Privacy Policy

Last updated: October 11, 2026

At Quantito ("Quantito," "we," "us," or "our"), accessible from quantito.app, protecting your personal information and trading data is a core priority. This Privacy Policy outlines the types of information we collect, how we process and protect it, and your rights regarding your data.

1. Information we collect

A. Sign-in and account information

Quantito uses third-party sign-in providers (Google, Microsoft and GitHub) to manage access.

• Account identifiers: when you sign in, we receive your name, email address (if the provider shares it) and a unique provider user ID.
• Contact email: if your sign-in provider does not share an email address (GitHub accounts can keep it private), we ask you for one to finish setting up your account. You can change it in Settings. We do not verify it, and we do not use it to sign you in or link accounts.
• No passwords stored: we never receive, request or store your passwords. Authentication is handled by your chosen provider.

B. Your journal and trading data

To provide trade analytics and process tracking, we store the data you enter, upload or import:

• Trade details: executions, trades, performance notes, tags and attached strategy screenshots.
• Broker data: broker account numbers in imported files or integrations are reduced to the last 4 digits only.
• Storage location: journal data is stored on Microsoft Azure in the East US 2 region.

C. Pro waitlist information

If you join the waitlist for upcoming Pro features:

• We store your email address and any questionnaire responses you give.
• For spam prevention and security, we store a salted hash of your IP address. We never log or store your raw IP address.

2. How we use AI (Azure OpenAI)

Quantito includes an AI Coach that reviews your trading process.

• Data sent: when you request an AI review, aggregated performance statistics and relevant journal metrics are sent to Azure OpenAI, hosted in our Azure subscription.
• No model training: your journal data and AI prompts are never used to train, retrain or improve public or commercial AI models. Your data stays within our Azure environment.

3. Cookies and tracking

• Essential cookies only: we use essential session cookies to manage your sign-in and keep your account secure.
• No advertising or analytics tracking: we do not use advertising cookies, marketing pixels or cross-site tracking scripts.

4. Data retention and deletion

• Account retention: we keep your account details and journal data for as long as your account is active.
• Export and deletion: you can export your journal, or delete your account and data, from the Settings page at any time.
• Backups: for disaster recovery, encrypted backups are kept and then permanently deleted on this schedule:
  • Daily backups: kept up to 30 days.
  • Monthly backups: kept up to 12 months.

5. Third-party service providers

We do not sell, trade or rent your personal information. We use established cloud vendors to host and support the service under strict security standards:

• Microsoft Azure: cloud infrastructure, database hosting (East US 2) and Azure OpenAI.
• Sign-in providers: Google, Microsoft and GitHub, for identity verification.

6. Contact us

For questions, concerns or data requests about this Privacy Policy, contact support@quantito.app.