PPM Solution by Quantril
1. Introduction
Quantril ("we," "us," or "our") provides the PPM Solution, a project portfolio management application built on Microsoft Dynamics 365 and Power Platform. This Privacy Policy applies specifically to the PPM Solution and describes how we handle information collected through the application.
By using the PPM Solution, you agree to the collection and use of information in accordance with this policy.
2. Information We Collect
2.1 Information You Provide
When you use the PPM Solution, you may provide:
Account Information: Name, email address, job title, and organizational details
Project Data: Project names, descriptions, timelines, milestones, budgets, and deliverables
Resource Information: Resource names, skills, availability, and allocation details
Task Data: Task descriptions, assignments, progress updates, and time tracking
Financial Data: Budget figures, cost tracking, and financial reports
Communication Data: Comments, notes, and collaboration messages within the application
2.2 Automatically Collected Information
We automatically collect certain technical and usage information:
Usage Data: Features accessed, frequency of use, session duration, and user interactions
Device Information: Browser type, operating system, device type, and IP address
Performance Data: Error logs, crash reports, and system performance metrics
Authentication Data: Login timestamps and authentication method used
2.3 Information We Do NOT Collect
We do not collect:
Payment card information (handled by Microsoft/payment processors)
Passwords (managed by Microsoft Azure AD)
Personal financial information beyond project budgets
Social security numbers or government-issued IDs
3. How We Use Your Information
Purpose
Description
Service Delivery
Technical Support
Communication
Security
Compliance
4. Data Storage and Security
4.1 Where Your Data is Stored
All data you enter into the PPM Solution is stored in your organization's Microsoft Dataverse environment. This means:
Your data resides in Microsoft's secure cloud infrastructure
Data location is determined by your Microsoft 365/Dynamics 365 tenant settings
Microsoft's data residency and sovereignty policies apply
You maintain ownership and control of your data
4.2 Data We Store
Quantril may store limited telemetry and diagnostic data on our servers for product improvement purposes. This data is:
Anonymized and aggregated
Does not include customer business data or personally identifiable information
Stored on secure servers in India
Retained for up to 24 months for analysis purposes
4.3 Security Measures
We implement industry-standard security measures:
Encryption in transit (TLS 1.2 or higher) and at rest
Role-based access controls (RBAC) within the application
Regular security assessments and vulnerability testing
Compliance with Microsoft's security and certification standards
Employee training on data protection and privacy
Incident response procedures for security breaches
5. Data Sharing and Disclosure
5.1 Third-Party Services
The PPM Solution integrates with and relies on:
Microsoft Services: Azure, Dynamics 365, Power Platform, Microsoft 365
Purpose: Core application infrastructure, authentication, and data storage
Privacy: Governed by Microsoft's privacy policies
5.2 When We Share Information
We may share information only in these circumstances:
With Your Consent: When you explicitly authorize sharing
Service Providers: With trusted vendors who assist in service delivery (under strict confidentiality agreements)
Legal Requirements: When required by law, court order, or government request
Business Transfers: In connection with a merger, acquisition, or sale of assets (with notice to users)
Protection of Rights: To protect the rights, property, or safety of Quantril, our users, or the public
5.3 What We DO NOT Do
We never:
Sell your personal information or business data to third parties
Share your data for third-party advertising or marketing
Use your project data to train AI models or develop competing products
Transfer data to unauthorized parties
6. Your Rights and Choices
6.1 Data Access and Control
You have the right to:
Access: Request a copy of your personal information
Correction: Update or correct inaccurate information
Deletion: Request deletion of your personal information (subject to legal retention requirements)
Export: Export your data in a portable format
Restriction: Request restriction of processing in certain circumstances
Objection: Object to processing of your information
6.2 How to Exercise Your Rights
To exercise any of these rights, contact us at: support@quantril.com
We will respond to your request within 30 days.
6.3 Organization Control
As the PPM Solution operates within your organization's Microsoft environment, your organization's IT administrator has control over:
User access and permissions
Data retention policies
Application installation and removal
Data export and backup procedures
7. Data Retention
We retain information as follows:
Active Use: Your business data remains in your Dataverse environment as long as you use the application
After Uninstall: Your data remains in your Dataverse environment (you control deletion)
Telemetry Data: Anonymized usage data retained for up to 24 months
Support Records: Support ticket history retained for 3 years
Legal Obligations: Some data may be retained longer if required by law
8. International Data Transfers
If you use the PPM Solution from outside the region where our services are hosted, your information may be transferred internationally. We ensure such transfers comply with applicable data protection laws through:
Microsoft's global infrastructure and compliance frameworks
Standard contractual clauses approved by regulatory authorities
Adherence to EU-U.S. Data Privacy Framework (if applicable)
Implementation of appropriate technical and organizational safeguards
9. Children's Privacy
The PPM Solution is designed for business use and is not intended for individuals under 16 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child, we will take steps to delete such information.
10. Cookies and Tracking Technologies
The PPM Solution uses minimal cookies and tracking technologies:
Essential Cookies: Required for authentication and application functionality
Analytics: Anonymous usage analytics to improve the product
Session Management: To maintain your logged-in state
These are managed through Microsoft's platform and your browser settings. You can control cookie preferences through your browser, though disabling essential cookies may impact functionality.
11. Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect:
Changes in our practices or services
Legal or regulatory requirements
User feedback and concerns
We will notify you of material changes by:
Posting a notice in the application
Sending an email to your registered address
Updating the "Effective Date" at the top of this policy
Continued use of the PPM Solution after changes constitutes acceptance of the updated policy.
12. Compliance and Certifications
Our privacy practices align with:
GDPR: General Data Protection Regulation (EU)
CCPA: California Consumer Privacy Act
Microsoft Trust Center: We adhere to Microsoft's compliance standards
ISO 27001: Information security management (via Microsoft Azure)
SOC 2 Type II: Service organization controls (via Microsoft Azure)
13. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:
Quantril - PPM Solution Privacy Team
Support: support@quantril.com
Website: https://quantril.com
For general inquiries about Quantril:
Quantril
Flt No-C-27 Kamdhenu CHS, Sec-5,Plot No.525,Charkop, Kandivali West, Mumbai- 400067
14. Data Protection Officer
For privacy matters requiring escalation or if you are located in the EU/EEA, you can contact our Data Protection Officer at:
Email: support@quantril.com
15. Your Regulatory Rights
If you believe we have not addressed your privacy concerns adequately, you have the right to lodge a complaint with your local data protection authority.
