Privacy Policy

Effective Date: June 28, 2026 · QNTM LLC (California)

What We Collect

You give us: - Email address and password (passwords are bcrypt-hashed — we cannot see them) - Optional full name - Payment method (processed and stored by Stripe — we never see your card number) - Your watchlist, portfolio, and simulator data - If you subscribe to the QNTM Market Outlook newsletter (no account required): the email address you provide and your choice of briefs

We collect automatically: - Login times and session data - IP address (for security only — not tracked across sites, not sold) - Anonymous, aggregated feature usage (used to improve the product)

What We Don't Do

• We don't sell your data
• We don't use your data for advertising
• We don't share your data except as described below
• We don't track you across other websites
• We never share, sell, or rent your mobile phone number or SMS opt-in/consent data to third parties or affiliates for marketing or promotional purposes

Who We Share Data With

Market data is sourced from public providers (Yahoo Finance, FRED) and is not personal data.

We will share data with law enforcement if legally required, and may disclose data to protect QNTM's rights or the safety of users.

Email Communications

We use your email address to send two kinds of messages:

• Account and security emails — for example, email verification, password resets, and billing notices. These are necessary to operate your account, so you can't opt out of them while your account is active.
• Optional signal alerts — for example, an email when a stock on your watchlist or in your portfolio moves to LOW conviction. These are off by default and entirely optional. You can turn them on or off anytime in Account → Notifications, and every alert email includes an unsubscribe reminder and our mailing address.

We send email through SendGrid (Twilio). We don't use your email address for advertising, and we don't sell it.

Market Outlook Emails

We offer a free email newsletter — the QNTM Market Outlook, Day Wrap, and Week Wrap — that anyone can subscribe to, including people who do not have a QNTM account.

• What we collect. When you subscribe, we collect the email address you provide and your choice of which briefs to receive. We do not require an account, name, or any other information to subscribe.
• Double opt-in. After you subscribe, we send a confirmation email; you only begin receiving briefs after you click the link to confirm. If you never confirm, we do not send you the newsletter.
• How you opt out. Every newsletter email includes a one-click unsubscribe link and our mailing address. Unsubscribing removes your email from the newsletter list.
• How we use it. We use your email address solely to send the briefs you requested. We do not sell newsletter email addresses, do not use them for advertising, and do not share them with third parties except our email delivery provider (SendGrid, a Twilio company) solely to deliver the emails.

Newsletter emails are separate from account and alert emails described above; unsubscribing from the newsletter does not affect account or security emails while you have an active account.

Text Message (SMS) Alerts

If you choose to receive alerts by text message, we collect the mobile phone number you provide. SMS alerts are entirely optional and are off by default.

• How you opt in. In Account → Notifications you enter your own mobile number and verify it with a one-time code we text you. You then turn on the SMS alert channel. We only text you about the specific price, valuation, or conviction alerts you create yourself — never marketing.
• How you opt out. Reply STOP to any alert text to unsubscribe, or turn the SMS channel off in Account → Notifications at any time. Reply HELP for help. Message and data rates may apply, and message frequency varies depending on the alerts you set.
• Who delivers them. We send texts through Twilio. Your mobile number is shared only with Twilio, our messaging provider, solely to deliver the alerts you request.

Mobile phone numbers and SMS opt-in/consent data are never shared with, sold, or rented to any third parties or affiliates for marketing or promotional purposes. This information is used only to send you the alerts you have requested.

Security

• Passwords: bcrypt-hashed (cost factor 12)
• Sensitive personal fields (email, name): encrypted at rest with authenticated symmetric encryption (Fernet — AES-128-CBC with HMAC-SHA256)
• Email-hash lookup so we can find your account without decrypting your email
• Login events are logged for security review
• HTTPS for all traffic

How Long We Keep Your Data

• Active accounts: kept while your account exists
• Deleted accounts: personal data is removed within 30 days. Founding Member status is forfeited at deletion and cannot be restored — see Terms §6.
• Payment records: kept 7 years as required by tax and financial-record law
• Anonymous, aggregated usage statistics: kept indefinitely

Your Rights

Email privacy@qntm.live to: - See what data we hold about you - Correct inaccurate data - Delete your account and personal data - Export your data in machine-readable form

We will respond within 30 days.

California residents have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to delete it, and the right to non-discrimination for exercising these rights. We do not sell personal information as defined by CCPA.

Children

QNTM is not directed to anyone under 18. We do not knowingly collect data from anyone under 18. If you believe a child has provided us data, contact privacy@qntm.live and we will delete it.

Contact

privacy@qntm.live