Quantsion · Legal
Privacy Policy
1. Scope and data controller
This policy explains how personal data is processed when you use quantsion.com and Quantsion Terminal (the “Service”). The data controller is the operator of the Service, Quantsion Software LLC (30 N Gould St Ste N, Sheridan, WY 82801, USA), referred to in this policy as the “Provider” or “we”.
This policy applies to users in every country where the Service is offered. Where the data protection law of your country of residence grants you further rights, those rights apply in addition. Send privacy and personal data requests to info@quantsion.com with the subject “Privacy”.
2. Data we process and its sources
Account and contact information. We process the email address, mobile phone number and country you provide during registration or account management, along with your account ID, status and registration dates. Your password is used during verification; the account database stores a secure verification hash rather than a plain-text password. Requests to change an email address or phone number may be processed separately from existing details until the change is completed.
Verification and account security information. We process email and phone verification status, code validity and attempt information, password recovery actions, security notifications and delivery results. For account email delivery, the address and necessary message content are sent to the email service provider; for SMS verification, the phone number and verification request are sent to the verification service provider.
Session and technical records. We process session creation, last-use, expiry and revocation details; IP addresses; technical information identifying browser and device type; and request, error and abuse-prevention records. Network and hosting services used to access the site also process technical data to serve and protect requests.
Visit counts. When a public page is displayed, the browser sends the page address, the website that referred you and the campaign label contained in the link you followed (utm parameters). We add the country determined from the connection and whether the device is a phone or a desktop computer, and keep only the number of views per day for each combination. No cookie, identifier or IP address is stored for this count, and it cannot be traced back to you.
Plan, order and payment information. We record your selected plan, order amount and status, the receiving address assigned to that order, any promotion applied, access start and end dates and access changes. Public blockchain data, including the transaction ID, sender and recipient blockchain addresses, asset, network, amount, time and confirmation status, is used to verify USDT payments. Once a payment record matches your order, it is associated with your account.
Document version and activity records. We record the version, language, date and IP information for the Terms of Use, Privacy Policy and Risk Disclosure presented when an account is created.
Support correspondence. We process messages, requests and relevant transaction information you provide to help resolve an issue. Do not send unnecessary identity documents or financial account statements. Support does not ask for your password, verification code, wallet private key or recovery phrase.
Data is obtained electronically from you, your browser’s connection to the Service, verification and infrastructure providers’ transaction results, and public blockchain records used to verify payments. The Service does not connect to your exchange account and does not collect your positions or trading history.
3. Purposes and legal bases
We process personal data to manage your account, deliver the purchased Service, maintain security, respond to support requests and meet legal obligations. The table below links these purposes to the relevant data and processing bases. The application of legal bases and related rights is assessed under the law applicable to the relevant processing activity.
| Processing and purpose | Relevant data | Legal basis |
|---|---|---|
| Creating an account at your request, verifying contact channels, signing in and managing the account | Account, contact and verification information | Entering into a contract at your request and performing the service agreement |
| Creating an order, matching payment and providing purchased access | Plan, order, blockchain payment and access records | Completing the purchase and performing the service agreement |
| Preventing attacks against accounts, unauthorised access and abuse | IP, session and technical records and verification attempts | Legitimate interests in protecting the Service, accounts and users, balanced against your rights and freedoms |
| Counting visits to the public pages to see how the Service is reached and which campaigns bring visitors | Page address, referring site, campaign label, country and device type, as daily totals | Legitimate interests in measuring and improving the Service, using totals that do not identify anyone |
| Resolving support requests and examining disputes about contract performance | Relevant support, payment, access and document version records | Performing the service agreement; legitimate interests in establishing, exercising or defending legal claims |
| Meeting applicable accounting and tax obligations and lawful requests from competent authorities | Payment, account and related activity records required by the obligation | Compliance with legal obligations to which the Provider is subject |
Mandatory account verification, password recovery and account security notifications are part of delivering the Service. Email addresses and phone numbers provided for these purposes are not used for marketing. We do not sell personal data and do not share it for advertising.
If an optional activity requiring explicit consent is introduced in the future, that activity and its purpose will be explained separately and your choice obtained at that time.
4. Required information and automated processes
Email and mobile phone verification are mandatory parts of registration. An account cannot be created if the information is not provided or verification is not completed. Country information is used to apply the Service’s eligibility conditions. Payment and access information is necessary to verify and provide a paid plan.
The system automatically checks verification codes, session validity, payment matches and access expiry. You may request a review if a result is incorrect. Market measurements do not assess your personal financial circumstances or suitability as an investor.
5. Cookies and browser storage
First-party cookies support account functions, while browser storage retains certain preferences. No cookie or stored preference is used for advertising or for tracking you across other sites.
| Record | Purpose | Duration in the browser |
|---|---|---|
| Session cookie | Recognises the signed-in account | Up to 30 days; ends earlier on sign-out or for security reasons |
| Registration cookie | Links the steps of an account registration to the same application | Up to 30 minutes |
| Password recovery cookie | Links the steps of a password recovery to the same request | Up to 30 minutes |
| Re-verification cookie | Remembers the additional identity check completed before an email or phone change | Up to 10 minutes |
| Language preference | Remembers the language you selected | Until you change the preference or clear browser data |
| Sign-in indicator | Shows the account link in the page header | Removed on sign-out or when browser data is cleared; does not itself grant account access |
| Selected plan | Carries the plan you selected through the purchase flow | For the current browser session or until the selection is cleared |
| Home page motion preference | Remembers whether you paused the home page animation | For the current browser session |
Browser session restoration features may restore some session-storage preferences. Server-side account and activity records are kept independently of these cookies and are governed by section 8.
