Privacy Policy – QuantFinco

QuantFinco (quantfinco.com) is operated by Manoj Dalui as a personal portfolio and quantitative finance research platform. This policy explains what personal data we collect, why we collect it, and your rights under GDPR (EU) and CCPA (California).

1. Data We Collect

Data	When Collected	Purpose
Name	Registration	Account identification
Email address	Registration / Contact form	Login, account approval, responding to enquiries
Password (hashed)	Registration	Authentication — never stored in plain text
Access reason	Registration	Manual approval decision
GDPR consent timestamp	Registration	Compliance record
IP address / browser logs	Every visit	Server security, GoDaddy hosting logs
Analytics data (if consented)	Site visits	Internal traffic analysis via Google Analytics 4

We do not collect payment data, health data, or any data from children under 16.

2. Legal Basis for Processing (GDPR)

Consent — Registration data and Google Analytics cookies (you may withdraw consent at any time).
Legitimate interest — Server access logs for security and fraud prevention.
Contract performance — Account data needed to provide dashboard access you requested.

3. Google Analytics

With your consent, we use Google Analytics 4 to understand how visitors navigate this site (pages viewed, session duration, country). This data is used for internal analysis only — to improve the site — and is never sold or shared.

IP addresses are anonymised (anonymize_ip: true).
GA is loaded only after you click Accept on the cookie banner.
You can change your choice at any time by clearing your browser's localStorage.
Google's own privacy policy applies to data processed by their servers: policies.google.com/privacy

4. Data Sharing & Third Parties

We do not sell, rent, or trade your personal data. Data is shared only with:

GoDaddy — hosting provider (India/US). Processes server logs and email delivery.
Google Analytics — only if you consent.

5. Data Retention

Account data — retained until you delete your account or request deletion.
Contact form messages — retained in email inbox; deleted on request.
Server logs — retained by GoDaddy per their policy (typically 30–90 days).
Analytics data — retained in Google Analytics for 14 months (GA4 default).

6. Your Rights (GDPR & CCPA)

Right to Access: Request a copy of all personal data we hold about you.

Right to Erasure: Request permanent deletion of your account and data ("right to be forgotten").

Right to Rectification: Request correction of inaccurate data.

Right to Restrict: Ask us to stop processing your data while a dispute is resolved.

Right to Object: Object to processing based on legitimate interest.

Right to Portability: Request your data in a portable format (JSON/CSV).

Withdraw Consent: Withdraw GA consent anytime via browser localStorage. Withdraw registration consent by deleting your account.

Non-Discrimination: (CCPA) Exercising your rights will not affect service quality.

To exercise any right, email info@quantfinco.com with the subject line "Data Request – [Your Name]". We will respond within 30 days. Logged-in users may also delete their own account instantly:

Log in to delete your account instantly from this page.

7. Security Measures

Passwords stored using Werkzeug PBKDF2-SHA256 hashing — never in plain text.
Brute-force protection: accounts are locked for 15 minutes after 5 failed login attempts.
All dashboard access requires manual admin approval.
HTTPS enforced via GoDaddy SSL certificate.
In the event of a data breach affecting your personal data, we will notify you within 72 hours by email.

8. Contact & Complaints

Data Controller: Manoj Dalui, India
Email: info@quantfinco.com

If you are unhappy with how we handle your data, you have the right to lodge a complaint with your local data protection authority (e.g., the ICO in the UK, or your EU member state's DPA).