Privacy Policy

Effective: 2026-07-11

1. What we collect

• Account: email and password (stored as a salted hash — we never see the plaintext);
• Usage: API call counts (aggregated by key, endpoint, date), sign-in times, registration IP (anti-abuse);
• Payment: handled by Stripe; we store only subscription status and a customer id — we never touch or store card numbers.

2. How we use it

• Operating the service: quotas, rate limits, billing;
• Transactional email only (password reset, expiry reminders) — no marketing mail;
• Abuse prevention: detecting bulk registration and anomalous traffic.

3. Cookies

One session cookie (httponly, Secure). No third-party tracking or advertising cookies.

4. Third parties

• Stripe (payments, PCI-DSS compliant);
• Alibaba Cloud (servers, database, email delivery).

Beyond what these services require to operate, we never sell or share your personal data.

5. Security & retention

• HTTPS everywhere; API keys stored as SHA-256 hashes only, plaintext shown once at creation;
• Account data is deleted within 30 days of account closure, except records we must retain by law.

6. Your rights

Export or delete your account data, or correct your email, anytime — write to support@quantsonar.com; we respond within 7 business days.

7. Contact

support@quantsonar.com