How ORCA Quant handles your data

Draft. The controller's legal name, address and contact will be added and this notice reviewed by counsel before public launch.

What we collect

Account: your name, email address, a salted password hash (never the password itself) and, if you use it, your Google account identifier. Sessions: sign-in time, expiry, IP address and browser user agent, used to keep you signed in and to detect abuse. Preferences: email settings, timezone and locale. Email delivery records: which service emails were sent and whether delivery succeeded (not their content). Membership: your plan and, once paid plans open, the payment provider's customer and subscription references. We never receive or store card details.

Why

To provide the account and the service you asked for (contract), to keep the service secure and prevent abuse (legitimate interests), to keep financial records (legal obligation) and, only if you opt in, to send product news (consent, withdrawable at any time).

How long

Expired sessions, including their IP address and user agent, are deleted within a day of expiry (sessions last up to 7 days). Per-IP rate-limit counters are deleted after a day. Email verification and password-reset links expire after one hour. Account data is kept until you delete your account. Billing records are kept for the period required by tax and accounting law, attached to an anonymous identifier once your account is deleted.

Who processes it

Cloudflare (hosting, database and network security) and Zoho ZeptoMail (service emails). When paid plans open, the payment provider will process payments as an independent controller. Some processing takes place outside the UK and EEA under the safeguards these providers offer (standard contractual clauses / UK addendum).

Your rights

You can download a copy of your data and delete your account at any time from Account. You may also ask us to correct your data, object to or restrict processing, and complain to the UK Information Commissioner's Office (ico.org.uk) or your local data protection authority.

Cookies

We use one strictly necessary, HttpOnly session cookie to keep you signed in. We do not use advertising or cross-site tracking cookies.

Age and availability

ORCA Quant is for adults aged 18 or over and is not offered in Turkey.