Privacy Policy

TechArt26 LLC ("StillQuant", "we"), 1309 Coffeen Ave, Sheridan, WY 82801, United States, operates stillquant.com, app.stillquant.com and the StillQuant connector. We are the controller for the personal data described here. You can reach us by email at info@stillquant.com or with our contact form: https://stillquant.com/en/contact.

We collect only what each feature needs:

• Sign-in (on app.stillquant.com): your mobile number, the time you signed in, and a hash of each one-time code (never the code itself). Purpose: to sign you in and keep your account yours. Legal basis: performance of the contract. To preselect your country code, we use the country our hosting provider derives from your IP address, or your browser's language; neither is stored. The same country decides whether prices show in US dollars, pounds, Swiss francs or euros.
• Sign-in codes by message: to send a code we pass your number, once per request, to Meta Platforms Ireland (WhatsApp Business Platform) or to Twilio (text messages). They act on our instructions. Codes are only sent after you enter your number and ask for one.
• Purchases: the plan you order, its price and tax, the time, the email address you give Stripe when you pay, what you agree to when you order (the early start and, for plans that renew, the automatic renewal) with its exact wording and time, and Stripe's identifiers for you and your payments. Stripe, Inc. (USA) processes the payment itself on its own secure page; we never see your full card number. Legal basis: performance of the contract and our legal duties (accounting, and keeping proof of what you agreed to).
• Cancellations and withdrawals: what you send with "Cancel contracts here" or "Withdraw from contract here" (your name, mobile number, email address, the contract, the type of cancellation and any reason you give) and when we received it. Purpose: to carry out your request and confirm it, as the law requires. Legal basis: performance of the contract and our legal duties.
• Emails about your contract: your email address and a copy of each email we send you – the order confirmation, reminders before a charge or an end date, receipts for cancellations and withdrawals, and requests to confirm a payment. Resend sends them for us. Legal basis: performance of the contract and our legal duties. These emails are about your contract only and contain no advertising.
• Claude connection: when you connect StillQuant to Claude we store which app connected, when, and a signed access token. Each request Claude makes on your behalf carries your member ID so results stay yours. Legal basis: performance of the contract.
• Dashboard choices: which onboarding steps you completed (for example, that you downloaded the skill). Legal basis: performance of the contract.
• Contact form: your name, email address and message, and when you sent it. Purpose: to answer you. Resend delivers your message to our inbox, and we keep it with the copies of our emails. Legal basis: our legitimate interest in answering the questions people send us, or the contract when you write about your plan.
• Early access sign-up: name, email address and the answers you give us. Legal basis: your consent, which you can withdraw at any time.
• Technical logs: IP address, browser type, requested pages and error messages, kept by our hosting provider for security and to keep the site running. Legal basis: our legitimate interest in a secure, working service. Rate limits store only a salted hash of your IP address.

We never sell your personal information. We never share your mobile number or SMS opt-in data with anyone for marketing purposes. Analytics and advertising cookies are used only if you allow them; see “Cookies, analytics and advertising” below.

What you type into Claude stays in your Claude account; Anthropic's privacy policy applies to the conversation. When Claude calls the StillQuant connector, we receive the request (for example, the rules of a strategy or the holdings you want analysed), compute the result and return it. We keep backtest jobs long enough to deliver the result and for troubleshooting, tied to your member ID.

In the members area you can tell us your goal, the markets you follow and how long you have been investing. Your answers choose the news topic your Today screen opens with and the order of the euro reference rates shown when live prices are off or can't load. You can also save ideas, so you can come back to them.

On the Claude tab you can choose a data-feed level and add-ons; we save these choices so we can switch the feeds on in your Claude once they are live. In Account you can set live prices on Today to Off; we save that setting, and while it is off, Today shows the euro reference rates and loads nothing from TradingView.

Legal basis: performance of the contract (Art. 6(1)(b) GDPR). All of this is stored in our database in the EU (Neon) until you change or delete it, or until your account is deleted. Answering is optional; you can skip the questions and change your answers any time in Account.

When you use the members area, our server records which app pages you open and which links and buttons you use there (for example, that you opened a news article or a prompt in Claude) and the choices you make there (news topic, data-feed level, live prices), with your member ID and the time. Nothing is recorded in your browser for this: no tracking cookies, no tracking scripts, no beacons. We use these records only to improve the product, and we share them with no one.

