Privacy Policy

Please read this Privacy Notice carefully to understand how your personal data is collected, used, protected, and what rights you have in relation to your personal data when you use the Quantm Alpha website available at quantmalpha.com (the "Website") or our software, including mobile applications (the "Software").

QuantM Alpha Inc., a Panama International Business Company located at Advanced Tower, 1st Floor, Panama City, Panama, Company №: 155761151 ("Quantm Alpha", "we", "us", or "our") acts as the data controller, determining the purposes and means of processing your personal data.

We collect personal data you provide directly to us, data collected automatically during your use of our Website and Software, and data from third-party sources.

1.1. Data You Provide:

• Registration and Profile Information: When you register for an account, we collect your email address and password. You may optionally provide your name, surname, avatar, social media links, phone number, and Telegram ID.
• Business Account Information: If you register a business account, we collect the company name, registration number, address, country, operational address, email, phone number, website, names of authorized representatives and beneficiaries, and documents confirming their identity and authorization.
• Verification Data (KYC): For identity verification, we collect your name, surname, date of birth, address, citizenship, phone number, email, photos/videos of your face and identity documents (passport, ID card, driver's license), and document details (number, expiry date, country of issuance). This process is handled by our KYC service provider, SumSub (Sum and Substance Ltd).
• Communication Data: When you contact us via email, chat, or other means, we collect the content of your communications and any data you provide.
• Feedback and Surveys: We collect data you provide through feedback forms, surveys, or reviews.
• Financial Data: If you subscribe to paid services, we collect payment information (like credit card details), which is processed by our payment providers (e.g., Paddle, Stripe, Coinbase Commerce, Coinpayments). We only store partial payment information (e.g., last four digits of a card) and transaction details.
• API Keys: We collect API keys from cryptocurrency exchanges that you connect to your Quantm Alpha account to enable our Software functionalities.

1.2. Data Collected Automatically:

• Usage Data: Information about your interactions with our Website and Software, including pages visited, features used, time spent, clicks, and referral sources.
• Device and Technical Data: IP address, browser type and version, operating system, device identifiers, screen resolution, language preferences, and location data derived from your IP address.
• Log Data: System activity logs, including access times, error logs, and performance data.
• Cookies and Tracking Technologies: We use cookies, web beacons, and similar technologies to collect data about your Browse activities. See Section 7 (Cookies) for details.

1.3. Data from Third Parties:

• Social Media Platforms: If you log in using social media (e.g., Google, Facebook, Apple ID), we receive profile information according to the platform's and your privacy settings.
• Payment Providers: Confirmation of payments and transaction details.
• KYC Providers: Results of identity verification checks.
• Analytics Providers: Aggregated or anonymized data about user behavior (e.g., Google Analytics).
• Public Sources: Data from publicly available sources, if necessary for compliance or security purposes.

We use your personal data for the following purposes based on specific legal grounds:

• To Provide and Manage Services (Performance of Contract):
  • Create and manage your account.
  • Process subscriptions and payments.
  • Enable Software features, including connecting to exchanges via API keys.
  • Provide customer support and respond to inquiries.
• For Identity Verification and Compliance (Legal Obligation):
  • Conduct Know Your Customer (KYC) checks as required by anti-money laundering (AML) regulations.
  • Comply with legal and regulatory requirements.
• To Improve and Develop Services (Legitimate Interests):
  • Analyze usage patterns to understand user needs and improve the Website and Software.
  • Develop new features and services.
  • Conduct troubleshooting, testing, and debugging.
• For Marketing and Communication (Consent / Legitimate Interests):
  • Send newsletters, promotional materials, and updates about Quantm Alpha (you can opt-out anytime).
  • Personalize your experience and offer relevant content.
  • Gather feedback through surveys.
• For Security and Fraud Prevention (Legitimate Interests / Legal Obligation):
  • Monitor for and prevent fraudulent activities, unauthorized access, and security breaches.
  • Protect the rights, property, and safety of Quantm Alpha, our users, and the public.

We do not sell your personal data. We may share your data with the following categories of third parties:

• Service Providers: Companies that perform services on our behalf, such as:
  • KYC/AML verification providers (e.g., SumSub).
  • Payment processors (e.g., Paddle, Stripe, Coinbase Commerce, Coinpayments).
  • Cloud hosting providers (e.g., AWS, Hetzner).
  • Analytics providers (e.g., Google Analytics, Amplitude, Hotjar).
  • Marketing and communication tools (e.g., Mailchimp, Intercom).
  • Customer support platforms.

