Privacy policy.
This policy has two parts. Part A is for customers and visitors: the data your account and your visit create. Part B is for people who appear in the news coverage we analyse, whether or not they ever use Quantiveo. Both are governed by the same law and the same contact.
Quantiveo is a product of TheCrux Studios Inc., a British Columbia corporation. We handle personal information under British Columbia's Personal Information Protection Act (PIPA) and, for information that crosses borders or concerns people outside British Columbia, Canada's Personal Information Protection and Electronic Documents Act (PIPEDA). Where the GDPR or a similar law applies to you, the rights below include the rights it gives you. Our Privacy Officer is the CEO: privacy@quantiveo.com.
Part A — Customers and visitors
What we collect
- Account. Name, email, organisation, password hash and multi-factor settings (held in AWS Cognito), plan and API keys.
- Usage. Which features and endpoints you use, request counts and timestamps, the entities and topics you track, and the content you create in the product (watchlists, agents, reports).
- Payments. Handled by Stripe. We keep your billing name, address and invoice history; we never see your card number.
- Technical. IP address, browser and device type in server logs and error reports, kept briefly for security and reliability.
- Analytics. Page views and product events in cookieless mode. Nothing is stored in your browser for analytics on quantiveo.com and no sessions are recorded; the product app keeps one first-party identifier in local storage to count usage. We do not use advertising cookies or trackers on quantiveo.com or in the product app.
- Consumer sites. Our consumer sites (famebunny.com and the other sites that name this policy in their footer) keep the same first-party identifier in local storage to count usage. Where a consumer site shows advertising, the ads are served by Google AdSense, which may set advertising cookies on that site under Google's advertising policies; a paid plan on the site removes the ads. Accounts and payments on those sites work as described above.
- Correspondence. What you send to support, sales, privacy or legal.
Why
To provide and secure the service, bill you, answer you, improve the product, and meet legal obligations. We send marketing email only with your consent and every message has an unsubscribe link. We do not sell personal information.
Who we share it with
Only the vendors that run the service, under contracts that limit what they may do with it:
| Vendor | What for | Where |
|---|---|---|
| Amazon Web Services | Hosting, databases, storage, authentication (Cognito), transactional email (SES) | Canada (ca-central-1) for production data; some services in the United States |
| Stripe | Payments and billing | United States |
| Cloudflare | DNS, CDN and edge protection | Global network |
| PostHog | Product analytics, cookieless | European Union (EU cloud) |
| Sentry | Error monitoring (no personal data in payloads by configuration) | United States |
| Resend | Transactional email for privacy requests | United States |
| OpenAI, Anthropic, Voyage AI | Language-model and embedding inference over public news content and entity metadata; zero data retention where the vendor offers it | United States |
| GitHub | Source code and build pipeline (no customer data) | United States |
We also disclose information when the law requires it, to protect our rights or someone's safety, or with your direction. If Quantiveo is acquired, personal information transfers with it under this policy.
Security and retention
Traffic is encrypted in transit and data at rest; access is role-based with multi-factor authentication; API keys are stored hashed. Account data is kept while your account is open and deleted or anonymised within 90 days of closure, except invoices and records we must keep (7 years). Server logs are kept for up to 30 days and error reports for up to 90 days. Our security page describes the program.
Your rights
You may ask what personal information we hold about you, have it corrected, export it, or have your account and its data deleted, and you may withdraw consent to marketing at any time. Write to privacy@quantiveo.com; we respond within 30 days. If you are not satisfied you may complain to the Office of the Information and Privacy Commissioner for British Columbia or, for matters under PIPEDA, the Office of the Privacy Commissioner of Canada. EU and UK residents may also complain to their local authority.
Part B — People in our data
Quantiveo measures news coverage. To do that it keeps records about the people that coverage is about. This part explains what those records are, where they come from, what we do and do not do with them, and how you can act on yours.
What we hold about a person
- Name and known aliases; the public roles that coverage attaches to the name (an office, a profession, an organisation).
- Coverage statistics: how many articles mention the person, from which outlets, over what period, and the sentiment of that coverage in aggregate.
