NoxarQuant Privacy Policy

Last updated: 25 May 2026

This policy explains what personal data NoxarQuant ("NoxarQuant", "we", "us") collects when you use noxarquant.com and the NoxarQuant application, why we collect it, who we share it with, how long we keep it, and the rights you have over it. It is written to meet the UK GDPR and the Data (Use and Access) Act 2025.

We take a data-minimisation approach: we collect what is needed to run the product and nothing we do not need. We do not sell your data. Where we use your trades to produce aggregate "cohort" insight, that data is anonymised so it cannot identify you.

1. Who is responsible for your data

NoxarQuant is the data controller for the personal data described here. You can reach us about any privacy matter, or to exercise your rights, at info@noxarquant.com.

2. The data we collect

• Account data. Your email address and an encrypted password, handled by our authentication provider. We never see or store your password in plain text.
• Profile data. The full name and username you set during onboarding, and, if you tell us, how you found us, your approximate monthly trade volume, and what you intend to use NoxarQuant for.
• Trade data you upload or log. The trade records you import or enter: symbols, direction, entry and exit prices, quantity, timestamps, profit and loss, fees, strategy tags, and any notes you add. This is your historical trading record and can be personal data.
• Derived analytics. The classifications, regime clusters, and proprietary scores (such as SWI and PRM) we compute from your trades.
• Payment data. If you subscribe, payment is processed by our payment provider (Stripe). We do not receive or store your full card details; we store your plan, subscription status, and billing identifiers needed to manage your subscription.
• Usage and technical data. IP address, browser and device information, pages viewed, and actions taken in the app, captured through cookies and product-analytics tooling, plus security and audit logs (for example, sign-in events).
• Communications. Messages you send us by email or in-app, and your email engagement (for example, whether onboarding emails were opened), so we can support you and improve those messages.

We do not knowingly collect special-category data, and we ask that you do not put sensitive personal information in free-text fields such as trade notes.

3. Why we use your data, and our legal bases

• To provide the service (enriching, classifying, and scoring your trades; running simulations; showing your dashboards). Legal basis: performance of our contract with you.
• To manage your account and billing. Legal basis: performance of contract and our legal obligations.
• To keep the service secure and prevent abuse and fraud (audit logs, rate limiting, error monitoring). Legal basis: our legitimate interests in protecting the service and our users.
• To understand and improve the product through aggregated, de-identified usage analytics. Legal basis: our legitimate interests, or your consent where required for non-essential cookies.
• To communicate with you about your account, and, where you have opted in, occasional product or methodology updates. Legal basis: legitimate interests for service messages, and consent for marketing. You can unsubscribe from non-essential email at any time.
• To meet legal and regulatory obligations. Legal basis: compliance with a legal obligation.

4. Aggregated and anonymised data

Some product features (for example, "cohort" or "regime" intelligence) draw on patterns across many users. Before any of your trade data contributes to those features it is aggregated and stripped of identifiers, so the output describes the cohort and cannot be traced back to you or your individual trades. Aggregated, anonymised data is no longer personal data and may be used to operate and improve the product.

5. Who we share data with

We do not sell, rent, or trade your personal data. We share it only with service providers (processors) who help us run NoxarQuant, under contracts that require them to protect it and use it only on our instructions:

• Hosting and database: our cloud database/authentication provider and our application hosting provider store and serve your data.
• Payments: our payment processor handles subscriptions and card processing.
• Email: our transactional email provider delivers account and onboarding email.
• Background processing: our job-orchestration provider runs enrichment and scoring tasks.
• Analytics and error monitoring: providers that help us measure product usage and diagnose errors.
• Market-data providers: to enrich your trades we request public market data (price candles) for the symbols you traded. We send the symbol and time window, not your identity or your individual positions.

We may also disclose data if required by law, to enforce our terms, or to protect the rights, safety, or property of NoxarQuant or others. If we are ever involved in a merger or acquisition, data may transfer to the successor under this policy.

6. International transfers

Some of our providers operate outside the UK. Where your data is transferred internationally, we rely on an adequacy decision or appropriate safeguards such as the UK International Data Transfer Agreement or Standard Contractual Clauses, so your data keeps an equivalent level of protection.

7. How long we keep it

We keep your account and trade data for as long as your account is active. If you delete your account, we delete or anonymise your personal data within a short period, except where we must retain certain records (for example, billing and tax records) for a legally required period, or keep limited data to resolve disputes or enforce our agreements. Backups are purged on a regular cycle.

8. How we protect your data

Data is encrypted in transit and at rest. Access to your records is restricted at the database level so one account cannot read another's data, and internal access follows a least-privilege principle. No system is perfectly secure, but we work to protect your information and to notify you and the regulator of a qualifying breach as required by law.

9. Your rights

Under UK data protection law you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data erased (the "right to be forgotten");
• restrict or object to certain processing;
• receive your data in a portable format;
• withdraw consent at any time, without affecting prior processing.

You can export your data from Settings → Export My Data and delete your account and associated data from Settings → Delete Account at any time. To exercise any other right, email info@noxarquant.com. We respond within one month. If you believe we have mishandled your data you can complain to the UK Information Commissioner's Office (ico.org.uk), though we would appreciate the chance to put things right first.

10. Cookies

We use essential cookies to keep you signed in and to operate the app, and, where you allow them, analytics cookies that help us understand how the product is used. You can control non-essential cookies through your browser settings.

11. Children

NoxarQuant is not intended for anyone under 18, and we do not knowingly collect data from children. If you believe a minor has provided us data, contact us and we will delete it.

12. Changes to this policy

We may update this policy as the product or the law changes. We will update the date above and, for material changes, notify you in-app or by email.