Confidentiality Policy

01. Definitions

"Confidential Information" means any non-public information, whether in oral, written, electronic, or any other form, that is disclosed by one party (the "Disclosing Party") to the other party (the "Receiving Party"), which information is designated as confidential or that reasonably should be understood to be confidential given the nature of the information and the circumstances of disclosure.

Confidential Information includes, but is not limited to:

Business plans, strategies, forecasts, and financial data
Technical data, source code, algorithms, APIs, architectures, and specifications
Design documents, wireframes, prototypes, and user research findings
Client lists, vendor information, and partner relationships
Marketing plans, pricing strategies, and competitive analyses
Personnel records, compensation data, and organizational structures
Trade secrets, know-how, and proprietary methodologies
Any annotations, compilations, studies, or other documents prepared by the Receiving Party that contain or reflect the Confidential Information

Note: Confidential Information does not include information that (a) is or becomes publicly known through no wrongful act of the Receiving Party, (b) was rightfully known to the Receiving Party prior to disclosure, (c) is independently developed by the Receiving Party without use of Confidential Information, or (d) is rightfully received from a third party without breach of any confidentiality obligation.

02. Scope

This Confidentiality Policy applies to all interactions, engagements, and communications between That Is A Q and its clients, contractors, employees, agents, consultants, and partners. It governs the disclosure and use of Confidential Information in the context of:

Pre-engagement discussions, proposals, and bidding processes
Active client engagements and project collaborations
Post-engagement follow-ups, maintenance, and support periods
Internal company operations and inter-team communications
Third-party vendor and subcontractor relationships
Any other business relationship involving the exchange of sensitive information

All individuals who gain access to Confidential Information of That Is A Q or its clients are bound by the terms of this policy, regardless of whether they have signed a separate non-disclosure agreement.

03. Obligations of Confidentiality

3.1 General Obligations

Upon disclosure of Confidential Information, the Receiving Party agrees to:

Maintain the Confidential Information in strict confidence and exercise a degree of care no less than reasonable protection measures
Not disclose, publish, or disseminate Confidential Information to any third party without prior written consent from the Disclosing Party
Use the Confidential Information solely for the purpose of evaluating or performing the business relationship between the parties
Refrain from using Confidential Information for any competitive or commercially detrimental purpose
Ensure that any employees, contractors, or agents with access to the information are bound by equivalent confidentiality obligations

3.2 Standards of Care

That Is A Q shall protect all Confidential Information with at least the same degree of care it uses to protect its own confidential materials of a similar nature, but in no event less than a reasonable standard of care.

3.3 Information Handling

Confidential Information shall be stored, transmitted, and managed using industry-standard security practices including, but not limited to:

Encrypted data storage and transmission (AES-256 or equivalent)
Access-controlled systems with role-based permissions
Secure communication channels (TLS 1.3 or higher)
Regular security audits and vulnerability assessments
Proper classification and labeling of sensitive documents
Compliant data retention and deletion protocols

Important: That Is A Q may require separate, executed Non-Disclosure Agreements (NDAs) for specific engagements or for the disclosure of particularly sensitive information, which shall supplement and, where applicable, supersede portions of this policy.

04. Permitted Disclosures

Notwithstanding the above obligations, Confidential Information may be disclosed under the following circumstances:

Legal Requirement: When required by law, regulation, court order, or governmental authority, provided the Receiving Party gives prompt written notice to the Disclosing Party (where legally permissible) to allow the Disclosing Party to seek a protective order or other remedy
Prior Written Consent: With the express written authorization of the Disclosing Party
Public Domain: Information that subsequently enters the public domain through no fault of the Receiving Party
Independent Development: Information that the Receiving Party can demonstrate was independently developed without reference to or use of the Disclosing Party's Confidential Information
Third-Party Disclosure: Information that was rightfully received from a third party who had the lawful right to disclose it, and without restriction on further disclosure

Any disclosure made under clause (a) above shall be limited to the extent legally required, and the Receiving Party shall cooperate with the Disclosing Party to obtain confidential treatment for the disclosed information.

05. Term & Duration

5.1 Term

This Confidentiality Policy shall become effective on the date first written above and shall remain in force for the duration of the business relationship between the parties and for a period of three (3) years following the termination or expiration of such relationship.

5.2 Survival of Trade Secrets

Notwithstanding the above, any information that constitutes a trade secret under applicable law shall remain confidential for so long as it retains its status as a trade secret. The obligations set forth in this policy regarding trade secrets shall survive indefinitely until such information no longer qualifies as a trade secret.

