Privacy Policy

AltaQuantFlow, operated by AltaQF Tech - FZCO ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our trading platform, mobile applications, and related services (collectively, the "Services").

Please read this Privacy Policy carefully. By accessing or using our Services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access the Services.

1.1 Information You Provide

• Account Information: Name, email address, username, password, and profile information
• Trading Platform Credentials: Broker account numbers, API keys, and authentication tokens (encrypted)
• Payment Information: Billing address, payment method details (processed through third-party payment processors)
• Trading Data: Trade history, positions, account balances, and trading preferences
• Communications: Messages, support tickets, and feedback you send to us

1.2 Automatically Collected Information

• Device Information: IP address, device type, operating system, browser type, and mobile device identifiers
• Usage Data: Pages viewed, features used, time spent on Services, and interaction patterns
• Location Data: General geographic location based on IP address
• Cookies and Tracking: Session cookies, preference cookies, and analytics data
• Performance Data: System performance metrics, error logs, and crash reports

1.3 Third-Party Platform Data

When you connect your trading platform accounts, we collect data necessary to provide our Services, including real-time market data, position information, and trading history from your connected brokers.

We use the collected information for:

• Service Provision: Operating and maintaining the platform, executing commands, and processing trades
• Account Management: Creating and managing your account, authentication, and access control
• Features & Improvements: Developing new features, analyzing usage patterns, and improving Services
• Communication: Sending service updates, security alerts, and responding to inquiries
• Security: Detecting fraud, preventing abuse, and protecting user accounts
• Legal Compliance: Complying with legal obligations and enforcing our Terms of Service
• Analytics: Understanding user behavior and optimizing platform performance
• Marketing: Sending promotional materials (with your consent, where required)

We implement industry-standard security measures to protect your information:

• Encryption: All data transmitted is encrypted using TLS 1.3 or higher
• Credential Storage: Trading credentials are encrypted at rest using AES-256 encryption
• Access Controls: Role-based access controls and multi-factor authentication
• Infrastructure Security: AWS infrastructure with regular security audits and monitoring
• Data Backups: Regular encrypted backups stored in secure locations
• Security Testing: Regular penetration testing and vulnerability assessments

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

We do not sell your personal information. We may share your information with:

4.1 Service Providers

• Cloud hosting providers (AWS)
• Payment processors (Stripe, PayPal)
• Analytics services (Google Analytics, Mixpanel)
• Customer support tools (Intercom, Zendesk)
• Email service providers (SendGrid, AWS SES)

4.2 Trading Platform Providers

We share necessary data with your connected trading platforms and brokers to execute trades and retrieve account information.

4.3 Legal Requirements

We may disclose your information if required by law, court order, or government request, or to protect our rights, property, or safety.

4.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

5. Data Retention

We retain your information for as long as necessary to provide Services and comply with legal obligations:

• Active Accounts: For the duration of your account plus 90 days after closure
• Trading Data: 7 years for tax and regulatory compliance
• Support Communications: 3 years from last interaction
• Payment Records: 7 years as required by law
• Analytics Data: Aggregated and anonymized data may be retained indefinitely

6. Your Rights and Choices

6.1 Access and Correction

You can access and update your account information through your account settings or by contacting support.

6.2 Data Portability

You can request a copy of your data in a structured, machine-readable format.

6.3 Deletion

You can request deletion of your account and associated data, subject to legal retention requirements.

6.4 Marketing Opt-Out

You can unsubscribe from marketing emails using the link in any promotional message.

6.5 Cookie Management

You can manage cookie preferences through your browser settings or our cookie consent tool.

7. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place, including:

• Standard contractual clauses approved by regulatory authorities
• Adequacy decisions for certain jurisdictions
• Privacy Shield certification (where applicable)
• Binding corporate rules for data transfers

8. Children's Privacy

Our Services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

9. Third-Party Links

Our Services may contain links to third-party websites and services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.

10. Region-Specific Provisions

10.1 European Economic Area (EEA) / UK - GDPR

If you are in the EEA or UK, you have additional rights under GDPR:

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent
• Right to lodge a complaint with a supervisory authority

Our legal basis for processing: Contractual necessity, legitimate interests, and consent where required.

10.2 California - CCPA

California residents have specific rights under the California Consumer Privacy Act:

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to say no to the sale of personal information
• Right to access personal information
• Right to deletion of personal information
• Right to non-discrimination for exercising CCPA rights

We do not sell personal information. To exercise these rights, contact us at privacy@altaqftech.com.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last Updated" date
• Sending an email notification (for material changes)
• Displaying an in-app notification

Your continued use of the Services after changes become effective constitutes acceptance of the revised Privacy Policy.

13. Mobile Application Specific

13.1 Mobile Permissions

Our mobile applications may request the following permissions:

• Notifications: To send trade alerts and account updates
• Biometric Authentication: For secure login (Touch ID, Face ID)
• Camera: For QR code scanning and document verification (optional)
• Storage: For caching data and offline functionality

13.2 App Store Compliance

Our mobile applications comply with Apple App Store and Google Play Store privacy requirements. You can manage app permissions through your device settings.