This policy explains what personal data NoxarQuant ("NoxarQuant", "we", "us") collects when you use noxarquant.com and the NoxarQuant application, why we collect it, who we share it with, how long we keep it, and the rights you have over it. It is written to meet the UK GDPR and the Data (Use and Access) Act 2025.
We take a data-minimisation approach: we collect what is needed to run the product and nothing we do not need. We do not sell your data. Where we use your trades to produce aggregate "cohort" insight, that data is anonymised so it cannot identify you, and you can switch it off (section 4).
1. Who is responsible for your data
NoxarQuant is the data controller for the personal data described here. You can reach us about any privacy matter, or to exercise your rights, at info@noxarquant.com.
2. The data we collect
Account data. Your email address and an encrypted password, handled by our authentication provider. We never see or store your password in plain text.
Profile data. The full name and username you set during onboarding, and, if you tell us, how you found us, your approximate monthly trade volume, and what you intend to use NoxarQuant for.
Trade data you upload or log. The trade records you import or enter: symbols, direction, entry and exit prices, quantity, timestamps, profit and loss, fees, strategy tags, and any notes you add. This is your historical trading record and can be personal data.
Derived analytics. The classifications, regime clusters, and proprietary scores (such as SWI and PRM) we compute from your trades.
Payment data. If you subscribe, payment is processed by our payment provider (Stripe). We do not receive or store your full card details; we store your plan, subscription status, and billing identifiers needed to manage your subscription.
Usage and technical data. IP address, browser and device information, and actions taken in the app, plus security and audit logs (for example, sign-in events). The pages you view are recorded by product analytics only if you choose Accept in the cookie banner (section 10).
Referral and campaign data. If a referral, invitation or campaign link brought you to us, the referral code or campaign code and the campaign tags on the link (such as utm_source), recorded with your account when you sign up.
Communications. Messages you send us by email or in-app, and your email engagement (for example, whether onboarding emails were opened), so we can support you and improve those messages.
We do not knowingly collect special-category data, and we ask that you do not put sensitive personal information in free-text fields such as trade notes.
3. Why we use your data, and our legal bases
To provide the service (enriching, classifying, and scoring your trades; running simulations; showing your dashboards). Legal basis: performance of our contract with you.
To manage your account and billing. Legal basis: performance of contract and our legal obligations.
To keep the service secure and prevent abuse and fraud (audit logs, rate limiting, error monitoring). Legal basis: our legitimate interests in protecting the service and our users.
To understand and improve the product through product analytics: the pages you visit and how you reach them, linked to your account and email address when you are signed in (section 10 lists exactly what is recorded). This runs only if you choose Accept in the cookie banner. Legal basis: your consent, which you can withdraw at any time from Cookie settings.
To credit referrals and campaigns: recording which referrer or campaign brought you, so a referrer can be credited or paid as set out in their referral or affiliate terms and we can see which campaigns bring sign-ups. Legal basis: our legitimate interests. The cookies that remember a code between visits are set only with your consent (section 10).
To communicate with you about your account, and, where you have opted in, occasional product or methodology updates. Legal basis: legitimate interests for service messages, and consent for marketing. You can unsubscribe from non-essential email at any time.
To meet legal and regulatory obligations. Legal basis: compliance with a legal obligation.
4. Aggregated data, and what other members see
Some product features (for example, "cohort" or "regime" intelligence) draw on patterns across many users. Before any of your trade data contributes to those features it is aggregated and stripped of identifiers, so the output describes the cohort and cannot be traced back to you or your individual trades. A pattern is shown only when at least five different traders share it. You can stop your data contributing at any time on your data sharing page (noxarquant.com/data-sharing): it takes effect straight away and changes nothing about your own analysis.
We do not use your individual trades to train, tune or test anything used for another account, and we do not sell them or build datasets from them for anyone else.
The Quant Room on the Elite plan has a chat and a leaderboard. If you post in the chat, other Elite members see your message, the name you post under (your username, or Anonymous if you choose), and, unless you post anonymously or have switched off cohort use, your PRM badge. Messages are kept until you delete them or your account. The leaderboard lists only traders who have switched it on in their settings, and it is off unless you choose it. If you do, it shows your username, PRM, tier and trade count to other Elite members.
5. Who we share data with
We do not sell, rent, or trade your personal data. We share it only with service providers (processors) who help us run NoxarQuant, under contracts that require them to protect it and use it only on our instructions:
Hosting and database: our cloud database/authentication provider and our application hosting provider store and serve your data.
Payments: our payment processor handles subscriptions and card processing.
Email: our transactional email provider delivers account and onboarding email.
Background processing: our job-orchestration provider runs enrichment and scoring tasks.
Analytics and error monitoring: providers that help us measure product usage and diagnose errors.
Market-data providers: to enrich your trades we request public market data (price candles) for the symbols you traded. We send the symbol and time window, not your identity or your individual positions.
We may also disclose data if required by law, to enforce our terms, or to protect the rights, safety, or property of NoxarQuant or others. If we are ever involved in a merger or acquisition, data may transfer to the successor under this policy.
