1. Who we are
Quantumine is a proprietary trading firm. We research markets, build our own technology and trade our own capital. For any question or request about your personal data, email support@quantumine.net.
2. About this policy
This policy explains how Quantumine ("we", "us") collects, uses, shares and protects personal data when you visit quantumine.net or use the Quantumine desktop app, the Quantumine web app, the account pages at quantumine.net and the emails we send (together, the "Service").
We decide why and how the personal data described here is processed, so we are its controller.
This policy does not cover services we do not run, such as exchanges, trading platforms, sign-in providers or AI tools you connect yourself. Their own policies apply to them.
3. Data we collect
Your account
- your email address, your name, and your password. The password is stored only as a one-way hash: a scrambled value that cannot be turned back into the password;
- how you sign in: with an email address and password, or through a third-party sign-in provider, which gives us your email address, name and profile picture;
- whether and when you confirmed your email address;
- your plan and its status.
Sessions and devices
- for each signed-in session: its IP address, the identification string your browser or app sends (the user agent), and when the session was created and last used;
- for each install of the desktop app: your computer's name, its operating system, the app version, when it was first and last seen, and a random identifier the app creates, which we receive and store only in hashed form;
- device verification codes, which we store only as a keyed hash and which expire after 10 minutes;
- an approximate location (city, region or country) worked out from your IP address, which we show in security emails.
Security records
- records of sign-ins, device verifications, device removals, app sign-ins started from the web, and licences issued, with the network part of your IP address (for an IPv4 address, its first three numbers) and the browser type.
Account history for service analytics
- when your account was created and confirmed, the sign-in method you used first, the days an install of the app was used with its operating system and app version, and changes to your plan. This history is kept under a random identifier, and its link to your account is removed when the account is deleted.
Consent records
- which consent you gave or withdrew, the version and a hash of the text you were shown, your language, the time, and the network part of your IP address.
Content kept for your account
- the watchlists you save in the web app: their names and the markets they list;
- your preferences in the web and desktop apps, such as chart settings, favourites and saved indicator and drawing settings, so that they follow your account;
- the custom indicators you add in the web app: their names and source code;
- the backtests you run in the web app: their settings, results and logs, and the computing time each one used.
Your layouts and chart drawings in the web app are kept in your browser's storage, not on our servers.
Exchange connections in the web app
When you connect an exchange account through the web app, the connection is kept in your browser, on your device, and not on our servers. That includes:
- the key for the connection, the exchange, the environment (live or test) and the name you give the connection;
- your acceptance of the live-trading risk statement: a hash of the statement and the time;
- a record of what the web app sent to the exchange on the connection, and how each request came out.
Your browser sends your orders straight to the exchange. We do not receive your keys or your orders, we never receive your exchange password, and we never hold your funds. Because this information stays in your browser, we cannot give you a copy of it, and clearing your browser's site data deletes it.
Balances, positions and orders reveal your trading activity. The law of some countries may treat such financial information as sensitive personal data. It reaches us only when you use an AI feature that reads it, and we process it only to provide that feature.
AI features
- your prompts, the information included with them — which can include market data and, when a feature reads them, your balances, positions and orders — and the AI's responses. They are sent to third-party AI model providers to produce the response;
- how much you use AI features, counted in tokens and calls for each day, to apply the allowance in your plan. This count holds none of your messages.
Your chat history is kept on your device: on your computer in the desktop app, and in your browser's storage in the web app.
"Help improve Quantumine" is on unless you turn it off, in the desktop app and in the web app. While it is on, we may keep your chats to improve the Service. You can turn it off at any time.
Usage analytics
The desktop app and the web app may collect information about how you use their features, such as which features you open and how often. It does not include the content of your chats or your orders. Usage analytics is on unless you turn it off, and you can turn it off at any time.
Messages you send us
- what you write to us, for example to support, and our replies.
Payments
Paid plans are not on sale yet. Before they are, we will update this policy to describe the payment data involved.
Technical data
- when you visit our pages, check for app updates or download a data package, our servers and infrastructure providers receive your IP address, browser information and the address requested, to deliver the content and protect the Service from abuse.
4. What stays on your device
The desktop app keeps your work on your computer. The following are not sent to our servers:
- workspaces and layouts;
- strategies, indicators, bots and their records;
- backtest runs and their results;
- your trading journal;
- market data you download;
- your exchange API keys, which stay in your computer's credential store;
- your AI chat history.
The preferences listed under Content kept for your account are the exception: they follow your account.
The web app keeps your exchange connections, your AI chats, your layouts and your chart drawings in your browser in the same way.
Both apps connect directly to the exchanges and market data sources you use. They receive your IP address and the requests you send, under their own privacy policies.
When you use an AI feature, what goes into the conversation is sent to AI model providers, as described above.
