LEGAL
Privacy Policy
Last updated: August 2026
Table of Contents
Introduction
QuantBot is committed to protecting your privacy. This policy explains how we collect, use, and safeguard your personal data when you use our platform at quant-bot.com.
Data We Collect
- Account data: name, email address, hashed password.
- Subscription data: plan type, billing dates, payment status.
- Usage data: login timestamps, pages visited, features used.
- Visitor counting: we record how many people are on the site at a given moment so we can see whether it is being used. While you have a page open, your browser tells our server you are still there, and we record the page you are on and the time. These records are deleted automatically within an hour and are never shared with anyone.
If you are not signed in, your IP address is not stored and you are not identified. We keep only a one-way salted hash of your IP address and browser identifier — enough to tell two visitors apart for a few minutes, and impossible to reverse, to link to an account, or to match against your next visit. Anonymous visitors are only ever counted, never named.
If you are signed in, this activity is linked to your account, in the same way as the other usage data above. That means our administrators can see that you are currently using the site and which page you are on. We use this to understand how the platform is being used and to help you if you contact us. It is not used for advertising, is not sold or shared, and the record still disappears within an hour. - AI Mentor data: message counts, and the content of your conversations. Conversations are saved so you can return to them instead of asking the same question twice. They are deleted permanently after 90 days of account inactivity, and immediately if you delete your account. You can erase all of your chat history yourself at any time from your Profile page. Your messages are also transmitted to our AI provider to generate a response, subject to their processing terms. Please do not enter passwords, API keys or broker credentials into the chat.
- Trading data — only if you choose to connect a terminal: if you install our recorder on your own MetaTrader terminal, it reports your closed trades, open positions and account balance to us so we can build your private portfolio view. This is entirely optional. The platform works without it, and nothing is collected until you generate a reporting key and install the recorder yourself.
We never ask for, receive or store your broker login or investor password. The recorder runs on your machine with the same permissions as any expert advisor. It reads your trade history and sends it to us over an encrypted connection, signed with a key only you and we hold. It cannot place, change or close a trade — and neither can we.
Your trading data is private to you. It is never shown on public pages, never mixed into the live performance record published on strategy pages, and never shared with other members. The live results shown publicly come only from QuantBot’s own trading accounts. If we ever want to use member data in aggregate — to show how a strategy is performing across everyone running it, for example — we will ask you first and it will be opt-in.
We rely on your consent for this, not on the subscription contract: the platform works fully without any trading data, so we do not treat collecting it as something we need in order to deliver what you paid for. Consent means it is genuinely your choice, and that withdrawing it is straightforward — revoking your reporting key stops collection immediately, and you can ask us to erase everything already collected. - Payment data: handled entirely by NowPayments — we do not store wallet addresses or transaction details.
How We Use Your Data
- Account management and authentication.
- Subscription management and billing.
- Email communications (transactional only — no marketing spam).
- Platform improvement and analytics.
- AI Mentor access control, allowance enforcement, and saving your conversation history so you can resume it.
Data Storage & Security
- PostgreSQL database on a secured VPS in Europe (Netcup, Germany).
- All passwords hashed with bcrypt.
- HTTPS/SSL encryption on all connections.
- Access restricted to authorized personnel only.
Third-Party Services
We use the following third-party services:
- NowPayments — payment processing (their privacy policy applies).
- Resend — transactional email delivery.
- Google — OAuth authentication (if user chooses Google sign-in).
- Anthropic (Claude API) — AI Mentor conversations are sent to Anthropic’s API for processing. Anthropic does not store conversations per their data retention policy. If you connect a terminal and ask the Mentor about your own results, we send it calculated figures only — drawdown depth, win rate, how a result compares with the strategy’s tested history — and never your individual trades.
Cookies
- Essential cookies: session authentication, CSRF protection.
- Functional cookies: theme preference, language preference.
- We do NOT use: advertising cookies, tracking cookies, or third-party analytics.
- Our visitor counting uses no cookies at all and sets nothing on your device beyond the session cookie you already have if signed in. It is handled entirely on our own servers, so no third party learns you visited.
Data Retention
- Account data is retained while your account is active.
- AI Mentor conversations are deleted 90 days after your account was last active. Signing in resets that clock, so an account you keep using keeps its history; one you stop using loses it. You can also erase all of your chat history at any time from your Profile page, which takes effect immediately.
- Upon account deletion request, data is deleted within 30 days. Chat history is removed immediately with the account.
- Visitor counting records are deleted automatically within one hour.
- Trading data is retained while your subscription is active and for 12 months afterwards, then deleted. Account snapshots are kept in full for 90 days and summarised to hourly after that. Revoking your reporting key stops new data arriving immediately; erasing what has already been collected is a request we action within 30 days.
- Payment records are retained for legal/tax compliance as required by UAE law.
Your Rights
You have the right to:
- Access your personal data.
- Correct inaccurate data.
- Request deletion of your data.
- Export your data.
- Revoke a reporting key at any time, which stops any further trading data being collected from that terminal.
- Have your trading data erased without closing your account. Your trades, snapshots and reporting keys are removed. Records of rejected or failed reports are kept as a security measure, with anything identifying you stripped out of them.
To exercise any of these rights, contact us at info@quant-bot.com.
Children
The Platform is not intended for individuals under 18 years of age. We do not knowingly collect data from minors.
International Data Transfers
Data may be processed in:
- EU (server infrastructure — Germany).
- US (Anthropic AI API).
We ensure appropriate safeguards are in place for all international data transfers.
Changes to This Policy
- We may update this policy periodically.
- Changes will be communicated via email for registered users.
- The “Last updated” date reflects the most recent revision.
Contact
If you have any questions about this Privacy Policy, please contact us:
- Email: info@quant-bot.com
- Address: Business Centre, Sharjah, United Arab Emirates