Blocking essential cookies may prevent registration, sign-in or password recovery from working. We do not use advertising cookies or third-party visitor analytics scripts. Hosting-provider access and security logs are separate from these.
6. Parties receiving data
Personal data is shared with the following categories of recipients to the extent necessary to deliver the Service and fulfil the purposes described below:
- Hosting, cloud infrastructure and security service providers: Account, application and technical records necessary to operate the site and application, host the database and prevent unauthorised access.
- Email and support communications service providers: Email addresses, message contents, attachments and delivery records necessary to send account notifications and receive, store and manage support correspondence.
- Phone verification service providers: Phone numbers, language preferences and verification details necessary for account security and phone verification.
- Blockchain data and payment verification service providers: Transaction IDs, wallet addresses and related public transaction data queried to verify USDT transfers. Account passwords, phone numbers and email addresses are not shared for these queries.
- Competent authorities and recipients in legal proceedings: Records necessary to comply with a legal obligation or establish, exercise or defend a legal claim may be shared with the relevant authorities, courts and authorised representatives to the extent required.
Access within the Provider is limited to people authorised to operate and secure the Service and resolve support requests. Recipients’ access to data is limited to the scope required for their role. You can use the contact channel in section 10 to request information about the recipients of your data.
A transaction submitted to a public blockchain is visible to third parties through wallet addresses and transaction IDs. The Provider cannot delete or change the blockchain’s public history; the records in its own systems that link transactions to accounts are subject to the rights in section 10.
7. International processing
The Service uses international infrastructure and communications providers, so data may be processed outside your country, including in the United States, where the Provider is established. A provider’s headquarters location does not mean that all your data is stored exclusively in that country.
Where the data protection law applicable to you requires safeguards for such transfers, the Provider relies on the transfer mechanism recognised under that law for the relevant provider. You can request information about the transfer arrangements applied to your data through the contact channel in section 10.
8. Retention and deletion
Account, payment, security and support records serve different purposes and are kept for different periods:
- Incomplete registration applications, unless linked to an order or access record, are kept for 30 days so that we can help you complete your registration, and are then deleted.
- Verification codes expire within minutes; attempt records are kept for security review.
- Sessions expire after 30 days at the latest and can be revoked earlier.
- Active account information is kept for the duration of the account relationship.
- Payment and access records are kept to document purchases and for as long as applicable accounting and tax obligations require.
- Security and support records are kept for as long as necessary to investigate incidents and to establish, exercise or defend legal claims.
Account closure disables the account and invalidates its sessions. The records are then kept for the periods above and can be deleted at your request under section 10, except where a legal obligation or a specific dispute requires their retention.
For a deletion request, records that are no longer necessary are assessed separately from those that must be retained because of a legal obligation or a specific dispute. If the request cannot be fulfilled in whole or in part, the reason will be explained.
9. Security
The Service uses technical measures such as connection security, password hashing, session revocation, verification attempt limits and authorised access controls. These measures aim to protect data and account security; no internet service can offer an absolute security guarantee.
Report security concerns to the support address. Do not share unnecessary sensitive information during an investigation. Data breach notifications required by applicable law will be made according to the relevant conditions and deadlines.
10. Your rights and requests
Under the data protection law applicable to you, you have the right to learn whether your data is processed, to access your data and information about its processing, to have inaccurate or incomplete information corrected, to request deletion or restriction of processing where the conditions are met, to object to processing based on legitimate interests, and to receive a copy of your data in a portable format where the relevant requirements are satisfied. If you reside in the European Economic Area or the United Kingdom, these rights apply as set out in the GDPR and the UK GDPR.
You also have the right to obtain information about the recipients of your data, to request that corrections or deletions be notified to them, and to seek review of decisions based solely on automated processing that have legal or similarly significant effects on you. You may withdraw consent to consent-based processing at any time through the contact channel below; lawful processing before withdrawal is unaffected.
Send requests to info@quantsion.com, preferably from the email address registered to your account. Explain your request and identify the relevant account. Additional information proportionate to verifying your identity may be requested to avoid disclosing another person’s data. Passwords, one-time codes and wallet keys are never requested.
Requests are answered within the time limits set by applicable law and, in any case, as soon as reasonably possible. If a request cannot be fulfilled in whole or in part, the reason will be explained. You may lodge a complaint with the data protection authority of your country of residence and pursue other legal remedies.
11. Children
The Service is for people aged 18 or over. If you believe that a child’s data has been collected contrary to this policy, notify us so that we can investigate and delete the data.
12. Changes to this policy
When processing purposes, data recipients or other material conditions change, this policy is updated, the new version is dated and any required notice is provided. If a new processing activity requires separate consent, that consent is obtained separately.