1. Information We Collect
When you use QUANTRA Terminal, we collect the following categories of information:
- Account Data: Username, display name, hashed password. Email address is optional.
- Usage Data: Pages visited, features used, session duration, browser type, and IP address for security purposes.
- Paper Trade Records: Simulated trade entries, exits, and strategy notes you record within the platform.
- Preferences: UI settings, watchlist configurations, and display preferences you save.
2. Data We Do Not Collect
QUANTRA Terminal does not collect: real trading account data, bank account details, Demat account information, PAN numbers, Aadhaar numbers, financial statements, or any other sensitive financial or identity documents. We do not store your broker credentials on our servers.
3. How We Use Your Information
We use the information we collect for the following purposes:
- Provide and operate the QUANTRA Terminal service
- Authenticate your identity and maintain session security
- Improve platform features based on aggregate usage patterns
- Detect and prevent fraudulent or abusive activity
- Communicate important updates or security notices (if email provided)
We do not use your data for advertising, profiling, or sale to third parties.
4. Data Storage & Infrastructure
Your data is stored in a SQLite database on secured cloud infrastructure hosted on Google Cloud Platform (GCP) in the India region. We implement industry-standard security measures including:
- Encrypted storage volumes and secure access controls
- Regular security audits and access logging
- Restricted access to production infrastructure
Data is processed and stored within India in compliance with applicable data localisation requirements.
5. Cookies & Sessions
QUANTRA Terminal uses session cookies for authentication only. These are strictly necessary cookies that:
- Maintain your login state during an active session
- Include CSRF protection tokens to prevent cross-site request forgery
- Expire when you log out or after an inactivity timeout
We do not use third-party tracking cookies, advertising cookies, analytics services (e.g. Google Analytics), or any cross-site tracking technologies.
6. Market Data & Broker Credentials
When you connect a broker account (e.g. Upstox) to QUANTRA Terminal, market data is fetched live using your own API credentials and is not stored permanently on our servers. Specifically:
- Real-time price feeds are streamed directly and not persisted in our database
- Broker API tokens are stored temporarily in your session and cleared on logout
- We do not transmit your broker credentials to any third party
7. Data Sharing
We do not sell, rent, or share your personal data with any third party for commercial purposes. We may disclose information only when legally required (e.g., in response to a valid court order or government request under applicable law).
8. Security Measures
We take reasonable technical and organisational measures to protect your data, including:
- bcrypt password hashing — passwords are never stored in plain text
- CSRF token protection on all state-changing requests
- Rate limiting on authentication and API endpoints to prevent brute-force attacks
- HTTPS enforcement for all communications
- Server-side input validation and sanitisation
While we implement robust security measures, no system can guarantee absolute security. You should use a strong, unique password for your QUANTRA account.
9. Data Retention
Account data and associated records are retained for as long as your account remains active. If you request account deletion:
- Your account and all personal data will be permanently deleted within 30 days
- Paper trade records associated with your account will be removed
- Anonymised, aggregate usage statistics may be retained for platform improvement
10. Your Rights
You have the following rights with respect to your personal data:
- Access: Request a copy of the personal data we hold about you
- Correction: Request correction of inaccurate or incomplete data
- Deletion: Request permanent deletion of your account and associated data
- Portability: Request your paper trade records in a machine-readable format
To exercise any of these rights, contact us at support@quantraterminal.com.
11. Children's Privacy
QUANTRA Terminal is not directed at persons under 18 years of age. We do not knowingly collect personal information from minors. If you believe a person under 18 has provided us with personal information, please contact us immediately so we can delete it.
12. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last Updated" date at the top and notify registered users where possible. Your continued use of the platform after changes constitutes acceptance of the updated policy.
13. Contact
For privacy-related questions, data access requests, or to report a concern, please contact us at: