Privacy Policy

This Privacy Policy describes how Quant Mec Technologies ("we", "us") collects, uses, and safeguards your information when you use QuantShift AI ("the Service"). By using the Service, you agree to the collection and use of information in accordance with this policy.

1. Who we are

QuantShift AI is operated by Quant Mec Technologies, registered in Malaysia (SSM Reg: 202603082822 / 003836548-H). The Service is offered globally; this policy applies to all users regardless of location.

2. Information we collect

Account information. When you sign in, our authentication provider Clerk receives your email address and any profile information you choose to share (name, profile photo). We access this information through Clerk's APIs but do not store passwords directly.

Business and analysis data. When you run an analysis, we store the company description, industry, user request, and structured outputs of each agent in our database. If you upload PDFs or CSVs, those files are stored temporarily on our servers for the duration of the analysis run and are accessible only to you.

Notion content. If you connect Notion, we store your integration token and fetch only the pages you explicitly grant access to. We do not scan or index your entire workspace.

Usage data. We collect basic operational metadata (run timestamps, agents activated, token counts) for product improvement and billing.

3. How we use your information

We use the information to (a) provide the Service, including running multi-agent analyses and generating reports; (b) maintain session limits and enforce subscription plans; (c) debug, improve, and secure the Service; (d) communicate with you about your account.

We do not sell your data. We do not use your business or analysis data to train AI models. We do not share your data with third parties except the operational subprocessors listed below.

4. Subprocessors

We rely on the following third-party services to operate the Service:

• Clerk — authentication and user management
• Supabase — database and file storage
• Vercel — frontend hosting
• Railway — backend hosting
• Stripe — payment processing (when applicable)
• OpenAI / Anthropic — large language model inference
• Tavily — web search for the Market Signal Agent
• Notion — only when you connect it; we read only the pages you grant access to

When you submit content to be analysed, that content is sent to one or more of our LLM subprocessors (OpenAI or Anthropic) to perform the reasoning. These providers process the content under their own data processing agreements and do not retain it for model training under our enterprise terms.

5. Data retention

Analysis results and uploaded content are retained for as long as your account is active. You can delete an analysis at any time, which removes the row from our database and the associated PDF report. Uploaded files are removed from our servers within 24 hours of upload unless they are still being used by an active analysis.

6. Your rights

You have the right to access, correct, or delete the personal information we hold about you. To exercise these rights, contact us via the email address listed below. Where applicable, you also have the right to data portability and to withdraw consent.

7. Security

We use industry-standard security practices: TLS in transit, encrypted storage at rest, Row Level Security on database tables, and JWT-based authentication on every API call. Despite these efforts, no system is perfectly secure; we encourage you to use strong unique passwords and enable two-factor authentication on your account.

8. International transfers

Our services may be hosted in regions that differ from where you live. By using the Service, you consent to your information being processed in those regions, subject to the protections described in this policy.

9. Children

The Service is not directed to individuals under 18, and we do not knowingly collect personal information from children. If you believe we have collected information from a child, contact us and we will delete it.

10. Changes to this policy

We may update this policy from time to time. Material changes will be notified through the Service or by email. The "Last updated" date at the top of this page reflects the most recent revision.

11. Contact

For questions about this policy or to exercise your data rights, contact us at privacy@quantmec.com.