Privacy policy
Quinoa, Inc. (“Quinoa,” “we,” “us,” “our”), a Delaware corporation, provides a software platform used by research sites, pharmaceutical sponsors, biotechnology companies, and contract research organizations in connection with clinical trial operations and patient safety workflows.
This Privacy Policy explains how we collect, use, disclose, and protect personal information through our public website at tryquinoa.health and related domains (the “Website”), and in connection with prospective customer interactions, marketing communications, and resource downloads.
Who this Policy covers
Visitors to the Website.
Individuals who submit inquiries, request a demo, subscribe to our updates, download materials, apply for a job, or take part in scoping conversations about a potential pilot or partnership.
Prospective customer personnel — clinical, administrative, legal, security, and procurement — who interact with us before an agreement is executed.
What this Policy does not cover
Not covered here
Governed by
The Quinoa patient and caregiver application
The Quinoa Participant and Caregiver Privacy Notice
Protected health information we process for a customer
The executed Business Associate Agreement and customer agreement
Clinical trial data
The participant’s Informed Consent Form, the study protocol, and our agreements with the site and sponsor
Consumer health data rights under Washington and Nevada law
Our Consumer Health Data Privacy Policy
Third-party websites you reach from ours
That third party’s own policy
HIPAA carve-out. Where Quinoa provides its platform to a HIPAA covered entity or to another business associate, Quinoa acts as a Business Associate. Our handling of protected health information (“PHI”) in that context is governed by the executed Business Associate Agreement and the underlying customer agreement, not by this Policy. The Website does not collect PHI.
Information we collect
Information you provide
Identifiers and contact information. Name, business email address, telephone number, postal address, professional title or role, and employer or institution.
Inquiry and engagement information. What you tell us when you contact us, request a demo or a resource, register for an event, or take part in a scoping conversation.
Commercial information. Stated needs, evaluation criteria, technical environment summaries, and procurement timelines, to the extent you choose to share them.
Communications. The content of emails, form submissions, voicemails, scheduling notes, and other messages you send us.
Job applications. Resume, work history, references, and related information you submit when applying for a role.
Marketing preferences. Subscription and unsubscribe selections.
Information we collect automatically
Internet and network activity. IP address, browser type and version, operating system, device type and identifiers, language preferences, referring and exit pages, pages viewed, links clicked, and dates and times of access.
Approximate location. City or state level, derived from IP address. We do not collect precise location through the Website.
Cookies and similar technologies. See Cookies and tracking.
Information from third parties
Service providers who help us operate the Website, deliver email, or analyze usage.
Publicly available professional sources — business directories and professional networking platforms — used to verify or supplement contact information you have given us.
Partners and referrers who introduce you to us with your knowledge.
Inferences
From the information above we may draw limited inferences about your professional role, your organization’s type (for example, academic medical center, sponsor, or CRO), and which of our materials are likely to be relevant to you.
What we do not collect through the Website
The Website is not designed to collect protected health information, payment card numbers, government identification numbers, or sensitive personal information beyond what is reasonably necessary to respond to a business inquiry.
Please do not submit PHI, patient records, clinical trial participant data, or confidential study documents through the Website. If you believe you have submitted PHI to us through the Website in error, contact privacy@tryquinoa.health so we can address it.
How we use information
Respond to you. Answer questions, fulfill resource requests, arrange demos, and provide information you ask for.
Send communications. Product updates, event invitations, and other messages you have opted into, consistent with your preferences and applicable law.
Evaluate fit. Assess whether a prospective customer or partner is a good fit for a pilot or engagement.
Recruit. Evaluate job applications and communicate with candidates.
Operate and improve the Website. Monitor performance, analyze usage, debug problems, and develop features.
Security and integrity. Detect, investigate, and prevent fraudulent, unauthorized, or unlawful activity, and protect our rights and the rights of others.
Comply with law. Meet legal obligations and respond to lawful requests.
Corporate transactions. Evaluate, negotiate, and complete financings, mergers, acquisitions, or sales of assets.
We do not use Website information to make decisions about you by solely automated means.
Data retention
We keep personal information only as long as necessary for the purposes it was collected for, including to meet legal, accounting, and audit obligations, resolve disputes, and enforce our agreements.