⚠ Caution: The duration obligations described in this section are minimum standards. Certain engagements, particularly those involving highly sensitive intellectual property or regulated data, may require extended or perpetual confidentiality terms as specified in separate agreements.

06. Return of Materials

Upon the written request of the Disclosing Party, or upon termination or expiration of the business relationship, the Receiving Party shall, within thirty (30) days:

Return all original materials containing Confidential Information to the Disclosing Party
Destroy or permanently delete all copies, reproductions, summaries, analyses, and derivative works containing or based upon Confidential Information in its possession or control
Ensure that all employees, contractors, and agents who had access to the Confidential Information cease any continued use and return or destroy all related materials
Provide written certification of compliance with the return and destruction obligations, signed by an authorized officer of the Receiving Party

Notwithstanding the foregoing, the Receiving Party may retain one archival copy of Confidential Information for compliance and legal purposes, subject to the continuing confidentiality obligations set forth herein. Any retained copies shall remain subject to this policy for the full duration of its applicability.

07. Non-Circumvention

During the term of this policy and for a period of twelve (12) months following its termination, neither party shall directly or indirectly circumvent, avoid, bypass, or obviate the other party to any transaction or business opportunity of which they became aware through the disclosure of Confidential Information.

This includes, without limitation, the direct or indirect engagement of clients, prospects, vendors, or partners introduced or identified by the other party through the course of their business relationship.

08. Intellectual Property Rights

All Confidential Information remains the exclusive property of the Disclosing Party. Nothing in this policy grants the Receiving Party any license, interest, or right in or to any patents, copyrights, trademarks, trade secrets, or other intellectual property rights of the Disclosing Party, whether by implication, estoppel, or otherwise.

In the context of engagements undertaken by That Is A Q:

All work product, designs, code, documentation, and deliverables created specifically for a client shall be the property of the client upon full payment of all fees, unless otherwise agreed in writing
That Is A Q's pre-existing tools, frameworks, libraries, templates, methodologies, and know-how remain the exclusive property of That Is A Q
The use of That Is A Q's proprietary tools, platforms, or processes in delivering work product does not transfer ownership of those underlying assets
Any feedback, suggestions, or improvements provided by That Is A Q regarding the client's existing products or processes may be freely used by That Is A Q without obligation, unless expressly restricted by a separate agreement

09. Remedies for Breach

The parties acknowledge that unauthorized disclosure or use of Confidential Information may cause irreparable harm for which monetary damages alone would be an inadequate remedy. Accordingly, in the event of any actual or threatened breach of this policy:

Injunctive Relief: The non-breaching party shall be entitled to seek equitable relief, including temporary and permanent injunctions, specific performance, and other equitable remedies, without the necessity of proving actual damages or posting a bond
Monetary Damages: The non-breaching party shall also be entitled to recover monetary damages for any losses sustained as a result of the breach, including but not limited to lost profits, loss of goodwill, and business disruption costs
Attorney's Fees: The prevailing party in any action or proceeding to enforce this policy shall be entitled to recover reasonable attorney's fees and costs
Mitigation: The non-breaching party shall use commercially reasonable efforts to mitigate any harm resulting from a breach, including taking prompt steps to prevent further unauthorized disclosure

In addition to the foregoing remedies, That Is A Q reserves the right to immediately terminate any active engagements and relationships with any party found to be in material breach of this policy, without liability of any kind.

10. Miscellaneous

10.1 Governing Law

This policy shall be governed by and construed in accordance with the laws of the jurisdiction in which That Is A Q is primarily headquartered, without regard to its conflict of law provisions.

10.2 Severability

If any provision of this policy is held to be invalid, illegal, or unenforceable by a court of competent jurisdiction, such provision shall be modified to the minimum extent necessary to make it valid and enforceable, and the remaining provisions shall remain in full force and effect.

10.3 Amendment

This policy may only be amended, modified, or supplemented by a written instrument signed by an authorized representative of That Is A Q and the other party. No oral modification shall be effective.

10.4 No Partnership

Nothing in this policy shall be construed to create a partnership, joint venture, agency, or employment relationship between the parties. Each party remains an independent contractor with respect to the other.

10.5 Entire Understanding

This policy, together with any separate non-disclosure agreements executed between the parties, constitutes the entire understanding between the parties regarding the confidentiality of information exchanged in the course of their business relationship and supersedes all prior or contemporaneous oral or written agreements on the same subject matter.

10.6 Waiver

No failure or delay by a party in exercising any right or remedy under this policy shall operate as a waiver thereof, nor shall any single or partial exercise of any right or remedy preclude any other or further exercise thereof.