Privacy Policy

The two freelancers behind LeapOps decide how your data is used and are responsible for it under the EU General Data Protection Regulation (GDPR). You can reach us about anything in this policy at nextgen.quantum@gmail.com.

• When you send a request: your name, your business name if you give it, the email address and the social media or messenger profiles you give, the services you choose with your answers and descriptions, your budget and start date if you pick them, the selections from price calculators if you used them, and the time you agreed to this policy.
• When you visit the site: your IP address and basic technical data (browser, time, page) that our hosting provider records in short lived server logs to keep the site running and secure.
• For spam protection: a keyed hash of your IP address that expires with the cooldown after a request (3 hours by default), and the signals Cloudflare Turnstile uses to tell people from bots.
• In your browser: your light or dark theme choice, the time of your last request and the calculator selections you pass on to the form. The Cookie Policy lists each entry.

We do not use analytics, advertising or tracking tools, and we never sell or rent your data.

• To answer your request and prepare an offer. Legal basis: steps you ask for before a possible contract (Article 6(1)(b) GDPR) and your consent (Article 6(1)(a)).
• To protect the site and the form from abuse. Legal basis: our legitimate interest in security (Article 6(1)(f)).
• To keep the records the law requires if a contract follows. Legal basis: legal obligation (Article 6(1)(c)).

A few providers process data for us under data processing terms and may not use it for their own purposes:

• Vercel, which hosts the website.
• Cloudflare, which runs the Turnstile bot check.
• Resend, which delivers requests to our inbox.
• Google, which provides the inbox where requests arrive.
• Upstash, which may store the spam protection cooldown.

Some of these providers are based outside the European Union. Those transfers rely on the European Commission's adequacy decision for the EU-US Data Privacy Framework or on standard contractual clauses.

• Requests: up to 12 months after our last contact, unless we start working together. Then as long as the project and the law require.
• The spam protection hash: until the cooldown ends, 3 hours by default.
• Server logs: for the short period our hosting provider keeps them.
• Browser storage: until you clear it. The calculator selection only until you close the tab or send the request.

You can ask us to show, correct, delete or hand over your data, to limit how we use it, or object to its use. Where we rely on your consent, you can withdraw it at any time; this does not affect what happened before. Write to nextgen.quantum@gmail.com and we answer within one month.

You can also complain to a data protection authority, in particular in the EU country where you live, work or where you think the problem happened.

The site is meant for businesses. We do not knowingly collect data from children under 16.

When this policy changes, we update it here and change the date at the top.