Legal basis: our legitimate interest in understanding which parts of the product help members (Art. 6(1)(f) GDPR). The records are deleted after 13 months. You can object at any time (Art. 21 GDPR) by switching off "Use my activity for product statistics" in Account; from then on nothing is recorded for you, and what was recorded before is deleted.

The euro reference rates in the members area (shown when live prices are off or can't load) are fetched by our servers from the European Central Bank, stored by us and shown to you from our own site. Your browser does not contact the ECB, and we send it no data about you.

The members area opens only after you sign in. There we show live prices, charts and symbol logos from TradingView, using TradingView's widgets, as part of the service. Your browser loads them straight from TradingView's servers, so TradingView Inc. (USA) receives your IP address, your browser details and the address of the page.

The charts and price lists on Today and on the market pages set no cookies and store nothing in your browser. They also send TradingView occasional usage statistics of their own (the page address, screen size and browser language). If you are signed in to tradingview.com in the same browser, your browser may send TradingView's own cookies along. TradingView's privacy policy applies to the data it receives: tradingview.com/privacy-policy.

TradingView isn't certified under the EU–US Data Privacy Framework. For these charts and price lists, the transfer to the US happens because it's needed to give you the live data you signed up for. Legal basis: performance of the contract (Art. 6(1)(b) GDPR); for the transfer, Art. 49(1)(b) GDPR. Our public pages load nothing from TradingView.

TradingView's heatmap (“Winners & losers”), its market tables (“Markets compared”), its company profiles and the Live tab's candlestick chart may set TradingView's own cookies, including for analytics and advertising. They load only after you allow “Embedded market widgets” in the cookie settings; until then a card stands in their place. Legal basis: your consent (Art. 6(1)(a) GDPR and § 25(1) TDDDG); for the transfer to the US, your explicit consent (Art. 49(1)(a) GDPR), knowing that the US doesn't offer the same level of data protection and that US authorities may be able to access the data. You can withdraw your consent at any time under “Cookie settings”; cookies TradingView has already set stay until you delete them in your browser.

The headlines in the members area come from finlight (finlight.me), a news service run by Bartsch und Büyükkakac GbR in Germany. Our server fetches them: it sends finlight only the search request, and no data about you.

Article images load in your browser straight from the publishers' servers or the image hosts they use, so they receive your IP address and your browser details (not the address of our page). These image hosts may set or read their own cookies; their own policies apply. A headline first opens a preview inside the members area; when you choose to continue reading, the article opens on the publisher's site, where the publisher's own privacy policy applies.

To suggest a question about a headline, our server may send Anthropic PBC (USA) the headline, the publisher's name, finlight's topic and country tags, and the names and tickers of the companies it mentions. It never sends the article or anything about you. When a headline arrives, our server also checks once whether its picture loads at the publisher; that request contains no data about you. When you tap “Ask Claude”, your browser opens claude.ai with the question, the headline, its publisher, date and link; Anthropic's privacy policy applies there, as described under “Ideas, backtests and portfolios”. We record only that you asked and whether you changed the question, never its text.

Some publishers are outside the EU, for example in the US. Legal basis, as for live markets: performance of the contract (Art. 6(1)(b) GDPR); for transfers outside the EU, Art. 49(1)(b) GDPR.

On our public pages – never in the members area – we use the following tools, each only if you allow its group in the cookie banner or the cookie settings:

• Analytics: Google Analytics 4 by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). It sets cookies that recognise your browser and records which pages you visit, how you got here, your device and browser, and an approximate location derived from your IP address. Purpose: to see how stillquant.com is used and improve it.
• Marketing: Google Ads conversion tracking by Google Ireland Limited, and the Meta Pixel by Meta Platforms Ireland Limited (Merrion Road, Dublin 4, Ireland). They set cookies that recognise your browser and tell Google and Meta when you visit our pages or sign up, so we can measure our ads and show StillQuant ads to people who visited us, on Google's and Meta's services. Google and Meta may combine this with what they already know about you, under their own policies.

For the data the Meta Pixel collects on our pages and passes to Meta, we and Meta Platforms Ireland Limited are joint controllers (Art. 26 GDPR); our agreement is Meta's Controller Addendum (facebook.com/legal/controller_addendum), and Meta is responsible for what it does with the data afterwards. You can exercise your rights against either of us.

Legal basis: your consent (Art. 6(1)(a) GDPR and § 25(1) TDDDG). You can withdraw it at any time under “Cookie settings”, at the bottom of every page; we then delete the cookies these tools set on our domain. Google LLC and Meta Platforms, Inc. (USA) may receive the data; both are certified under the EU–US Data Privacy Framework. Google's privacy policy: policies.google.com/privacy; Meta's: facebook.com/privacy/policy.

Separately, we use Vercel Web Analytics on the public pages: it counts page views without cookies and without storing anything in your browser, so it needs no consent. Legal basis: our legitimate interest in knowing which pages are read (Art. 6(1)(f) GDPR).

We work with providers who process data on our behalf under contracts that require them to protect it:

• Vercel Inc. (hosting and content delivery; our production functions run in Frankfurt, Germany)
• Neon Inc. (database, EU region)
• Meta Platforms Ireland Ltd (WhatsApp sign-in codes)
• Twilio Inc. (text-message sign-in codes)
• Stripe, Inc. (USA; payments)
• Resend, Inc. (USA; emails about your contract and messages from our contact form, sent from its EU region)
• Anthropic PBC (Claude, as the client that calls our connector on your request)

Vercel, Neon, Twilio, Stripe, Resend and Anthropic are based in the United States. Where data leaves the EU/EEA we rely on the EU Standard Contractual Clauses or the EU–US Data Privacy Framework.

TradingView and news publishers aren't our service providers. Their own sections above explain what they receive.

• One-time code hashes: deleted when used or after 10 minutes.
• Session cookies: 30 days, or until you sign out (signing out ends every session).
• Your cookie choice: in your browser for 6 months, then we ask again. A record of each choice (which groups, when, and the policy version – no IP address) for 3 years, so we can show what you allowed.
• Analytics and advertising cookies, if you allow them: Google Analytics up to 2 years, Google Ads and the Meta Pixel up to 90 days; the cookie policy lists each one.
• Claude connections: until you disconnect them on the Claude tab of the members area or your access ends; expired tokens are removed within days.
• Your answers, saved ideas, data-feed level and add-ons, and the live-prices setting: until you change or delete them, or your account is deleted.
• Product statistics: 13 months.
• Purchase records: 10 years, as required by tax and accounting law.
• The boxes you ticked when ordering, your cancellations and withdrawals, and copies of the emails about your contract: as long as the purchase records, so we can show what was agreed and confirmed.
• A cancellation or withdrawal sent with details that match no customer, and the emails about it: 12 months.
• Messages from the contact form: as long as we need them to answer you and to follow up, at most 3 years.
• Member accounts: for as long as you are a member and up to 3 years afterwards, unless the law requires longer or you ask us to delete earlier.
• Technical logs: up to 30 days.

Strictly necessary cookies keep StillQuant working: `sq_member` keeps you signed in (set only after you sign in, for stillquant.com and its subdomains, so the same sign-in works on stillquant.com and in the members area on app.stillquant.com), and `sq_consent` remembers your cookie choice. They need no consent (§ 25(2) TDDDG).

Everything else needs your consent first: embedded market widgets from TradingView, analytics (Google) and marketing (Google, Meta). On your first visit a banner lets you accept all, reject all – just as easily – or choose per group. Nothing optional loads before you choose, and you can change your choice at any time under “Cookie settings” at the bottom of every page or in Account. The cookie policy lists every cookie, who sets it and for how long.

You can ask us for access to your data, correction, deletion, restriction of processing, and a copy in a portable format, and you can object to processing based on our legitimate interests. Where processing relies on consent you can withdraw it at any time with effect for the future – for cookies, under “Cookie settings”.

Write to info@stillquant.com. We answer within one month. You also have the right to complain to a data protection supervisory authority.

You can stop messages at any time: reply STOP to a text message, or simply don't request a code. Signing out ends your sessions on every device.

StillQuant is for adults. We do not knowingly collect data from anyone under 18.

When this policy changes we update the date at the top. Material changes are announced on the site or by message before they take effect.