This policy explains what Quant Geeks LLC ("QuantGeeks", "we", "us") collects when you use the QuantGeeks console, website and related services (the "Service"), how we use it, and the choices you have.
Quant Geeks LLC, 3801 N Capital of Texas Hwy, Ste E240-4089, Austin, TX 78746, USA, is responsible for your personal information (the “controller” under European data-protection law). Contact us about anything in this policy at [email protected].
Account. Your email address and the username you choose. There are no passwords: you sign in with a link we email you, or with Discord, Google, GitHub or X. For each sign-in method you link we keep that provider's account id and the email address it reports, so you can get back in with any of them. We do not receive your name or picture from those providers.
Billing. Stripe, our payment processor, collects your card and billing details on its own page; we never see them. We receive the payment status, your plan and subscription dates, your Stripe customer id, and your answer if you fill in Checkout's optional “How did you hear about us?” question.
Session location. Each time you sign in we create a session and keep with it your IP address, a region, city and approximate coordinates (to about 1 km) derived from Cloudflare's network headers, and when the session was last used. Section 5 explains why.
Your trading journal. If you use the journal, the trades you enter or import (symbol, contract, quantity, prices, fees, times and your notes) and, for an imported broker file, its file name and a fingerprint of it. We read the trades out of the file and do not keep the file itself.
Console settings. Your saved layouts, display preferences and wallet history.
Support messages. What you write to us, plus details we attach so we can help: your account id, email, username, sign-in methods, plan and subscription status, and your browser, screen size and time zone.
Referral. If you accept marketing cookies and arrive through an affiliate link, the referral code is kept with your account.
Technical logs. Our servers log errors and operational events. They can contain an email address when an email to it fails to send.
Connected AI assistants. If you connect an AI assistant to your account (section 7), we keep the connection: your account id, the name the assistant gave itself, the address it returns you to, when you approved it and when it last connected, and a record of your approving, refreshing and disconnecting it. When the assistant asks for data we receive its request (which tool, for which symbol, date and time) under your account id.
To provide the Service you signed up for (contract): your account, sign-in, sessions, console settings, journal, payments and service emails such as sign-in links, receipts and payment notices.
To keep the Service secure and fair (our legitimate interests in security, preventing fraud and enforcing the one-person plan): session location, the sharing check in section 5, the sign-in challenge, and technical logs.
To pay affiliates accurately (our legitimate interest in running our affiliate program): passing payment notices to Trackdesk, as described in section 8.
With your consent: marketing cookies and affiliate attribution in your browser, and the Financial Juice news widget (section 7). You can withdraw consent at any time; that does not affect what happened before.
To meet legal obligations: tax, accounting and records we must keep, and answering lawful requests.
We do not sell your personal information, and we do not use it for advertising.
Chat is a live room. Your messages are shown in real time to other members in the room, with your username and your account id. We keep each message on our servers for 48 hours, encrypted, so the room is there when you come back; after 48 hours it is deleted automatically. Your browser also keeps the last 48 hours on your own device. A stored message is the text, your username, your account id and the time it was sent.
A plan is for one person, on their own devices. Every few minutes an automated check compares the locations of an account's active sessions: more than two regions in a day, or two places too far apart to travel between in the time, flag the account. A flag is recorded in our internal audit log with the regions and distances involved, and our team is notified to review it. Today a flag only alerts our team, and any action on an account is taken by a person. If we switch on automatic sign-out of the extra devices, a flag will sign out sessions, not close the account. Tell us at [email protected] if you think a flag is wrong.
We use cookies and similar technologies to keep you signed in and secure and to remember how you set up the console. With your consent we also use marketing cookies, one set by Trackdesk, our affiliate-attribution provider, to credit the affiliate who referred you. We do not run analytics of our own. Our Cookie Policy lists every cookie and explains your choices.
Financial Juice. The console's news tile can show Financial Juice's live headlines. That widget is Financial Juice's own page; it runs Google Analytics and keeps a visitor id in your browser. Nothing from Financial Juice loads until you choose Show Financial Juice, and Turn off Financial Juice stops it again.
Fonts. Our pages load their typefaces from Google Fonts, so your browser sends your IP address to Google when it fetches them.
Connected AI assistants. You can connect an AI assistant, such as Claude, to your QuantGeeks account so it can read the same market data your plan shows in the console, on your behalf. It is read-only: it cannot trade, change your account or see your billing details. When you approve a connection, the assistant receives an access grant tied to your account. It uses the grant to ask us for data, and we answer from your plan, as the console does. What the assistant reads is sent to the AI provider you chose, as part of your conversation with it; that provider's privacy policy governs what it does next, and we do not control it. Without a connection, an assistant can still read a limited free preview that identifies no one. We store the grant in Cloudflare's Workers KV, with the tokens hashed and the account details in it encrypted, and keep it until you disconnect the assistant or it expires. We also keep the audit records described in section 2. To disconnect an assistant, open your account menu in the console and choose Disconnect beside it under Connected AI assistants; its access ends at once, or at the latest within ten minutes. If your account is deleted or suspended, every connection stops working within ten minutes. Using QuantGeeks data through your own AI assistant is personal use under our Terms. Details are on our connector page.
