Privacy Policy

1. Introduction

QuantLabs ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform, including all courses, labs, assessments, and related services.

By using the platform, you consent to the data practices described in this policy. If you do not agree, please discontinue use and contact us to request deletion of your data.

2. Information We Collect

Information You Provide

• Full name and email address at registration
• Account credentials (hashed — we never store plaintext passwords)
• Payment information, processed exclusively by Stripe — we do not store card numbers
• Profile information including trading experience level and preferences
• Assessment responses, quiz answers, and lab submission code
• Support tickets and communication history

Information Collected Automatically

• IP address, browser type, and device identifiers
• Pages visited, time spent per lesson, and navigation paths
• Course completion percentages and assessment scores
• Bot deployment activity (presence/absence only — not strategy logic)
• Error logs and performance telemetry

Cookies and Tracking

We use strictly necessary cookies for authentication, functional cookies for preferences, and optional analytics cookies (Google Analytics) that you can opt out of at any time via your account settings.

3. How We Use Your Information

• Authenticate you and maintain your session securely
• Track and display your learning progress across tiers
• Process subscription payments and send receipts
• Personalise course recommendations based on your tier and assessment scores
• Send transactional emails (password resets, billing confirmations)
• Send optional marketing emails — opt-out available at any time
• Detect and prevent fraud, account abuse, and security threats
• Analyse aggregate usage trends to improve course quality
• Comply with legal obligations

4. Information Sharing and Disclosure

We do not sell, rent, or trade your personal information. We may share it only in the following limited circumstances:

Service Providers

• Stripe — payment processing (PCI-DSS compliant)
• Vercel — hosting and edge infrastructure
• Resend — transactional email delivery
• Google Analytics — aggregate usage analytics (anonymised)

Legal Requirements

We may disclose information in response to a valid court order, subpoena, or government request, or where necessary to protect our rights, enforce our Terms, or prevent fraud.

Business Transfers

In the event of a merger, acquisition, or asset sale, your information may be transferred to the successor entity. You will be notified in advance of any such transfer.

5. Data Security

• All data in transit is encrypted via TLS 1.3
• Data at rest is encrypted using AES-256
• Passwords are hashed with bcrypt (cost factor 12)
• Access to production data is restricted to authorised personnel only
• Regular third-party penetration tests are conducted
• Suspicious activity triggers automatic account lockout

No system is completely immune to attack. We recommend using a strong, unique password and enabling two-factor authentication when available.

6. Your Rights and Choices

Access and Correction

You can view and edit your account information at any time from your Account settings page.

Data Export

You can request a full export of your data — including progress, assessment results, and profile — by emailing privacy@quantlabs.academy.

Account Deletion

You can delete your account from Account settings. This permanently removes all personal data within 30 days, except where retention is required by law.

Marketing Opt-Out

Every marketing email includes a one-click unsubscribe link. You can also toggle email preferences in your Account settings at any time.

7. Data Retention

We retain account data for as long as your account is active. After deletion, personal data is purged within 30 days. Billing records are retained for 7 years as required by tax law. Anonymised, aggregated analytics data may be retained indefinitely.

8. International Data Transfers

Our infrastructure is located in the United States and European Union. If you access the platform from outside these regions, your data may be transferred internationally. We use Standard Contractual Clauses (SCCs) approved by the European Commission where required.

9. Children's Privacy

The platform is intended for users aged 18 and over. We do not knowingly collect personal data from individuals under 18. If you believe a minor has registered, contact us immediately at privacy@quantlabs.academy and we will delete the account promptly.

10. Changes to This Policy

We may update this policy periodically. Material changes will be communicated via email and an in-app notification at least 14 days before they take effect. The "Last updated" date at the top of this page always reflects the current version.

11. California Privacy Rights (CCPA)

California residents have additional rights under the California Consumer Privacy Act:

• Right to know what personal information is collected and how it is used
• Right to know whether personal information is sold or disclosed (we do not sell it)
• Right to opt out of the sale of personal information
• Right to request deletion of personal information
• Right to non-discrimination for exercising any of the above rights

To exercise these rights, email privacy@quantlabs.academy with subject line "CCPA Request".

12. Contact Us

For any questions, requests, or concerns about this Privacy Policy or our data practices, reach us at: