Privacy Policy

1. What we collect

Account data: your email address and password (stored hashed by our authentication provider).

Trading data you import or sync: trades, accounts, balances, portfolio transactions and prop-firm settings. With the NinjaTrader add-on, also the live state of your accounts: balance, day result and open positions.

If you turn on alerts: your Telegram chat identifier, or your Discord user and private channel identifiers. Connecting Discord adds you to the QuantFlow server. You can leave it and disconnect at any time.

Connector credentials you choose to provide: exchange API keys and your personal webhook token.

Support messages: what you send us by email, contact form or support chat.

Usage data: anonymous page-view statistics (no cookies) and technical logs needed to run and secure the service.

2. Why we use it

To provide the service (store your data, compute statistics, sync your platforms), to run your trial and plan, to answer support requests, to keep the service secure and to improve it.

We do not sell your data and we do not use it for advertising.

3. AI features

When you use the AI assistant, the statistics and messages needed to answer are sent to our AI provider (currently Anthropic, with its Claude models) to generate the response. We do not send your password or API keys.

If you ask the support assistant to talk to a person, your email and your message reach the team through a private Discord channel.

4. Who processes your data

Supabase (database and authentication), Vercel (hosting and anonymous analytics), Telegram and Discord (if you turn on alerts, they receive the alert text, which can include account names, balances and results), Resend (transactional emails such as sign-up confirmation), Google (AI responses), ImprovMX (forwarding of emails sent to our support address), FormSubmit (delivery of the website contact form), Discord (internal alerts with the content of support-chat messages) and our payment reseller acting as Merchant of Record (payments and invoices; we never see your full card details).

These providers may process data outside your country. They act on our instructions and only for these purposes.

5. Cookies and local storage

We do not use advertising or tracking cookies. The app stores your session and preferences (language, privacy mode, selected account) in your browser's local storage so it works. Our analytics is cookieless.

6. How long we keep it

We keep your data while your account exists. If you delete your account, we delete your trading data and account details, except what we must keep for legal or accounting reasons, and backups that expire on their own.

7. Your rights

You can access, correct, export or delete your data, and object to or restrict its processing, where the law of your country (for example, the EU GDPR) gives you those rights. Write to support@quantflowpro.com; we answer within 30 days. You can also complain to your local data protection authority.

8. Security

We use encrypted connections, per-user access rules in the database, server-side session checks and rotatable connector tokens. No system is perfectly secure: use a unique password and read-only API keys.

9. Children

QuantFlow is not intended for people under 18 and we do not knowingly collect their data.

10. Changes

We will publish any change to this policy on this page with its date and notify you of significant changes.

11. Contact

Privacy questions: support@quantflowpro.com.