Privacy Policy
Effective date: February 11, 2026
Last updated: February 11, 2026
FerroQuant ("we", "us", "our") respects your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform at ferroquant.com and related services.
1. Information We Collect
1.1 Information You Provide
- Account data: Name, email address, and authentication credentials (managed by our native authentication system)
- Payment data: Billing information processed securely by Stripe. We do not store full card numbers
- Exchange credentials: API keys for connected exchanges, encrypted with AES-256-GCM at rest
- Communication: Messages sent through our support system
1.2 Information Collected Automatically
- Usage data: Pages visited, features used, backtests run, strategies created
- Device data: Browser type, operating system, screen resolution
- Log data: IP address, access times, referring URLs
- Cookies: Session cookies for authentication and preferences
1.3 Information We Do NOT Collect
- We do not read, access, or store your exchange account balances or positions beyond what you explicitly request through our platform
- We do not sell, rent, or share your personal information with third-party advertisers
2. How We Use Your Information
| Purpose | Legal Basis (GDPR) |
|---|---|
| Provide and operate the Service | Contract performance |
| Process payments and manage subscriptions | Contract performance |
| Send transactional emails (welcome, payment receipts, alerts) | Contract performance |
| Improve the Service based on usage patterns | Legitimate interest |
| Prevent fraud and abuse | Legitimate interest |
| Send marketing communications (only with consent) | Consent |
| Comply with legal obligations | Legal obligation |
3. Data Sharing
We share data only with:
- Stripe: Payment processing
- Google: OAuth authentication (optional sign-in with Google)
- Listmonk: Transactional and marketing emails (self-hosted)
- Cloudflare: CDN, DDoS protection, and DNS
We do not sell your data to third parties.
4. Data Security
- All data in transit is encrypted with TLS 1.3
- Exchange API keys are encrypted at rest with AES-256-GCM
- Database connections use SSL
- Sessions are secured with HttpOnly, Secure, SameSite cookies
- HMAC-SHA256 verification on all webhooks (Stripe, etc.)
- Content Security Policy (CSP) with per-request nonces
5. Data Retention
- Account data: Retained while your account is active, deleted within 30 days of account closure
- Usage data: Aggregated and anonymized after 90 days
- Payment records: Retained as required by tax and financial regulations (typically 7 years)
- Exchange credentials: Deleted immediately upon disconnection
6. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access: Request a copy of the personal data we hold about you
- Rectification: Correct inaccurate data
- Erasure: Request deletion of your data ("right to be forgotten")
- Portability: Receive your data in a machine-readable format
- Objection: Object to processing based on legitimate interest
- Withdraw consent: Opt out of marketing communications at any time
To exercise these rights, email [email protected] or visit our Data Deletion page.
7. Cookies
We use only essential cookies:
- Session cookie: Maintains your login session (HttpOnly, Secure)
- CSRF token: Protects against cross-site request forgery
- Preferences: Remembers your theme and layout settings
We do not use third-party tracking cookies or advertising cookies.
8. International Data Transfers
Your data may be processed in countries outside your own. We ensure appropriate safeguards are in place, including Standard Contractual Clauses where applicable.
9. Children's Privacy
FerroQuant is not intended for anyone under the age of 18. We do not knowingly collect personal information from children.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify users of material changes via email. The "Last updated" date at the top indicates the most recent revision.
11. Contact
Last updated: February 11, 2026