Privacy Policy

This Privacy Policy explains what personal data RabbitQuant collects, why we collect it, who we share it with and the choices and rights you have. It applies to the RabbitQuant website, the web application and the related services described in our Terms of Service (together, the “Service”).

1. Who we are and how to contact us

RabbitQuant is responsible for the personal data processed through the Service. For any question about this policy or your data, or to exercise your rights, email support@rabbitquant.io.

2. Data we collect

Account data. When you register, we collect your full name, email address and password. We store your password only in hashed form, never in readable text. We also keep your preferred language, the date you accepted our Terms, whether you verified your email address and when your account was created and updated.

Google sign in. If you choose to sign in with Google, Google shares your name, email address and Google account identifier with us. We do not receive your Google password.

Verification and reset codes. We send one time codes by email to verify your address and to reset your password. Each code expires shortly after it is sent.

Connected trading account. To connect a MetaTrader account you give us a name for the account, the platform, the account login, the broker server and the account’s investor password. When we sync, the trading platform also reports the broker name, the account holder name, the account type, leverage, margin figures and the account currency.

Trading data. We import your account’s trading history and state: deals with their ticket, time, type, symbol, volume, price, stop loss, take profit, commission, swap, fee, profit, magic number and comment, as well as balance and equity. From this we calculate trades, strategies and performance metrics.

Usage data. We record events such as registration, sign in attempts, email verification, password resets and connecting a trading account, linked to your account, to understand how the Service is used and to keep it secure.

Messages. If you email us, we keep your message and our reply.

3. How we use your data and our legal bases

• To provide the Service (performance of our contract with you): create and secure your account, connect and sync your trading account, calculate your analytics and send you service emails such as verification codes and password resets.
• To improve and protect the Service (our legitimate interests): understand how features are used, fix problems, prevent fraud and abuse and keep the Service secure. You can object to this use at any time.
• To communicate important changes (performance of our contract and legitimate interests): notify you about changes to the Service, to pricing after early access or to our policies.
• With your consent: where the law requires it, for example if we ask to use your data for a new purpose. You can withdraw your consent at any time.
• To comply with the law (legal obligation): respond to lawful requests from authorities and keep records the law requires.

We do not sell your personal data, and we do not use it for advertising.

4. Your connected trading account

We only ask for your investor password, which gives view only access: it can read trades but cannot place or close them. We never ask for your master password.

Your investor password is stored encrypted. It is decrypted only when our systems sign in to your broker’s server, using MetaTrader software that we run, to sync your account on a recurring schedule. We never show it back to you or to anyone else, and we keep it out of our logs.

If you remove a trading account in the app, we stop syncing it. The account, its trading data and its encrypted investor password are then permanently deleted within 30 days. To revoke our access completely, you can also change your investor password with your broker.

5. Cookies

The RabbitQuant website does not set cookies. The web application uses a single session cookie that is strictly necessary to keep you signed in and to protect forms against forgery. We do not use advertising cookies, and we do not load third party tracking scripts in your browser.

6. Service providers

We share personal data only with providers that help us run the Service, and only as needed for that purpose:

• cloud infrastructure and database providers that host the Service and its data;
• an email delivery provider that sends verification codes, password resets and service emails;
• product analytics providers, such as Mixpanel or PostHog, which receive your account identifier, email address, name, language and the usage events described above;
• Google, only if you choose to sign in with Google.

We may also disclose data when the law requires it, to protect the rights and safety of our users or of RabbitQuant, or as part of a merger, reorganization or sale of the business, in which case this policy continues to apply to your data.

7. International transfers

Our providers may process data outside your country, including in the United States. Where the law requires it, we rely on appropriate safeguards for these transfers, such as the standard contractual clauses approved by the European Commission.

8. How long we keep your data

We keep your account data and trading data while your account is active.

You can ask us to delete your account by emailing support@rabbitquant.io. We will delete your account, your connected trading account and the related data within 30 days of your request. Trading accounts you remove in the app are deleted within 30 days, as described in section 4.

Copies may remain in backups for a limited period until they are overwritten, and we may keep some information for longer when the law requires it or to resolve disputes.

9. Security

We use reasonable technical and organizational measures to protect your data. Passwords are stored hashed and investor passwords are stored encrypted. No service can guarantee absolute security, so please use a strong, unique password for RabbitQuant and never send passwords to us by email.

10. Your rights

Depending on where you live, and in particular if you are in the European Union, the European Economic Area or the United Kingdom, you have the right to:

• access the personal data we hold about you;
• correct inaccurate or incomplete data;
• have your data deleted;
• restrict how we process your data;
• receive your data in a structured, commonly used format and transfer it to another service;
• object to processing based on our legitimate interests;
• withdraw your consent at any time, without affecting earlier processing;
• lodge a complaint with your local data protection authority.

To exercise any of these rights, email support@rabbitquant.io. We may need to confirm your identity first, and we will reply within the period the law requires, normally one month.

11. Children

The Service is only for people aged 18 or over. We do not knowingly collect data from children. If you believe a child has given us personal data, contact us and we will delete it.

12. Changes to this policy

We may update this policy from time to time. We will update the date at the top of this page and, for material changes, notify you by email or in the product before they take effect.

13. Language

This policy is available in English and Spanish. If the versions differ, the English version prevails to the extent permitted by applicable law.

14. Contact

For privacy questions or requests, email support@rabbitquant.io.