Privacy & Data Notice

What this notice covers

This Privacy & Data Notice applies to dueschaser.com, the Keystone Tools catalog, its public forms and analytics endpoint, and contact you initiate from those pages. A signed product order, pilot offer, data-processing addendum, or community-specific notice controls where it describes a paid service in greater detail.

Audience. The site is intended for association board members, property-management professionals, vendors, and other business users. Do not submit resident-level, payment-card, government-ID, health, credential, or other sensitive data through a public waitlist form.

What we collect

We collect information you choose to provide and limited technical data produced when the site responds to a request.

No advertising profile: we do not place advertising cookies, build a cross-site profile, or call the day-scoped analytics hash anonymous. Hosting logs and font delivery may still process ordinary request information such as IP address, URL, user agent, and time.

How we use information

• Respond to a request, confirm interest, and provide the product or service you ask about.
• Measure page use and conversion at an aggregate level, debug failures, and improve product positioning.
• Limit automated abuse, secure endpoints, investigate incidents, and maintain reliable records.
• Reconcile Stripe checkout, subscription, failed-payment, cancellation, and onboarding events.
• Honor unsubscribe, deletion, correction, and other applicable privacy requests.
• Meet contractual, accounting, tax, fraud-prevention, and legal obligations.

We do not use public-site analytics for automated decisions with legal or similarly significant effects.

Who receives information

We disclose information only as needed for the purposes above: to our hosting and infrastructure providers; to Stripe for checkout and payment processing; to Google when your browser requests the optional web fonts used by these pages; to professional advisers or authorities when reasonably necessary; and to a successor in a legitimate business transaction subject to appropriate safeguards.

We do not sell or rent personal information. We do not share it for cross-context behavioral advertising. Stripe and other providers may process information under their own notices when you interact directly with them.

How long we keep information

• Rate limiting: the raw IP address is discarded after a day-scoped hash is made; attempt times older than one hour are removed on the next waitlist request.
• First-party analytics: the active file is pruned to a 400-day window when the analytics endpoint receives traffic, at most once per day.
• Unconverted waitlist entries: the active file is pruned to a 730-day window when the waitlist receives traffic, at most once per day, unless you ask us to remove the entry sooner or an active relationship requires a different record.
• Opt-out and suppression evidence: while we operate the relevant marketing list and afterward as reasonably needed to keep the request honored and document compliance.
• Stripe and service records: until safely reconciled, then for the period required by an applicable order, accounting or tax rule, dispute hold, security need, or documented records schedule.
• Provider logs and backups: under the provider schedule and reasonable recovery cycle.

When a record no longer serves an identified purpose, we delete it, de-identify it, or isolate it until a backup expires.

Your choices and privacy requests

You may ask to access, correct, or delete information tied to you, or object to certain processing, by emailing hello@quorumtools.com. Tell us the email address or business context that will help us locate the record. We may verify identity and authority before disclosing or changing it. Applicable law may create additional rights or exceptions.

Every commercial marketing message must provide a working opt-out. Opt-out evidence is retained so the suppression remains effective.

Browser privacy signals

Because the site does not use cross-site behavioral advertising or third-party advertising cookies, a Do Not Track signal does not change the site analytics described above. Where an applicable law requires recognition of a universal opt-out signal, we will treat the signal according to that law. Third parties such as the hosting provider, Stripe, or font provider may receive ordinary request data as described above.

Security, children, and notice changes

We use data minimization, protected non-public storage, signed payment webhooks, authenticated exports, rate limiting, and access controls appropriate to these flows. No internet service can promise perfect security. If you believe information has been misused or exposed, contact us promptly.

The site is not directed to children under 13, and we do not knowingly collect their personal information through the site.

We may update this notice when the products, providers, or law change. We will change the effective date and give additional notice when a change is material and the context requires it.