Privacy Policy
Last updated September 26, 2026
In short
- We collect what we need to run your account and the Service: your email address, the profile details you enter, what you do in the product and technical data.
- No advertising trackers, no analytics tools, and we do not sell your data.
- Card payments are handled by Stripe, AI answers by OpenAI, and data is stored with Google Firebase and on our servers in the EU.
- You can access, correct, export and delete your data, object to processing and complain to a regulator.
On this page
- 1Who is responsible
- 2What we collect
- 3Why we use it and on what legal basis
- 4AI processing
- 5Who processes data for us
- 6International transfers
- 7How long we keep it
- 8Your rights
- 9Additional information for users in Türkiye (KVKK)
- 10Additional information for users in the United States
- 11Security
- 12Children
- 13Changes to this policy
1Who is responsible
[to be completed], [to be completed] is the controller of personal data processed through Quant Radar AI ("we"). You can reach us about privacy at support@quantradar.ai.
2What we collect
| Category | Examples | Source |
|---|---|---|
| Account | Email address, user ID, one-time sign-in codes (stored only as a hash, for 10 minutes) | You |
| Profile | First and last name, username, date of birth (to confirm you are 18+), country, phone number, the exchange you use, X handle, short bio, how you heard about us, profile photo. Some fields are optional. | You |
| Subscription and payments | Plan, billing status, trial and renewal dates, invoices, Stripe customer ID, card brand and last four digits. Full card data stays with Stripe. | You, Stripe |
| Activity in the Service | Watchlists, price alerts, portfolio entries you add manually, workspace layouts, chart drawings, AI credits used, AI chat history | You |
| Community | Posts, replies, likes, follows, images and direct messages | You |
| Invitations | Your invite code, who invited you, how many people you invited | You |
| Device and notifications | Push notification token, device platform, notification preferences, time zone | Your device |
| Technical | IP address, browser and device information, request and error logs, security events | Automatically |
| Communications | Emails you send us, contract and privacy requests | You |
We do not ask for exchange API keys, wallet private keys or seed phrases, and we do not intentionally collect special categories of data such as health data. Please don't include such information in posts, messages or AI prompts.
3Why we use it and on what legal basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Creating and running your account and providing the features you ask for | Contract, Art. 6(1)(b) |
| Trials, subscriptions, payments, invoices, tax and accounting records | Contract; legal obligation, Art. 6(1)(c) |
| Service emails: sign-in codes, receipts, payment problems, confirmations | Contract |
| Push notifications you switch on (signals, alerts, announcements) | Consent, Art. 6(1)(a), which you can withdraw in your device or app settings |
| Community features, moderation and handling reports | Contract; legitimate interest in a safe community, Art. 6(1)(f) |
| Security and abuse prevention, for example preventing trial abuse and rate limiting | Legitimate interest |
| Improving the Service using aggregated technical data | Legitimate interest |
| Optional functional storage in your browser | Consent; see the Cookie Policy |
| Complying with the law, answering authorities, establishing or defending legal claims | Legal obligation; legitimate interest |
Where we rely on legitimate interest, you can object at any time (see Your rights).
4AI processing
When you use AI chat or AI analysis, we send your prompt together with the relevant market data to our AI provider, OpenAI, to generate the answer. We do not send your email address or profile details with prompts. Under OpenAI's API terms, data sent through the API is not used to train their models unless the customer opts in, and we have not opted in.
We store your AI chat history so you can come back to it; you can delete conversations in the Service. AI output is generated automatically but does not produce legal or similarly significant effects for you, so we do not make automated decisions within the meaning of Art. 22 GDPR.
5Who processes data for us
We use the following service providers, bound by data processing agreements:
| Provider | Purpose | Location |
|---|---|---|
| Google (Firebase) | Database, file storage for images and avatars, infrastructure | EU / USA |
| Hetzner Online | Hosting of our servers and data engine | Germany / Finland |
| Stripe | Payments, subscriptions, invoices, fraud prevention | USA / EU |
| OpenAI | Generating AI answers | USA |
| Resend | Sending service emails | USA |
| Expo (650 Industries) | Delivering push notifications to the mobile app | USA |
| Apple, Google | App distribution and push delivery on your device | USA / EU |
Market data providers receive no personal data from us. We also disclose data to authorities where the law requires it, to professional advisers bound by confidentiality, and to a successor if our business is sold, subject to this policy. We do not sell personal data and do not share it for advertising.
6International transfers
Some providers process data outside the EEA, the UK and Türkiye, in particular in the USA. Where there is no adequacy decision we use appropriate safeguards, such as the EU Standard Contractual Clauses with the UK Addendum, or the EU–US Data Privacy Framework where the provider is certified. For transfers from Türkiye we use the standard contracts required by Article 9 of Law No. 6698. You can ask us for a copy of the relevant safeguards at support@quantradar.ai.
7How long we keep it
- Account and profile data: while your account exists; deleted within 30 days after you delete your account, with backups rotating out within a further 30 days.
- Sign-in codes: 10 minutes, as a hash.
- Invoices and payment records: as long as tax and commercial law requires, typically up to 10 years.
- Community content and messages: until you or we delete them, or until your account is deleted. Content removed for breaking the rules may be kept for up to 6 months to handle appeals and legal claims.
- AI chat history: until you delete it or your account.
- Server and security logs: up to 90 days, unless we need them to investigate an incident.
- Contract and privacy requests: 3 years, to document how we handled them.
8Your rights
Depending on where you live, you have the right to access your data and get a copy; to correct inaccurate data; to have your data deleted; to restrict or object to processing; to data portability; to withdraw consent at any time without affecting earlier processing; and not to be subject to solely automated decisions with legal effects.
To use these rights, go to our request page or email support@quantradar.ai. We answer within one month; where the law allows, we may extend this and will tell you why. We may need to confirm that the request comes from the email address on the account.
You also have the right to complain to a data protection authority, in particular in the country where you live or work.
9Additional information for users in Türkiye (KVKK)
For users in Türkiye, [to be completed] is the data controller under Law No. 6698 on the Protection of Personal Data. We process personal data for the purposes above on the grounds in Article 5(2) of the law: performance of a contract (c), legal obligation (ç), establishing, exercising or defending a right (e) and legitimate interest (f), and on explicit consent where required.
Under Article 11 you may learn whether your data is processed and request information about it, learn the purpose and whether data is used for that purpose, know the third parties in Türkiye or abroad to whom data is transferred, request correction or deletion and notification of this to those third parties, object to a result against you arising exclusively from automated analysis, and claim compensation for damage from unlawful processing. Send applications as described under Your rights; we answer free of charge within 30 days. You may also complain to the Personal Data Protection Authority.
10Additional information for users in the United States
We do not sell personal information, do not share it for cross-context behavioural advertising and do not use sensitive personal information for purposes that would require an opt-out. Residents of certain states, including California, have the right to know, access, correct and delete their personal information and not to be discriminated against for using these rights. You can use them as described above.
11Security
We use encryption in transit, signed session tokens, hashed sign-in codes, access controls and least-privilege access for our team. Card data never reaches our servers. No system is perfectly secure; if a breach affects you, we notify you and the authorities as the law requires.
12Children
The Service is not for anyone under 18. We do not knowingly collect data from minors. If you believe a minor has created an account, contact us and we will delete it.
13Changes to this policy
We post updates on this page and tell you about material changes by email or in the Service. The date at the top shows the current version.
