Legal
Privacy Policy
Your trading records stay on your device. Cloud sync is encrypted before it leaves your browser, with a passphrase we never receive and cannot recover.
The short version
Your trading data never reaches us in readable form
QuantPeak runs in your browser and stores your trades, journal and settings on your own device. We operate no user database and no server-side copy of your records. If you switch on cloud sync, your data is encrypted on your device with a passphrase we never receive — what we hold is ciphertext we cannot open.
That architecture is the point of the product, not a policy position, and it means most of what a privacy policy usually has to promise simply does not arise here: there is nothing readable to leak, sell, or hand over.
1. What we collect
Information you give us
- Nothing to use the terminal. No name, no email and no account is needed to import trades and use QuantPeak on your device.
- Billing details go to Whop, not to us. Whop is our payment provider and holds the customer relationship, including your email and payment method. We receive only a signal that a given licence is active or inactive. We never see or store your card details.
- Support correspondence. If you email us, we hold that email and our reply so we can help you.
Information collected automatically
- Standard server logs from our host (Vercel) when a page or API route is requested. These may include IP address, user agent and timestamp, are retained briefly, and are used for security and to keep the service running.
- Encrypted sync blobs, if you enable cloud sync — see section 3.
What we deliberately do not do
- No advertising trackers, no third-party analytics that fingerprint or profile you.
- No selling, renting or sharing of personal information with anyone, ever.
- No adding you to a mailing list without your consent.
- No reading, mining or aggregating your trading records — we could not if we wanted to.
2. Where your data actually lives
Your trades, journal entries, notes, rulesets, accounts, settings and screenshots are stored by your browser on your device, in localStorage and IndexedDB. They stay there until you delete them, clear your browser storage, or export them yourself. Clearing site data removes them permanently, so export a backup first.
3. Cloud sync — how the encryption works
Cloud sync is optional and off unless you turn it on. When enabled:
- your data is encrypted in your browser, before it is sent, using a key derived from a passphrase you choose;
- the passphrase is never transmitted to us and never leaves your device;
- we store the resulting ciphertext so your other devices can fetch it;
- we cannot decrypt it, and neither can our hosting provider or anyone who compromises our storage.
There is no passphrase recovery
Because we never hold your passphrase, we cannot reset it and cannot recover your synced data if you forget it. This is the direct cost of the guarantee above. Store it somewhere safe.
4. Why we may process information
We rely on: performing our contract with you (providing the terminal, verifying your subscription is active); our legitimate interests (keeping the service secure and available, responding to support requests); and your consent where you have given it. Where the GDPR or UK GDPR applies to you, these are our lawful bases.
5. Who we share with
Only the service providers needed to run QuantPeak, and only what each one needs:
| Provider | Purpose | What it receives |
|---|---|---|
| Whop | Payments, subscriptions | Your billing details — held by them, not us |
| Vercel | Hosting, cloud sync storage | Server logs; encrypted sync blobs |
| Discord | Community (optional) | Whatever you choose to share there |
| Market-data provider | Charts (optional) | The symbol requested — never your trades |
We may also disclose information if compelled by law. In practice, a lawful request for your trading records could only ever yield ciphertext we cannot open.
6. International transfers
We operate from Australia and our providers may process data in other countries, including the United States and the European Union. Where personal information is transferred internationally, we rely on our providers’ standard contractual clauses and equivalent safeguards.
7. Retention
Server logs are kept only briefly for security and reliability. Encrypted sync blobs are kept until you delete them or your subscription lapses. Support emails are kept while relevant. Your own records are on your device and are retained for exactly as long as you choose.
8. Your rights
Depending on where you live, you may have rights to access, correct, delete, export or restrict the processing of your personal information, to object to processing, and to complain to a regulator — in Australia, the Office of the Australian Information Commissioner.
For your trading records, these rights are already built in and need no request: export from Settings at any time, delete by clearing the app’s data or disabling sync. For anything we hold — support email, sync blobs — write to support@quantpeak.trade and we will action it. For billing information, contact Whop, who hold it.
9. Cookies and local storage
We use browser storage to make the software work — your data, your theme, your settings and your session. We do not use advertising or cross-site tracking cookies. Blocking storage for this site will stop the terminal from functioning.
10. Children
QuantPeak is not intended for anyone under 18 and we do not knowingly collect information from children. If you believe a child has provided us with personal information, contact us and we will delete it.
11. Security
We keep the attack surface deliberately small: no user database, no readable user content, no secrets in client code, and encryption performed on your device. No system is perfectly secure, and you are responsible for the security of your own device and passphrase. If a breach ever affected personal information we hold, we would notify affected people and the relevant regulator as required by law.
12. Changes
We will update this policy as the product changes, and the date above always reflects the current version. If a change materially reduces your protections we will give notice before it takes effect.
13. Contact
Privacy questions or requests: support@quantpeak.trade.