Back to Landing
Privacy Standards

Privacy Policy

Last updated: July 29, 2026

Secure Data Infrastructure

We use Supabase (built on PostgreSQL) to process user authentication, securely hash passwords, and protect your workspace reports history. No plain-text credentials are ever stored or processed by our servers.

1. Information We Collect

We collect information you provide directly to us when creating an account, running optimizations, or communicating with us. This includes:

  • Account Data: Email address, registered name, password hashes (handled by Supabase Auth), and subscription plan tier.
  • Optimization Data: Configuration parameters, selected assets, tickers, and computed results (such as portfolio weights, risk metrics, and Pareto-frontier points).
  • Usage Logs: Browser user agent, IP address, and platform activity data to diagnose service issues and prevent platform exploitation.

2. Local Storage and Session Cookies

QuantOptima uses browser Local Storage and cookies to deliver a responsive, seamless client experience:

  • Authentication Sessions: Managed via cookies to verify login state and authorize NextAuth endpoints.
  • Report History: Saved locally in browser storage (`optimizer:report-history`) as a cache fallback to provide instant, offline-capable dashboard access.

3. How We Use Your Data

We utilize your collected information to:

  • Deliver, support, and enhance our portfolio optimization algorithms.
  • Manage account authorization, subscriptions, and verify API token eligibility.
  • Communicate critical updates, system maintenance warnings, or security alerts.
  • Enforce platform guidelines, prevent abuse, and audit service operational health.

4. Third-Party Services and Sharing

We do not sell, license, or trade your personal data. We share information only with trusted third-party cloud infrastructure providers necessary to operate the platform:

  • Supabase: For cloud data hosting, database records, and authentication.
  • Stripe (if applicable): For secure subscription payment validation.

5. Data Retention & Deletion Rights

We retain account data for as long as your account remains active. Under applicable privacy laws (such as GDPR or CCPA), you have the right to request access to, correction of, or permanent deletion of your personal data. To delete your account and associated database history, please contact our support team.

Need details on how we store data? Reach out to our privacy officer at privacy@quantoptima.tech.