Privacy Policy

Last updated: January 15, 2026

1Introduction

Quantrategy LC. ("we", "our", or "us"), a company registered in the Republic of Korea, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services (the "Service").

Please read this privacy policy carefully. By using the Service, you consent to the data practices described in this policy. If you do not agree with our policies and practices, please do not use our Service.

2Information We Collect

Information You Provide

We collect information you voluntarily provide when using the Service:

  • Account Information: Email address, name, profile picture (if using Google login)
  • Profile Information: Display name, preferences, settings
  • Strategy Data: Investment strategies, portfolios, and backtesting configurations you create
  • Communications: Messages you send us for support or feedback

Information Collected Automatically

When you access the Service, we may automatically collect minimal technical information:

  • Server Logs: Basic server logs for security and debugging purposes
  • Anonymous Analytics: We use privacy-focused analytics (Plausible) that does not use cookies or collect personal data. Only aggregated, anonymous page view data is collected.

We do not use tracking cookies, advertising cookies, or any third-party marketing trackers.

Information from Third Parties

We may receive information from third-party services:

  • Google OAuth: Name, email, profile picture when you sign in with Google
  • Payment Provider (Paddle): Transaction history, billing country (we do not receive full payment card details)

3How We Use Your Information

We use your information for the following purposes:

  • Provide the Service: Process backtests, save strategies, manage your account
  • Improve the Service: Analyze usage patterns, develop new features, fix bugs
  • Personalization: Customize your experience based on preferences
  • Communication: Send service updates, respond to inquiries, provide support, and send marketing emails if you have opted in
  • Security: Detect and prevent fraud, abuse, and security issues
  • Legal Compliance: Comply with applicable laws and regulations

Your Data is Not Used for AI Training: We do not use your personal data, strategies, or any user-generated content to train AI models. Your strategies and data remain private and are only used to provide the Service to you.

Marketing Communications: We may send you promotional emails about new features, special offers, or other information we think you may find interesting. You will only receive marketing emails if you have explicitly opted in during registration or in your account settings. You can unsubscribe at any time by clicking the unsubscribe link in any email.

We do not sell your personal information to third parties.

4Information Sharing

We may share your information in the following circumstances:

  • Service Providers: With third-party vendors who help us operate the Service (see Section 5)
  • Legal Requirements: When required by law, regulation, or legal process
  • Safety: To protect the rights, safety, and property of Quantrategy and others
  • Business Transfers: In connection with a merger, acquisition, or sale of assets
  • With Your Consent: When you explicitly authorize us to share information
  • Public Strategies: When you choose to make your strategies public

5Third-Party Services

We use the following third-party services to operate Quantrategy:

  • Supabase: Authentication and database hosting. Your account data and strategies are stored on Supabase's secure infrastructure.
  • Paddle: Payment processing and subscription management. Paddle acts as our Merchant of Record and handles all payment data.
  • Google: OAuth authentication and AI services (Gemini). When you sign in with Google, we receive your name, email, and profile picture. Google Gemini may also be used for natural language processing.
  • Anthropic (Claude): AI services for natural language processing. Your strategy descriptions are processed to generate backtesting configurations.
  • OpenAI (ChatGPT): AI services for natural language processing. Your strategy descriptions may be processed by OpenAI models to generate backtesting configurations.
  • Mistral AI: AI services for natural language processing. Your strategy descriptions may be processed by Mistral models to generate backtesting configurations.
  • Cloudflare: Content delivery and security. Cloudflare helps protect and accelerate our website.
  • Plausible Analytics: Privacy-focused web analytics. Plausible does not use cookies, does not collect personal data, and is fully GDPR/CCPA compliant.

Each service has its own privacy policy. We encourage you to review their policies to understand how they handle your information.

6Cookies & Tracking

We prioritize your privacy and use a minimal cookie approach. We do not use advertising cookies, marketing trackers, or any third-party tracking scripts.

We only use the following:

  • Essential Cookies: Required for authentication and maintaining your session. These cannot be disabled as they are necessary for the Service to function.
  • Preference Cookies: Remember your settings such as theme (light/dark) and language preference. Stored locally in your browser.

Privacy-Focused Analytics: We use Plausible Analytics, a privacy-focused analytics tool that does not use cookies, does not track individuals, and is fully GDPR compliant. Only anonymous, aggregated statistics are collected (e.g., page views, referrer sources).

7Data Security

We implement appropriate technical and organizational security measures to protect your information, including:

  • Encryption of data in transit (HTTPS/TLS)
  • Encryption of data at rest
  • Secure authentication with password hashing
  • Regular security assessments and updates
  • Access controls and audit logs

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

8Data Retention

We retain your information for as long as:

  • Your account is active
  • Needed to provide you with the Service
  • Required by law or to resolve disputes

When you delete your account, we will delete or anonymize your personal information within 90 days, except where we are required to retain it for legal purposes.

Backups may retain your data for an additional 90 days after deletion.

9Your Rights

Depending on your location, you may have the following rights:

  • Access: Request a copy of your personal information
  • Correction: Request correction of inaccurate information
  • Deletion: Request deletion of your personal information
  • Export: Request your data in a portable format
  • Restriction: Request restriction of processing
  • Objection: Object to certain processing activities
  • Withdraw Consent: Withdraw consent at any time

For EU/EEA Residents (GDPR): If you are located in the European Union, you have additional rights under the General Data Protection Regulation. Contact us to exercise these rights.

For California Residents (CCPA): California residents have the right to know what personal information we collect, request deletion, and opt-out of the sale of personal information (we do not sell personal information).

To exercise any of these rights, please contact us using the information in Section 13.

10Children's Privacy

The Service is not intended for children under 18 years of age. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

If we become aware that we have collected personal information from a child under 18 without verification of parental consent, we will take steps to delete that information.

11International Transfers

Your information may be transferred to and processed in countries other than your own. These countries may have data protection laws that are different from the laws of your country.

By using the Service, you consent to the transfer of your information to the United States and other countries where our service providers operate.

International Data Transfer Details

In accordance with the Korean Personal Information Protection Act (PIPA), we provide the following details about international data transfers:

RecipientCountryData TransferredPurposeRetention
Supabase Inc.USA (AWS)Account info, strategies, preferencesAuthentication, database hostingUntil account deletion
Paddle.com Market LtdUK / USAEmail, billing country, transaction historyPayment processing (MoR)Per Paddle's policy
Anthropic PBCUSAStrategy descriptions (text only)AI natural language processingNot retained after processing
OpenAI, L.L.C.USAStrategy descriptions (text only)AI natural language processingNot retained after processing
Google LLC (Gemini)USAStrategy descriptions (text only)AI natural language processingNot retained after processing
Mistral AIFrance / EUStrategy descriptions (text only)AI natural language processingNot retained after processing
Google LLCUSAOAuth tokens, profile (if using Google login)Social authenticationUntil account deletion
Cloudflare Inc.Global (USA HQ)IP address, request metadataCDN, security, DDoS protectionPer Cloudflare's policy

Transfer Method: All data is transferred via encrypted connections (HTTPS/TLS).

We take appropriate safeguards to ensure your information remains protected in accordance with this Privacy Policy, including the use of Standard Contractual Clauses where required.

12Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

For material changes, we will notify you via email at least 30 days before the changes become effective. We encourage you to review this Privacy Policy periodically.

13Contact Us

If you have any questions about this Privacy Policy or our data practices, or if you would like to exercise your privacy rights, please contact us:

Quantrategy LC.
7F, Unit 149, 578 Seolleung-ro, Gangnam-gu
Seoul 06153, Republic of Korea
Email: support@quantrategy.com