- Scores derived from those statistics (fame, reputation, momentum, authority). They describe coverage, not character.
- Narratives: claims that spread across coverage in which the person is a subject, with an AI assessment of what the cited sources say about the claim.
- A portrait, when Wikimedia Commons holds one under a free licence, credited to its photographer.
- Reference identifiers from Wikidata, where the person has an entry, and the public reference facts recorded there: date and place of birth (and of death, where recorded), gender, nationality, occupations, fields of work and genres, positions held, employer, awards and notable works, and family and education (spouse, parents, children, schools). These are held to tell people of the same name apart and to describe a public role; they are never shown as a profile of private life. For people we classify as private, the family and education entries and the place of birth are removed nightly; the other facts stay on the internal record, which is never shown.
We do not hold article text. Pages are fetched under our crawl policy and reduced to a short excerpt and derived signals. Since September 2026 the body is deleted within 30 days of being fetched; text collected before then is being purged in scheduled batches.
Where it comes from
Public news metadata from The GDELT Project; publishers' pages and feeds, fetched politely and never republished; Wikidata and Wikipedia; Wikimedia Commons; and, only where a source is enabled and licensed, public profiles on social platforms. All of it is information that has already been made public.
Why we hold it, and the legal basis
Our purpose is media intelligence: showing our customers who and what the news is about and how that changes. Under BC PIPA we rely on the fact that the information comes from publicly available sources of the kinds the law recognises (published news, public registries and profiles), and on the reasonableness of the purpose. For people in the European Union we rely on legitimate interest — ours and our customers' interest in understanding public coverage — balanced against yours, which is why the safeguards below exist.
Public figures and private individuals
We publish profiles only of people in public life: those who hold or seek public office, lead organisations, perform or compete in public, or have received sustained coverage across many outlets. A rules-based classifier decides this from verified reference data and coverage patterns, a person reviews the borderline cases, and every decision is recorded with its reasons. Anyone else who appears in coverage is kept internal: not shown in profiles, search, rankings or feeds, and not assessed by our AI. Known minors are never shown.
What we do not do
- We do not make or support decisions about a person's eligibility for credit, insurance, employment, housing, education or benefits. Quantiveo is not a consumer reporting agency, and our Acceptable Use Policy forbids customers from using it as one.
- We do not sell personal information, build marketing profiles, or track anyone across the web.
- We do not assert that a person did anything. Our AI describes what cited sources say, labels every assessment as an AI output that may be wrong, and links to a correction channel.
How long
A public figure's record is kept while coverage continues. We intend to reduce a record to aggregate statistics 12 months after the last mention; that control is being built and this sentence will change when it ships. Records of people we classify as private (tier C) are internal only: their contact, family and schooling details are removed nightly and they are never shown; the record itself is kept so that the same name is recognised as private the next time it appears. Requests you make to us are kept for 7 years as a record of how they were handled.
Your rights and how to use them
Whether or not you are a customer, you may ask us for a copy of what we hold about you, a correction, deletion or suppression of your profile, an objection to processing, removal of a portrait, or a review of a claim you believe is false. Use the privacy request form. We confirm the request by email, verify that it comes from you or your representative, and reply within 30 days (2 days for a complaint about a claim). Suppression is applied across every surface, including the API and cached pages, and checked again daily. A request about a public figure's factual role in coverage may be answered with a correction rather than removal; we tell you why in writing and you may complain to the OIPC for British Columbia.
Automated processing and cross-border transfers
Scores and assessments are produced automatically and are not used to make legal or similarly significant decisions about you; the public-figure classification is reviewed by a person at the borderline. Some processing happens with vendors in the United States and the European Union (listed above) under contracts with appropriate safeguards; production data is stored in Canada.
Changes and contact
We will post changes here and, for material changes, notify customers by email. Questions and requests: privacy@quantiveo.com, or the privacy request form. Postal address on request.
Draft for counsel review. Part B describes practices being rolled out under the 2026-09 compliance program; retention windows take effect as each control ships.