Labs or others. If our business is ever sold or merged, information may transfer as part of that transaction.

6. How long we keep it

We keep contact inquiries for as long as we have an active or reasonably foreseeable business relationship, and afterwards for as long as we need them for legal, tax, or record-keeping purposes. Server logs and analytics data are kept on shorter, rolling retention periods. You can ask us to delete your inquiry at any time.

7. Your choices and rights

Whatever jurisdiction you are in, you can email us at hello@qstartlabs.com and ask us to:

• Tell you what information we hold about you.
• Correct it if it is wrong.
• Delete it.
• Stop contacting you.

Depending on where you live — including under laws such as the California Consumer Privacy Act and comparable US state privacy laws — you may have a formal right to these, plus the right not to be discriminated against for exercising them. We extend these options to everyone who asks rather than checking your address first. We will respond within the timeframe the applicable law requires, and within 30 days at the outside. We may need to verify your identity before acting on a request.

8. Security

We are a security and compliance engineering practice, and we hold our own site to the standards we build for clients: encrypted transport (HTTPS) sitewide, hashed credentials, httpOnly authentication cookies, least-privilege access to systems, and infrastructure managed in AWS. No system is perfectly secure, and we will not claim otherwise — but security is not an afterthought here.

9. Children

This is a business-to-business website. It is not directed to children under 13, and we do not knowingly collect their information. If you believe a child has sent us information, email us and we will delete it.

10. Where your information is handled

QStart Labs is a US company and our infrastructure is hosted in the United States. If you contact us from outside the US, your information will be transferred to and processed in the United States, where privacy laws may differ from those in your country.

11. Changes to this policy

If we change this policy we will update the "last updated" date above. Material changes will be called out on this page. Continuing to use the site after a change means you accept the updated policy.

12. Contact us

Questions about this policy, or want to make a request? Reach us at: