Privacy Policy

1. Introduction

[CONTRACTING ENTITY — PENDING FORMATION/REINSTATEMENT, see legal counsel] (“we”, “us”, “our”) operates the QuantaEdge platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service, and applies to the websites we operate at quantaedge.ai and quantawealth.ai.

We collect the minimum data needed to run a subscription service: an email address and billing identifiers. We do not collect your Social Security number, date of birth, brokerage credentials, brokerage account numbers, or account balances.

2. Information We Collect

Information you provide:

• Email address (waitlist signup and subscription registration)
• Billing information: processed securely by Stripe — we never store credit card numbers, CVVs, or full card data
• Communication preferences: email and web/Discord notification settings
• Support correspondence

Information collected automatically:

• Usage analytics via Plausible Analytics — a privacy-friendly, cookie-free analytics tool that does not track individual users or use cookies
• Device data: browser type, operating system (aggregated, not personally identifiable)
• Log data: access times, referring URLs, error logs

3. How We Use Your Information

• Provide, maintain, and improve the Services
• Process subscriptions and payments
• Deliver trade signals and notifications
• Send onboarding emails and service updates
• Respond to support requests
• Monitor service health and prevent abuse
• Comply with legal obligations
• Analyze usage patterns to improve the platform

4. Why We Process Your Data

We process your data on the following bases:

• Contract performance: To deliver the subscription services you signed up for
• Legitimate interests: To improve our services, prevent fraud, and ensure security
• Consent: For marketing communications, which you may withdraw at any time
• Legal obligation: To comply with tax, financial, and regulatory requirements

5. Data Sharing

We do not sell your personal information to any third party.

We share data only with:

• Stripe: Payment processing (PCI-DSS compliant)
• Resend: Transactional email delivery
• Discord: Delivery of signal and platform notifications, if you enable them
• TradersPost: Signal delivery for auto-execution (only if you connect an account)
• Plausible Analytics: Privacy-friendly, cookie-free web analytics
• Vercel: Website hosting and delivery
• Cloudflare: CDN, DNS, and security services
• DigitalOcean: Cloud infrastructure hosting

We may disclose information if required by law, court order, or to protect our rights.

6. Data Retention

• Account data: Retained while your account is active and for 30 days after deletion request
• Billing records: Retained for 7 years as required by tax law
• Signal delivery logs: Retained for 1 year
• Usage analytics: Aggregated and anonymized — Plausible does not store personal data
• Support tickets: Retained for 2 years

7. Right to Deletion

You may request deletion of all your personal data at any time by emailing [email protected]. We will process your request within 30 days and confirm deletion via email. Billing records required by tax law may be retained in anonymized form.

8. Your Rights

We honour the following requests from any user, regardless of where you live:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate data
• Erasure: Request deletion of your data
• Portability: Receive your data in a machine-readable format
• Restriction: Limit how we process your data
• Objection: Object to processing based on legitimate interests
• Withdraw consent: At any time for consent-based processing, including marketing email

We do not sell personal information, and we do not discriminate against you for exercising any of these rights.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

9. Data Security

We implement industry-standard security measures including:

• TLS 1.3 encryption for all data in transit
• Encrypted storage volumes at our infrastructure provider
• Encrypted database connections (SSL enforced)
• PostgreSQL Row-Level Security (RLS) for data isolation
• Passwords stored as bcrypt hashes; multi-factor authentication available on privileged accounts
• Automated dependency vulnerability scanning in our build pipeline
• Access controls with principle of least privilege

No system is 100% secure. While we work to protect your data, we cannot guarantee absolute security.

10. Cookies

We do not set advertising cookies, and we do not set analytics cookies — our analytics provider, Plausible, is cookie-free by design. The cookies present when you use the Service are:

• Our own session cookies, used strictly to keep you signed in
• Operational cookies set by Cloudflare for bot and security protection
• Operational cookies set by Stripe during checkout, for payment fraud prevention

Because we set no optional cookies, there is nothing to consent to or opt out of. Full detail is in our Cookie Policy.

11. Where Your Data Is Processed

Our servers are located in the United States (New York region). If you access the Service from outside the United States, your data will be transferred to and processed in the United States, which may not offer the same data-protection rights as your home jurisdiction.

12. Children's Privacy

The Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email at least 30 days before taking effect. The version line above indicates the latest revision.

14. Contact

For privacy inquiries or to exercise your data rights:

• Email: [email protected]
• [CONTRACTING ENTITY — PENDING FORMATION/REINSTATEMENT, see legal counsel]