Privacy Policy
Effective: 2026-07-11
This policy explains which account, usage, and payment-related information QuantSonar collects, why it is used, how it is retained, and the rights available to you.
1. What we collect
- Account: email and password (stored as a salted hash — we never see the plaintext);
- Usage: API call counts (aggregated by key, endpoint, date), sign-in times, registration IP (anti-abuse);
- Payment: handled by Stripe; we store only order and access-period status plus a customer id — we never touch or store card numbers.
2. How we use it
- Operating the service: quotas, rate limits, billing;
- Transactional email only (password reset, expiry reminders) — no marketing mail;
- Abuse prevention: detecting bulk registration and anomalous traffic.
3. Cookies
One session cookie (httponly, Secure). No third-party tracking or advertising cookies.
4. Third parties
- Stripe (payments, PCI-DSS compliant);
- Alibaba Cloud (servers, database, email delivery).
Beyond what these services require to operate, we never sell or share your personal data.
5. Security & retention
- HTTPS everywhere; API keys stored as SHA-256 hashes only, plaintext shown once at creation;
- Account data is deleted within 30 days of account closure, except records we must retain by law.
6. Your rights
Export or delete your account data, or correct your email, anytime — write to support@quantsonar.com; we respond within 7 business days.