Legal

Privacy notice

Reference notice · Updated 26 August 2026

Haechi is a collaborative product of Quantumind SSI and Haechi Internet Security Services. This website is an engineering-stage deployment operated by Quantumind SSI, which controls the hosting and the database.

This notice describes the information handled by the enterprise pilot request form. It must be reviewed and completed before public launch with the registered details of both parties, a data-protection contact, and a decision on whether the two parties are joint controllers of this data. If both access submitted information, UK GDPR Article 26 requires a written arrangement between them and the essence of it must be made available here.

Information submitted

The pilot form collects your organisation, work email, optional role, deployment preference, any information you choose to place in the message, a truncated browser user-agent string and a keyed pseudonymous identifier derived from your IP address for abuse prevention. The raw IP address is not stored by the application.

Purpose

The information is used only to assess and respond to your request for an enterprise pilot. It must not be used for unrelated marketing without a separate lawful basis and notice.

Storage and processors

Pages are served by Cloudflare. Submitted information is sent to an application operated by Quantumind SSI on Microsoft Azure and is stored in a managed PostgreSQL database in the Azure UK South region, which is located in the United Kingdom. The database has no public network endpoint and is encrypted in transit and at rest. Cloudflare does not store your submission.

Cloudflare and Microsoft act as processors for Quantumind SSI. A retention and deletion schedule has not yet been approved, so no automatic deletion runs today. Public launch remains blocked until that schedule is approved and implemented.

Cookies and tracking

This website does not include advertising trackers, analytics SDKs or non-essential cookies.

Your rights

Depending on applicable law, you may have rights to access, correct, delete or restrict use of your personal data. A verified contact address for these requests must be published for these requests before launch.

Security

The reference server applies restrictive browser security headers and limits form input. Production hosting must additionally provide TLS, access monitoring, encrypted storage, backup controls and an incident-response process.