Privacy policy
Version of 7 November 2026.
1. Who processes your data
Quantum Liquid LLC, 30 N Gould St, Ste R, Sheridan, WY 82801, United States of America, publishes CashLead. Contact: support@cashlead.io.
For the files your company uploads, your company is the controller and Quantum Liquid LLC is its processor, under the data processing agreement. For the accounts of people who log in, Quantum Liquid LLC is the controller.
2. The data
- Account: name, email address, language, company. Login goes through the Lead Account (ERPlead): CashLead does not manage any passwords.
- Uploaded files: the columns your company maps, for example quote, order and invoice numbers, names of customers, salespeople and debtors, amounts, dates, payment references.
- Results: the diagnostics calculated from these files.
- Log: who uploaded, ran or erased what, and when. It contains no customer data.
- Cookies: only those needed for the session and the language. No audience measurement tool, no advertising.
3. Reading and encryption
Your files are read in your browser. Only the mapped columns are sent to the server, never the whole file. The file name, rows and results are stored encrypted with AES-256-GCM, using a derived key specific to your company.
4. Purpose and legal basis
The data is used only to provide the service to your company: calculating time intervals, findings, alerts. It is not used to train an artificial intelligence model or for advertising, and it is neither sold nor shared with other customers. CashLead does not send your data to an artificial intelligence service. The legal basis is performance of the contract and the legitimate interest in securing the service.
5. Where and with whom
- Vercel Inc.: application hosting, Frankfurt region (Germany).
- Neon (Databricks, Inc.): database, AWS eu-central-1 (Frankfurt, Germany).
- Lead Account (ERPlead, Quantum Liquid LLC): login.
These companies and the publisher are established in the United States. The data is hosted in the European Union, but access from the United States remains possible for operations and support, or at the request of an authority. These transfers are governed by the European Commission's standard contractual clauses and their Swiss adaptation.
6. Retention
Files and diagnostics remain for as long as your company keeps them. The "Erase everything" button deletes them immediately; technical backups disappear within 6 hours. The log is kept for no more than 24 months. Inactive accounts are deleted on request.
7. Your rights
Anyone can request access to their data, its rectification, erasure, restriction of processing or portability, and can object to processing, by writing to support@cashlead.io. You may also contact the competent authority, in Switzerland the Federal Data Protection and Information Commissioner (FDPIC).