Privacy Notice

The controller is [OWNER: full legal name or company name, legal form], [OWNER: postal address]. Contact for every privacy question: hello@glitch.capital. [OWNER: data protection officer, if one is required]

• Our server processes what any web request carries: your IP address, the time, the page, your browser and system, and the referring page. We use it to deliver the site and to defend it against abuse. Legal basis: our legitimate interest in running the site securely (Art. 6(1)(f) GDPR). Server logs are kept for [OWNER: log retention, days].
• We count visits and signup steps anonymously on our own server: only the name of the step, with no cookie, no IP address and no browser details.
• If you open our booking sheet to book a call with us, it loads the Calendly scheduling script (Calendly LLC, USA). Loading it sends your IP address and browser details to Calendly. Our pages don't load it otherwise. If you book a call, Calendly processes the details you enter.
• If you write to us through the contact form, your message, name and email go to Web3Forms, which forwards it to our inbox.

Only what the site needs to work: the login cookie that keeps you signed in, a cookie that remembers which greeting Quanti last showed you, and interface settings in your browser’s local storage. These are strictly necessary, so they need no consent (§ 25(2) no. 2 TDDDG). We set no analytics or marketing cookies.

The beta is invite-only. If you request an invitation or join the waitlist, we store your email address and anything you choose to add (your name, what you trade), so that we can grant you an invitation and tell you when a place opens. If someone invites you, we store the invitation, its status and, once you accept it, which account it opened. Legal basis: steps you asked for before a contract (Art. 6(1)(b) GDPR).

• Your account: email address, name if you give one, password (stored only as a hash), plan, and how you found us.
• What you create: watchlists, alerts, workspaces and layouts, paper trades and your track record, notes and ratings you send, and the answers you give to our onboarding questions.
• Usage: sign-ins, use of your allowances, and when you reach a plan limit.

Legal basis: providing the service you signed up for (Art. 6(1)(b) GDPR).

When you ask Quanti something, we process your question, her answer, and the context she needs from your account to answer it, such as your watchlist, open paper trades, alerts or what is on your screen. To write the answer we send this to Anthropic PBC (USA), which runs the model, as our processor. [OWNER: Anthropic’s retention period and no-training terms under our contract]

If you talk to Quanti by voice, ElevenLabs, Inc. (USA) turns your speech into text and her answer into speech, as our processor. It does not record your voice. It does keep a transcript of the call until we delete it, which we do as soon as the call ends, and its backups can hold a deleted transcript for up to 30 days. We receive only the text, and Quanti answers it as she answers a typed question. [OWNER: ElevenLabs’ data processing agreement and transfer terms]

Please don’t put health data or other sensitive personal information into your questions. Quanti makes no decisions about you that have legal or similarly significant effects (Art. 22 GDPR).

Chats before you sign in. If you talk to Quanti on the public site without an account, we store each exchange (a random session id, the page, the question and the answer, but no IP address or account) to improve Quanti, for 30 days. After that a de-identified copy is kept and the chat is deleted. Legal basis: our legitimate interest in improving the assistant you are using (Art. 6(1)(f) GDPR).

We use your questions, the answers you rate and the paper trades you take to find where Quanti gets things wrong, and to fix her instructions, tools and rules. We do not train AI models on your content. The records we keep for this carry no name or email: they are filed under a keyed pseudonym, so one person’s records can be read together without saying whose they are. The detailed record of each Quanti answer (which tools she used and what they returned) is cleared after 90 days.

Legal basis: our legitimate interest in accurate and safe answers (Art. 6(1)(f) GDPR). This is on for every account until you turn it off. You can turn it off at any time in Settings, under Privacy (“Improve Quanti for everyone”); that is your objection under Art. 21 GDPR. From that moment, none of your conversations with Quanti, the answers you rate or your spoken questions are read to improve her; no de-identified copy of your chats or of the records of her answers is kept when they expire or when you delete your account; and what was already kept from your activity under your pseudonym is deleted. You can turn it back on the same way. [LEGAL PASS (#1742, #366): confirm on-by-default with a Settings opt-out is the right model, and whether the opt-out must also cover the paper trades you take (used in outcome studies), the notes you send us (read by the team as sent) and usage counts that hold nothing you wrote, none of which it covers today]

We send service emails (sign-in links, invitations, confirmations, alerts you set up) through Resend, Inc. (USA) as our processor, so Resend sees your email address and the message. Legal basis: Art. 6(1)(b) GDPR. Product news goes only to addresses that confirmed a subscription by double opt-in (Art. 6(1)(a) GDPR), and every message has an unsubscribe link.

No payment is taken during the beta. When paid plans start, payments are handled by Stripe (Stripe Payments Europe, Ltd., Ireland), which receives your payment details directly; we receive only the status, plan, period and the last digits of the payment method. Stripe acts as an independent controller under its own privacy policy.

• Hosting: Hetzner Online GmbH (Germany). The platform and its databases run on a server in Germany. Encrypted backups are stored in a Hetzner Storage Box in Finland.
• AI model: Anthropic PBC (USA), as described in section 6.
• Email: Resend, Inc. (USA).
• Payments, once they start: Stripe (Ireland), as an independent controller.
• Scheduling and the contact form: Calendly LLC (USA) and Web3Forms, as described in section 2.

For transfers to the USA we rely on the EU-US Data Privacy Framework where the recipient is certified, and otherwise on the European Commission’s standard contractual clauses (Art. 46(2)(c) GDPR). [OWNER: confirm the transfer basis for each US recipient] We share your data with no one else, and we never sell it.

You can delete your account at any time in Settings, after confirming your password. When you do:

• Your sign-in identity is deleted: email address, password and name.
• Your invitations, newsletter subscription and alert delivery settings are deleted, and your alerts stop.
• Any subscription stops at once, and saved payment methods are removed at Stripe. Stripe keeps its record of past payments, as tax law requires.
• Your activity (conversations with Quanti, alerts, watchlists, workspaces and paper trades) is copied without your name or email to the store we use to improve Quanti, and then removed from the live service. Email addresses and phone numbers in your conversations are removed before the copy is made; names you wrote in free text may not all be caught. If you objected to this use (section 7), no copy is made.
• Your paper trade record stays in the statistics under an anonymous id, with nothing that names you.

• Account and activity: until you delete your account, then as described in section 11.
• The detailed record of each Quanti answer: 90 days.
• Chats with Quanti before you sign in: 30 days, then a de-identified copy.
• Invitation requests and the waitlist: [OWNER: retention period].
• Server logs: [OWNER: days].
• Payment and accounting records, once payments start: as long as tax and commercial law require.

Data is encrypted in transit, and the copies of our databases that leave the server are encrypted to a key that is not kept on it. We protect the rest with technical and organizational measures under Art. 32 GDPR.

You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18) and data portability (Art. 20). You can withdraw any consent at any time, with effect for the future.

Right to object (Art. 21 GDPR). Where we rely on legitimate interests, you can object at any time on grounds relating to your situation. For the use of your activity to improve Quanti you can do it yourself in Settings.

To use any of these rights, write to hello@glitch.capital. You can also complain to a data protection authority, for example the one responsible for us: [OWNER: supervisory authority of the state of the registered seat].

This notice changes when the platform or the law changes, and it will be replaced by a reviewed version before the official launch. The version on this page applies. See also the Terms of Use.