🔒 Privacy Policy

Last Updated: January 15, 2025

1. Who We Are

QuantLab Pro ("we", "us", "our") is a quantitative analysis platform. For the purposes of data protection law, we are the data controller.

Contact Details:
Email: privacy@quantlab.com
Address: [Your Business Address]

2. What Data We Collect

2.1 Personal Information

When you create an account, we collect:

• Email address - for account authentication and communications
• Password - stored as a hashed value (encrypted, we never see your actual password)
• Company name (optional) - if you provide it during registration

2.2 Portfolio and Financial Data

When you use the Service, we store:

• Portfolio holdings - the stock tickers and weights you enter
• Analysis history - records of optimizations and analyses you run
• Saved portfolios - portfolio names and configurations you save

Note: We do NOT collect or store your actual financial account numbers, bank details, or real money balances. You only provide ticker symbols for analysis purposes.

2.3 Technical and Usage Data

We automatically collect:

• IP address - for security and rate limiting
• Browser type and version - for compatibility
• Device information - operating system and screen size
• Usage patterns - which features you use and when
• Session data - login times and duration

2.4 Cookies and Tracking

We use cookies for:

Cookie Type	Purpose	Required?
Essential	Authentication, session management	Yes (required for functionality)
Functional	Remember your preferences (currency, theme)	No (requires consent)
Analytics	Understand how users interact with the platform	No (requires consent)

You can manage your cookie preferences using the cookie banner when you first visit our site.

3. How We Use Your Data

3.1 Lawful Basis for Processing

Under GDPR, we process your data based on:

• Contract - to provide the Service you signed up for
• Legitimate interests - to improve the Service and prevent fraud
• Consent - for optional cookies and marketing communications
• Legal obligation - to comply with laws (e.g., tax reporting)

3.2 Specific Uses

We use your data to:

• Provide portfolio analysis and optimization services
• Authenticate your account and maintain security
• Send service-related notifications (e.g., password resets)
• Improve our algorithms and user experience
• Respond to support requests
• Comply with legal obligations
• Prevent fraud and abuse

4. Data Sharing and Third Parties

4.1 Who We Share With

We may share your data with:

• Market data providers (e.g., Yahoo Finance API) - to fetch stock prices
• Hosting providers - to store data securely (AWS, DigitalOcean, etc.)
• Payment processors - if you subscribe to a paid plan (Stripe, PayPal)
• Legal authorities - if required by law or to prevent illegal activity

4.2 What We DON'T Do

We will NEVER:

• Sell your personal data to third parties
• Use your portfolio data for our own trading
• Share your data with advertisers
• Send your data outside the EU/UK without adequate safeguards

5. Your Rights (GDPR & UK GDPR)

You have the right to:

1. Access - Request a copy of all personal data we hold about you
2. Rectification - Correct inaccurate or incomplete data
3. Erasure ("Right to be Forgotten") - Request deletion of your data
4. Restriction - Limit how we process your data
5. Data Portability - Receive your data in a machine-readable format
6. Object - Object to processing based on legitimate interests
7. Withdraw Consent - For processing based on consent (e.g., marketing emails)
8. Lodge a Complaint - File a complaint with your local data protection authority

To exercise your rights, email us at: privacy@quantlab.com

We will respond within 30 days (as required by GDPR).

6. Data Security

We protect your data using:

• Encryption - All data in transit is encrypted with HTTPS/TLS
• Password hashing - Passwords are hashed with industry-standard algorithms (bcrypt/PBKDF2)
• Access controls - Only authorized personnel can access user data
• Regular backups - To prevent data loss
• Security monitoring - Automated detection of suspicious activity

However, no system is 100% secure. You are responsible for keeping your password safe.

7. Data Retention

We retain your data:

• Account data - Until you delete your account
• Portfolio data - Until you delete the portfolio or account
• Usage logs - For 12 months (for security and debugging)
• Billing records - For 7 years (legal requirement)

After deletion, we may retain aggregated, anonymized data for statistical purposes.

8. International Data Transfers

If your data is transferred outside the EU/UK, we ensure adequate protection through:

• Standard Contractual Clauses (SCCs) approved by the EU Commission
• Hosting providers certified under Privacy Shield or equivalent
• Encryption and security measures equivalent to GDPR standards

9. Children's Privacy

QuantLab Pro is not intended for children under 16. We do not knowingly collect data from children. If we discover a child's account, we will delete it immediately.

10. Automated Decision-Making

Our algorithms perform automated portfolio analysis. However:

• You are always in control of your investment decisions
• Our algorithms do not make decisions on your behalf
• All outputs are advisory and require your manual action

11. Marketing Communications

We will only send marketing emails if you opt in. You can unsubscribe at any time using:

• The "unsubscribe" link in every email
• Your account settings
• Emailing us at privacy@quantlab.com

12. Changes to This Policy

We may update this Privacy Policy to reflect legal or operational changes. We will:

• Notify you via email of significant changes
• Update the "Last Updated" date at the top
• Give you 30 days notice before major changes take effect

13. Supervisory Authority

If you're unhappy with how we handle your data, you can complain to:

• UK: Information Commissioner's Office (ICO) - ico.org.uk
• EU: Your local Data Protection Authority

14. Contact Us

For privacy-related questions or to exercise your rights:

Email: privacy@quantlab.com
Address: [Your Business Address]
Response Time: Within 30 days