We share personal information only with these service providers, each for the purpose stated, plus when required by law, to protect our rights, or in a business transfer. We do not share it with advertisers.
DigitalOcean (USA): hosts our servers, database and logs. Cloudflare (USA): our network, protection against attacks and bots, the sign-in challenge (which receives your IP address), and the live data and chat connection, the 48-hour chat history, and the connections you have made to AI assistants (section 7). Stripe (USA): payments; it receives your email, username and account id with your customer record. Resend (USA): delivers our emails. Discord, Google, GitHub and X: the sign-in method you choose. Trackdesk: affiliate attribution. With your consent, its script in your browser records the affiliate link you arrived from, and your email when you choose a plan; it may run Anura's click-fraud check. Separately, Stripe sends Trackdesk a notice of each payment (the email on the payment, the amount and the product) so commissions can be matched and paid. Financial Juice and Google: as described in section 7. The AI assistant provider you choose, such as the company behind the assistant you connect: it receives what the assistant reads from QuantGeeks, as described in section 7.
We are based in the United States, and we store your information there. If you use the Service from the European Economic Area or the United Kingdom, you give your information to us in the United States directly. When we pass it to our US service providers, we rely on each provider's certification under the EU-U.S. Data Privacy Framework and its UK Extension (Stripe, Cloudflare, DigitalOcean, Resend and Google are certified), and on the European Commission's Standard Contractual Clauses, with the UK Addendum, in their data-processing terms. Trackdesk is based in the Czech Republic and Financial Juice in the United Kingdom. You can ask us for a copy of these safeguards at [email protected].
Sessions and their location: until you sign out or the session expires, at most 3 days. A session replaced by a newer sign-in is kept as a marker for up to 7 days so the older device can be told why. Sign-in links: 15 minutes, or until used. Technical logs: 30 days. Chat messages: 48 hours, then deleted automatically. Account, sign-in methods, settings, journal, wallet and referral code: while your account is open, and deleted with it (section 13). Sharing-check records and our administrative trail: while your account is open; on deletion they are kept tied only to the account id, with your email and the regions removed. Deletion record: as described in section 13. Connected AI assistants: the grant until you disconnect the assistant or it expires; the approval, refresh and disconnect records while your account is open. Stripe's records: as Stripe's policy and the law require.
We use industry-standard measures to protect your information, including encryption in transit, sign-in without passwords, and access to member data limited to the staff who need it. No system is perfectly secure; tell us immediately at [email protected] if you suspect a problem with your account.
Get a copy of your data. In the console, open your account menu and choose Download my data for a file of everything we hold about your account, in a format you can take elsewhere. It includes your own chat messages from the last 48 hours; other members' messages are not included, and nothing older exists.
Correct it: change your username in the console, or ask us. Delete it: see section 13. Withdraw consent: Cookie settings, linked in every footer, and the Financial Juice switch in the news tile.
Depending on where you live you may also have the right to object to processing based on our legitimate interests, to restrict it, and to not be treated differently for using your rights. Ask us at [email protected]; we answer within one month of receiving it, and if a request is complex we may take up to two more months, telling you why within the first month. We confirm a request comes from the account holder by replying to the email address on the account.
If you are in the European Economic Area or the United Kingdom, you can complain to your local data-protection authority (in the UK, the Information Commissioner's Office). We would appreciate the chance to put things right first.
How to ask. In the console, open your account menu, choose Contact support and pick “Delete my account”, or email [email protected] from the address on your account. There is no self-service button yet; we confirm by replying to that address. You may want to use Download my data first. Timeframe. We complete the deletion within 30 days of your confirmed request.
What is deleted. Your account and its sign-in links, every linked Discord, Google, GitHub or X identity, all sessions and the location kept with them, your saved layouts and preferences, your journal, your wallet history and your referral code. Any active subscription is canceled immediately and your customer record at Stripe is deleted. Cancellation is immediate and not prorated; if you are owed a refund, ask us before you request deletion, because we cannot issue one afterwards.
What is kept. (1) A deletion record: a one-way hash of your email address (not the address itself), your account id, the date of deletion, who processed it and why, and your Stripe customer id. (2) Our administrative trail: entries about your account (for example a plan or access change, a ban, a credit) stay, tied only to your account id, with your email address and any sharing-check regions removed. (3) Stripe keeps its own payment, refund, dispute and tax records for as long as its policy and the law require; see Stripe's privacy policy. Trackdesk keeps the payment notices it received for commission accounting. (4) Copies we cannot reach from the account: support correspondence, including your deletion request itself. Chat messages you posted in the 48 hours before deletion expire on their own within 48 hours (section 4).
The Service is not directed to anyone under 18, and we do not knowingly collect personal information from minors. If you believe a minor has an account, tell us and we will delete it.
We may update this policy; material changes will be announced by email or in the console, and the date at the top changes. Questions or requests: [email protected]. Quant Geeks LLC, 3801 N Capital of Texas Hwy, Ste E240-4089, Austin, TX 78746, USA.