6. International transfers
Some of our providers operate outside the UK. Where your data is transferred internationally, we rely on an adequacy decision or appropriate safeguards such as the UK International Data Transfer Agreement or Standard Contractual Clauses, so your data keeps an equivalent level of protection.
7. How long we keep it
We keep your account and trade data for as long as your account is active. If you delete your account, we delete your personal data, including your trades and everything we computed from them, within a short period, except where we must retain certain records (for example, billing and tax records) for a legally required period, or keep limited data to resolve disputes or enforce our agreements. We do not keep an anonymised copy of your trades after you delete your account: what remains is a record that the deletion happened. Backups are purged on a regular cycle.
8. How we protect your data
Data is encrypted in transit and at rest. Access to your records is restricted at the database level so one account cannot read another's data, and internal access follows a least-privilege principle. No system is perfectly secure, but we work to protect your information and to notify you and the regulator of a qualifying breach as required by law.
9. Your rights
Under UK data protection law you have the right to:
access the personal data we hold about you;
have inaccurate data corrected;
have your data erased (the "right to be forgotten");
restrict or object to certain processing;
receive your data in a portable format;
withdraw consent at any time, without affecting prior processing.
You can export your data from Settings → Export My Data and delete your account and associated data from Settings → Delete Account at any time. If your plan or free trial has ended, your account page (noxarquant.com/account) still lets you delete your account and open the billing portal for your card and invoices. To exercise any other right, email info@noxarquant.com. We respond within one month. If you believe we have mishandled your data you can complain to the UK Information Commissioner's Office (ico.org.uk), though we would appreciate the chance to put things right first.
10. Cookies and similar technologies
Our cookie banner offers two choices: Essential only and Accept. Analytics, session replays and the referral and campaign cookies are off until you choose Accept, and choosing Essential only or closing the banner keeps them off. This is what each choice sets.
Set whichever you choose
Sign-in cookies. Set by Supabase, our authentication provider, when you sign in, to keep you signed in (named sb-…-auth-token). They are kept until you sign out.
App cookies. Small NoxarQuant cookies that make the app work, for example whether you have finished onboarding (NOXAR_ob), whether demo data is switched on (NOXAR_demo_mode), and an invitation you are claiming (NOXAR_invite_token).
Your cookie choice. Stored in your browser's local storage (noxar_cookie_consent) so we do not ask on every visit, and copied into a cookie (noxar_consent) so our server knows whether it may set the referral and campaign cookies. The cookie holds only your choice and lasts 180 days, renewed when you visit. If you clear your browser storage, we ask again.
App settings. Your browser's local storage also keeps display settings you change in the app, such as a collapsed panel or a notice you dismissed. These stay on your device.
Referral and campaign links, without cookies. If a referral, invitation or campaign link brought you here and you have not chosen Accept, nothing about it is stored on your device. The code and any campaign tags (such as utm_source) stay in the page address as you move around the site, and the sign-up form sends them with your sign-up, so a sign-up on that visit is credited to the right referrer or campaign.
Error reports. When something breaks, an error report goes to Sentry, our error monitoring provider: what failed, the page, your browser and device, and the steps just before it (clicks, page changes, network requests and console messages), with the labels of what you clicked hidden. Sentry also receives page load timings for a sample of visits. It sets no cookies. We need it to keep the service working.
Set only if you choose Accept
Product analytics (PostHog). Records the pages you visit, the page or site that sent you there, how long you stay on each and how far you scroll, with your browser, device and approximate location (worked out from your IP address), and links them to your account and email address when you are signed in. PostHog stores an identifier in a cookie and in local storage (named ph_…_posthog) for up to a year, a record in local storage that you accepted (named __ph_opt_in_out_…), and a few session entries starting ph_. Data is held in the EU.
Page view counts (Vercel Web Analytics). Counts visits and pages viewed, with the page or site that sent you, your country, and your browser, operating system and device type. It sets no cookies.
Session replays (Sentry). Keeps a rolling recording of the last minute of the page layout, clicks, page changes, network requests and console messages. If an error happens, that minute and the rest of the visit are sent to Sentry; otherwise the recording is discarded. All text, anything you type, images and charts are hidden in the recording. It uses one session storage entry (sentryReplaySession) that is deleted when you close the tab.
Referral and campaign cookies. If a referral, invitation or campaign link brought you here, cookies that keep its code or campaign tags so a sign-up on a later visit is still credited: NOXAR_referral (the referral code), NOXAR_ref (the referrer's account id) and NOXAR_campaign_code (an invitation code) for 30 days, and noxar_utm_source and similar (the campaign tags) for 90 days.
You can change your choice at any time, from Cookie settings at the foot of our pages and in the app, or with the button below. If you switch from Accept to Essential only, analytics and session replays stop on the page you are on, and PostHog's cookie and storage and the referral and campaign cookies are deleted.
We do not use cookies for third-party advertising, and we do not sell your data.
11. Children
NoxarQuant is not intended for anyone under 18, and we do not knowingly collect data from children. If you believe a minor has provided us data, contact us and we will delete it.
12. Changes to this policy
We may update this policy as the product or the law changes. We will update the date above and, for material changes, notify you in-app or by email.