QuantPad Privacy Policy

QuantPad LLC ("QuantPad", "we", "us") operates quantpad.ai, a quantitative research platform. This policy explains what data we collect, how we use it, and the choices you have. Questions: contact@quantpad.ai.

1. Your strategies are yours

This is the section most of our users care about, so it comes first.

We do not read, review, or analyze the strategies, code, notebooks, backtests, or results you create on QuantPad in the ordinary course of business. We do not use your content to trade, to develop or improve trading strategies of our own or anyone else's, or to inform any trading decision. We do not sell your content, share it with other users without your action, or mine it for signals.

Like any hosted platform, we have the technical ability to access content stored on our infrastructure. We limit that access to three situations: (a) you explicitly ask us to look at something, for example during a support request; (b) we are investigating suspected abuse, fraud, or a security incident; (c) we are required to by law. In each case, access is limited to the minimum necessary.

AI conversations are different from your stored strategies: we may review agent prompts and responses to improve the product, diagnose failures, and ensure safe use.

Content you deliberately publish through QuantPad's community features is visible to others by design and is not covered by the paragraphs above.

2. Data we collect

• Account data: name, email, and authentication identifiers, managed through Clerk.
• Payment data: handled by Stripe. Card numbers never touch our servers. We receive subscription status, plan, and billing metadata.
• Your content: code, notebooks, workspaces, backtest artifacts, and data files you create or upload, stored in our databases and object storage.
• Usage data: product events (for example, that a backtest was run, feature usage, error rates), device and browser information, and approximate location derived from IP address, collected through PostHog. This event data describes what features were used, not the contents of your strategies.
• Communications: emails you send to our support and contact addresses.

3. Session replay

We use PostHog session replay to understand usability problems. Recordings mask text inputs and editor content, so your code and strategy content are not captured in replays. Session replay is disabled entirely for visitors in the European Union and the United Kingdom.

4. AI features

When you use QuantPad's agent and copilot features, your prompts and relevant workspace context are sent to the large language model provider behind the model you select in the model picker. Nothing is sent to any provider you have not selected, and content is only sent when you actively use an AI feature. The providers currently available in the model picker are Anthropic and OpenAI. We use these providers under API terms that do not permit them to train models on your data, and we will update this list as available providers change. We log AI feature interactions, including prompts and responses, for quality, debugging, and product improvement.

5. How we use data

To operate and improve the service, process payments, provide support, secure the platform, meet legal obligations, and send transactional email (via Resend). We do not sell personal data and we do not use your data for third-party advertising.

6. Service providers

We use the following subprocessors to run QuantPad: Vercel and Render (hosting), Supabase (database and storage), Cloudflare (DNS and object storage), Daytona (sandboxed code execution), Clerk (authentication), Stripe (payments), PostHog (analytics), Resend (transactional email), Anthropic and OpenAI (AI features), and Databento and other market data providers (market data delivery). Each processes data only as needed to provide its service to us. We will update this list as our providers change.

7. Retention and deletion

We keep your account data and content while your account is active. To delete your account and associated content, email contact@quantpad.ai and we will process the request within 30 days, subject to data we must keep for legal, billing, or security purposes.

8. Security

Data is encrypted in transit. Access to production systems is restricted and authenticated. No system is perfectly secure, and we cannot guarantee absolute security.

9. Your rights

Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your personal data, and to object to or restrict certain processing. EU and UK users have these rights under the GDPR and UK GDPR; our lawful bases are performance of our contract with you, our legitimate interests in operating and securing the service, and consent where required. California residents have equivalent rights under the CCPA, and we do not sell or share personal information as those terms are defined there. To exercise any right, email contact@quantpad.ai. You may also lodge a complaint with your local supervisory authority.

10. Children

QuantPad is not directed to children under 13, and we do not knowingly collect personal data from them. If you believe a child under 13 has created an account, contact us and we will delete it.

11. Changes

We will post updates to this policy here and update the date above. Material changes will be announced by email or in the product.

12. Contact

QuantPad LLC, contact@quantpad.ai.