Privacy and data-use policy

1. Data we collect

1.1 Data you share

When you open an account or use the Service, we may request or receive the following types of information:

• Identity information: your first name, last name and date of birth.
• Contact information: your email, telephone number and home address.
• Financial information: broker API credentials with read-only or execution permissions, investment choices and risk settings. We do not retain full broker passwords or complete payment-card numbers.
• Account profile: your username, strategy choices and alert preferences.
• Correspondence: messages sent through support channels or email.

1.2 Automatically gathered data

Using the Service also creates certain technical data automatically:

• IP address, browser name and version, and operating system.
• Viewed pages, used functions, time on site and clickstream behaviour.
• Device identifiers and mobile advertising IDs where relevant.
• Cookie and tracking information (see our Cookie Policy).

1.3 Data supplied by third parties

Information may come from identity-check providers, fraud-monitoring services and analytics partners. We may combine those records with data already held to improve reliability and security.

2. How information is used

We may use collected information to:

• Open, administer and support your account and deliver the Service.
• Transmit and carry out trading signals or automated orders through linked brokers.
• Tailor your experience and display relevant market content.
• Send service messages, including confirmations, trading updates and security alerts.
• Send marketing where you have consented or applicable law permits it.
• Identify, examine and deter fraud or other restricted conduct.
• Meet legal and regulatory responsibilities.
• Build, test and enhance Service functions using aggregated, anonymized information.

3. Legal grounds for EEA and UK residents

For people in the European Economic Area or United Kingdom, personal data is handled on these legal grounds:

• Contract performance: to deliver the Service you request when registering.
• Legitimate interests: including protecting security, detecting fraud and improving the product.
• Legal requirement: including responsibilities under financial rules and tax laws.
• Consent: for promotional messages and optional cookies, which you may revoke at any time.

4. Circumstances for disclosure

We do not sell personal information. We may share it with:

• Service providers: cloud-hosting, email, analytics and support providers bound by contractual privacy obligations.
• Linked brokers and exchanges: only the API directions needed to carry out the strategy you chose.
• Authorities or legal recipients: where required by law or court order, or where necessary to protect our rights.
• Corporate transactions: during a merger, acquisition or asset transfer, provided the successor continues to follow this policy.

5. Cross-border data transfers

Kwantum Ki operates in several markets. Your personal information may be handled or retained outside Canada, including the United States and the European Union. Appropriate contractual safeguards are applied to cross-border transfers where applicable.

6. Keeping information

We keep personal information while your account remains open or while needed to provide the Service. After closure, some records may remain for up to seven years to meet financial regulatory requirements. Aggregated, anonymized analytics may be retained without a fixed end date.

7. Your privacy choices

Subject to your location, you may have the right to:

• Ask for a copy of the personal information we maintain about you.
• Have incorrect or incomplete information corrected.
• Ask us to erase your information, subject to legal exceptions.
• Object to or limit particular processing activities.
• Receive your information in a structured, machine-readable format.
• Withdraw consent at any time, without changing processing already completed.

To make a privacy-rights request, email us at . We normally reply within 30 days.

8. Protecting information

We use generally recognized safeguards, including TLS 1.3 for data in transit, AES-256 encryption for stored data, multi-factor authentication, role-based permissions and yearly independent penetration testing. No system can eliminate every risk. Use a strong, unique password and turn on two-factor authentication.

9. Cookies and similar tools

Cookies and related technologies help operate and improve the Service. Further information is available in our Cookie Policy.

10. Privacy of children

The Service is intended for people aged 18 or older. We do not knowingly gather personal information from minors. If you think a minor has submitted data, tell us so we can remove it as soon as reasonably practicable.

11. Revisions to this policy

We may update this Privacy Policy from time to time. Significant changes will be announced on our website or by email. Continued use of the Service after the effective date indicates acceptance of the revised policy.

12. How to contact us

For privacy questions or requests about your rights, contact our Data Protection Officer:

• Email address:
• Postal address: Kwantum Ki Corporation, 100 King Street West, Toronto, ON M5X 1A9, Canada, United States
• EU representative: Kwantum Ki, 100 King Street West, Toronto, ON M5X 1A9, Canada