Category
Retention
Website form submissions and inquiry records
24 months from last interaction, unless an active engagement or contractual relationship is ongoing
Marketing email lists
Until you unsubscribe, or until we determine the address is inactive
Website session logs
90 days, unless retained longer to investigate a security incident or meet a legal obligation
Aggregated analytics
12 months
Job applications
24 months, unless a longer period is required or you ask us to keep them longer
Records required for legal, regulatory, audit, or tax purposes
As required by applicable law
When information is no longer needed, we delete or de-identify it securely.
Your rights
Depending on where you live, you may have the right to know what personal information we collect and how we use it, to access it, to correct inaccuracies, to request deletion, to obtain a portable copy, to opt out of sale or targeted advertising, and to limit our use of sensitive personal information.
How to exercise them. Email privacy@tryquinoa.health with enough information for us to identify you and understand your request. We may need to verify your identity. We will respond within the time your state’s law requires. You will not be charged unless a request is manifestly unfounded or excessive.
Appeals. If we deny your request, you may appeal by replying to our response with “Appeal” in the subject line. We will respond in writing with our reasoning, and if we deny the appeal we will tell you how to contact your state attorney general.
Authorized agents may submit requests with proof of authorization.
No discrimination. We will not deny you service, charge you a different price, or provide a different quality of service because you exercised a privacy right.
California
California residents have the rights above under the CCPA and CPRA, including the right to know, delete, and correct; the right to opt out of sale and of sharing for cross-context behavioral advertising; the right to limit use and disclosure of sensitive personal information; and the right to non-discrimination. Quinoa does not sell personal information and does not share it for cross-context behavioral advertising.
Notice of financial incentives. We do not offer financial incentives or price differences in exchange for retaining or selling personal information.
Shine the Light. Under California Civil Code Section 1798.83, we do not disclose personal information to third parties for their own direct marketing purposes.
Other states
Residents of Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia may have similar rights as those laws come into effect, including the right to appeal a denied request. Contact privacy@tryquinoa.health.
Cookies and tracking
The Website uses cookies and similar technologies — including pixels, web beacons, and local storage — to operate the Website, remember your preferences, analyze usage, and measure the performance of our communications.
We group them as strictly necessary (required for the Website to function), functional (preferences and settings), and analytics (how the Website is used).
When you first visit, we present a cookie banner that lets you accept or decline anything beyond strictly necessary cookies. You may change your choice at any time through the banner or your browser settings. Declining may affect how some features work.
We do not use cookies to track you across other websites for advertising.
Opt-out preference signals. Where required by law, the Website recognizes and honors Global Privacy Control (GPC) signals as opt-outs of sale and of sharing for cross-context behavioral advertising. Because there is no industry consensus on how to interpret “Do Not Track” headers, the Website does not respond differently to DNT signals at this time.
Children’s privacy
The Website is intended for business audiences and adults. It is not directed to children, and we do not knowingly collect personal information from anyone under 18. If you believe a minor has provided information to us, contact privacy@tryquinoa.health and we will take appropriate steps to delete it.
Security
We maintain administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, disclosure, alteration, loss, and destruction, including encryption in transit and at rest, access controls based on least privilege, multi-factor authentication for administrative access, logging and monitoring, incident response procedures, personnel training and confidentiality obligations, and contractual data protection requirements with our vendors.
No method of internet transmission or electronic storage is completely secure, and we cannot guarantee absolute security.
To report a suspected vulnerability or security incident, contact security@tryquinoa.health.
Where we process information
Quinoa is based in the United States, and we process personal information in the United States. The Website is intended for users in the United States. If you access it from elsewhere, you do so at your own risk, and your information may be transferred to and processed in the United States, which may have data protection laws different from those where you live.
Changes to this Policy
We may update this Policy. For material changes, we will post a prominent notice on the Website at least 30 days before the change takes effect — except where a shorter period is required by law or needed to address a security or legal risk — and, where we have your business email address and the change is material to our relationship, we will email you.
The Effective Date at the top indicates when the current version took effect. Prior versions are available on request to privacy@tryquinoa.health.
Contact us
QUINOA, INC.
47 Spruce Pl, Minneapolis, MN 55403
PRIVACY INQUIRIES
privacy@quinoa.health
SECURITY INQUIRIES
security@quinoa.health
PHONE
(607) 262-5941