5. How we use your data and why
| What we do | Data used | Legal basis |
|---|---|---|
| Create and run your account, sign you in, and provide your plan and licence | account, sessions and devices | performing our contract with you |
| Protect your account and the Service: device codes, sign-in notices, and preventing abuse | sessions and devices, security records | performing our contract; our legitimate interest in keeping the Service secure |
| Keep your watchlists, preferences, custom indicators and web backtests, so that they are there wherever you sign in | content kept for your account | performing our contract |
| Keep consent records to answer questions and resolve disputes | consent records | legal obligation; establishing, exercising or defending legal claims |
| Provide AI features | AI features | performing our contract |
| Understand how the Service is used overall, to run and plan it | account history for service analytics | our legitimate interest in running and developing our business |
| Improve the Service using your chats and usage analytics, unless you turn them off | AI features, usage analytics | our legitimate interest in improving the Service |
| Send service emails, such as confirmations, codes and security notices | account, sessions and devices | performing our contract |
| Answer your messages | messages you send us | performing our contract; our legitimate interest in helping you |
| Comply with the law and answer lawful requests | as needed | legal obligation |
Where the law of your country does not recognise one of these legal bases, we rely on a basis that your law does provide.
We do not sell your personal data, and we do not use it for advertising.
We do not make decisions about you based solely on automated processing that have legal or similarly significant effects. Automated security checks, such as asking a new device for a code, only protect your account.
6. Who we share it with
We share personal data only with these kinds of recipients, and only as needed for the purposes above:
- Cloud infrastructure providers, which host our database, sign-in service, server functions and web pages, deliver our content and protect it from attacks.
- Email delivery providers, which send our account and security emails.
- Third-party AI model providers, and a routing service that passes requests to them. We ask the routing service to use only providers that state they do not use prompts for training. A provider may keep a prompt for a limited time, for example to detect abuse. If no such provider is available, the request fails instead of going elsewhere.
- An IP location service, which may receive your IP address to give an approximate location for a security email.
- Your sign-in provider, if you use one. Our sign-in and registration pages show its sign-in button, which connects to the provider even if you do not use it.
- A font delivery service, which receives your IP address when our pages load their fonts.
- Exchanges. The exchanges you connect receive the orders and requests your app sends, straight from your device, together with your IP address. The web app also loads market data from exchanges directly in your browser.
- Professional advisers and public authorities, when the law requires it or to protect our rights, our users or the public.
- A successor, if the Service is sold or reorganised. This policy continues to apply to your data.
7. International transfers
Our providers process data in several countries, which may include countries in Asia, Europe and North America. These may not be the country where you live, and their laws may protect personal data less.
When we transfer personal data across borders, we take the steps the applicable law requires, such as contractual safeguards.
8. How long we keep data
| Data | How long we keep it |
|---|---|
| Account data | until your account is deleted |
| Sessions | until you sign out, you remove the session, or it ends after a period without use |
| Device records | until your account is deleted |
| Security records | while your account exists; after that, without the link to your account, for up to 5 years |
| Account history for service analytics | while your account exists; after that, without the link to your account, for up to 5 years |
| Consent records | while your account exists, and 5 years after it is closed |
| Watchlists, preferences and custom indicators | until you delete them or your account |
| Web backtests | until you delete them or your account |
| AI usage counts | until your account is deleted |
| AI chats kept while "Help improve Quantumine" is on | up to 1 year |
| Messages you send us | as long as needed to handle your request and any follow-up |
When you delete your account, we delete or de-identify your personal data, except records we must keep for the periods above or by law.
9. How we protect your data
- Exchange keys never reach our servers: the desktop app keeps them in your computer's credential store, and the web app keeps them in your browser.
- Each account can read only its own records, and every change goes through our server functions, which check who is asking.
- Device identifiers and verification codes are stored only as hashes.
- Our own security and consent records keep only the network part of your IP address.
No system is completely secure. If a personal data breach affects you, we will tell you and the authorities as the law requires.
10. Your rights
Depending on where you live, you may have the right to:
- know how we process your personal data, and get a copy of it;
- correct data that is inaccurate;
- have your data deleted;
- restrict or object to processing;
- receive your data in a portable format;
- withdraw your consent at any time, without affecting processing that happened before;
- complain to a data protection authority, such as the one in the country where you live.
You can do some of this yourself: see and remove signed-in devices on your account page, reset your password, delete watchlists, custom indicators and backtests, remove exchange connections, and turn optional settings off in the app.
For anything else, including deleting your account, email support@quantumine.net from the address on your account. We may need to confirm that you are the account holder first.
We answer within one month, unless the law where you live sets a shorter period. If a request is complex, we may take longer where the law allows, and we will tell you why.
11. Cookies and browser storage
We do not use cookies for advertising or to track you across sites.
Our pages and the web app keep what they need to work in your browser's storage: your sign-in session, when you last used it, a sign-in in progress, your settings, layouts, indicators and chart drawings, your AI chats, and your exchange connections with their keys. The pages of quantumine.net keep your language choice in the page address. This storage is strictly necessary for the Service, and we do not use it to track you.
Our infrastructure provider may set cookies needed for security and access control. The sign-in button on our sign-in and registration pages may let its provider set cookies of its own, under that provider's policy.
We do not use optional cookies or similar tracking technologies. If we add any, we will ask for your consent first where the law requires it.
12. Children
The Service is not for anyone under 18. We do not knowingly collect personal data from anyone under 18. If you believe we have, contact us and we will delete it.
13. Changes to this policy
We may update this policy. We will tell you about a material change at least 15 days before it takes effect, by email or in the Service. The date at the top of this page shows the current version.
14. Contact
Email support@quantumine.net with any question about this policy or your personal data.