  These providers only have access to the data necessary to perform their functions and are obligated to protect your data.

• Affiliates: Other companies within the Quantm Alpha group for operational purposes.
• Business Transfers: In connection with a merger, acquisition, reorganization, or sale of assets, your data may be transferred as part of the transaction.
• Legal Requirements: If required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of Quantm Alpha, our users, or others.
• With Your Consent: We may share data with third parties when we have your explicit consent to do so.

Your personal data may be processed in countries outside the European Economic Area (EEA), including countries that may not offer the same level of data protection as your home country. Quantm Alpha is based in Panama.

When we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as:

• Using Standard Contractual Clauses (SCCs) approved by the European Commission.
• Transferring data to countries deemed adequate by the European Commission.
• Obtaining your explicit consent for the transfer.
• Implementing supplementary measures to protect the data during transfer and in the destination country.

Our main service providers processing data outside the EEA include AWS (USA), Google (USA), Paddle (USA/UK), Stripe (USA), SumSub (UK), and others who commit to adequate safeguards.

We implement technical and organizational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. These measures include:

• Encryption of data in transit (TLS/SSL) and at rest.
• Access controls and authentication mechanisms.
• Regular security assessments and vulnerability scanning.
• Anonymization or pseudonymization where appropriate.
• Employee training on data protection.

However, no security system is impenetrable. We cannot guarantee the absolute security of your data.

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including satisfying legal, accounting, or reporting requirements.

• Account Information: Retained for the duration of your active account and for a period afterward as required by law (e.g., accounting records) or for legitimate interests (e.g., resolving disputes).
• KYC Data: Retained according to AML regulations, typically 5 years after the termination of the business relationship.
• Usage and Technical Data: May be retained in aggregated or anonymized form for longer periods for analytical purposes.
• Communication Data: Retained as long as needed to address your inquiry or for record-keeping purposes.

When data is no longer needed, we securely delete or anonymize it.

We use cookies (small text files placed on your device) and similar technologies (web beacons, pixels) to operate our Website and Software, analyze performance, personalize your experience, and for marketing purposes.

Types of Cookies We Use:

• Strictly Necessary Cookies: Essential for the Website and Software to function (e.g., login sessions, security). Cannot be disabled.
• Performance Cookies: Collect information about how you use our services (e.g., page views, load times) to help us improve them.
• Functionality Cookies: Remember your choices and preferences (e.g., language, region) to provide a more personalized experience.
• Targeting/Advertising Cookies: Used by us or third-party advertisers to deliver relevant ads based on your interests and Browse history.

Managing Cookies: You can manage your cookie preferences through our cookie consent banner or your browser settings. Disabling certain cookies may affect the functionality of the Website and Software.

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child without parental consent, we will take steps to delete it.

Under the General Data Protection Regulation (GDPR) and other applicable laws, you have rights regarding your personal data:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure ('Right to be Forgotten'): Request deletion of your data, subject to certain conditions (e.g., legal obligations).
• Right to Restrict Processing: Request limitation of how we use your data under specific circumstances.
• Right to Data Portability: Request your data in a structured, commonly used, machine-readable format, or request its transfer to another controller.
• Right to Object: Object to processing based on legitimate interests or for direct marketing purposes.
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing before withdrawal.
• Right to Lodge a Complaint: Complain to a supervisory authority if you believe your data protection rights have been violated. The lead supervisory authority for Quantm Alpha is the Panamanian Data Protection Authority (ANTAI - Autoridad Nacional de Transparencia y Acceso a la Información).

To exercise these rights, please contact us at info@QuantmAlpha.com or through your account settings where applicable. We may need to verify your identity before processing your request.

We may update this Privacy Notice periodically to reflect changes in our practices or legal requirements. We will notify you of significant changes by posting the updated notice on our Website or through other communication channels. We encourage you to review this notice regularly.

If you have questions or concerns about this Privacy Notice or our data practices, please contact our Data Protection Officer (DPO):

Email: info@quantmalpha.com

Postal Address: QuantM Alpha Inc., a Panama International Business Company located at Advanced Tower, 1st Floor, Panama City, Panama, Company №: 155761151.