Privacy Notice
What personal data Quantar uses, why, and your rights.
1. Who is responsible
Your data is controlled by the business that operates Quantar. Contact us about anything in this notice at Quantarhq@gmail.com. Our company details are available on request.
2. What we collect and why
| Data | Where it comes from | Why | Lawful basis |
|---|---|---|---|
| Email, username, password (the password is held and hashed by our authentication provider, never by us) | You, at sign-up | Create and secure your account | Contract |
| Account status: plan, demo dates, role, referral code, last login, profile picture | Generated, or you | Provide the right access; show your picture | Contract |
| Sign-up IP address and source; access log (IP address, browser user agent, event) | Your browser | Security, abuse and fraud prevention | Legitimate interests |
| Session cookie and session records | Your browser | Keep you signed in | Contract (strictly necessary) |
| Acceptance record: which document versions you accepted and when | You | Evidence of our agreement | Contract; legal obligation |
| Billing: Stripe customer and subscription identifiers, status, invoices (card details stay with Stripe) | Stripe | Take payment and manage your membership | Contract; legal obligation (accounting) |
| Arena journal, notes, price alerts, watchlist, notification level | You | Features you use | Contract |
| Desk messages, groups, reactions, reports | You | Community features | Contract; legitimate interests (moderation) |
| Your review: rating, comment, how you want to be named | You | Show approved reviews; give your free week | Contract |
| Push subscription (device endpoint and keys, browser user agent) | Your browser, when you turn alerts on | Send notifications | Consent (browser permission); turn it off any time |
| Exchange API key, secret, passphrase (encrypted) and the orders you send through Trade | You | Trade features | Contract |
| Communication preferences and marketing consent history | You | Respect your choices | Consent; legal obligation |
| Telegram waitlist: Telegram ID, username, name, what you send the bot | You, via Telegram | Manage the waitlist | Legitimate interests |
We do not use analytics, advertising or tracking cookies, and we never sell personal data.
3. Automated decisions
Quantar's models analyse markets, not people. Quantar does not make decisions about you that have legal or similarly significant effects. Access to features is decided by your membership.
4. Who we share it with
- Replit — hosts the application.
- Supabase — database, authentication and encrypted secrets.
- Stripe — payments and membership billing.
- Cloudflare Turnstile — bot protection at sign-up, where enabled.
- Your browser's push service (for example Google, Apple, Mozilla) — delivers notifications you turned on.
- Google Fonts and jsDelivr — fonts and a chart library are loaded from them, which shares your IP address with them when pages load.
- TradingView — only if you choose to load its chart (you are asked first).
- Telegram — if you use the waitlist bot.
- Your exchange — when you connect it and send orders.
- Professional advisers, and authorities where the law requires.
Some of these providers process data outside the UK. Where they do, the transfer is covered by the safeguards in their data-processing terms that UK data protection law requires.
5. How long we keep it
- Account, journal, alerts, Desk content and preferences: while your account is open. When you ask us to delete your account, we delete or anonymise them.
- Billing records: for as long as accounting and tax law requires.
- Security and access logs: only as long as needed to protect the service and investigate abuse.
- Acceptance records: for as long as our agreement, and any claim about it, can last.
- Push subscriptions: until you turn alerts off or the device stops accepting them.
- Online presence on the Desk: 10 minutes.
6. Your rights
You can ask for access to, correction or deletion of your data, restrict or object to its use, ask for a copy to take elsewhere, and withdraw consent at any time. Your Arena journal can be exported as CSV in the app. Email Quantarhq@gmail.com to use any right; we will confirm your identity and respond within one month. You can also complain to the Information Commissioner's Office (ico.org.uk).
7. Security
Passwords are handled by our authentication provider, sessions use secure HTTP-only cookies, exchange keys are encrypted, and each member's data is available only to their own account. If you find a security problem, tell us at Quantarhq@gmail.com.