Privacy
What this service stores, why, and what it deliberately does not collect.
Last updated 2026-09-04. Operated by Avasis, contact abhay@quantbase.live.
This is a research tool, not an advertising business. The short version: it stores what it needs to run your experiments and bill you, and nothing else.
What is stored#
Your account. An email address, a tenant handle, your plan, and the SHA-256 digest of each API key. Keys are never stored in a form we could read — a database dump of this service is not a set of working credentials, which also means a lost key can only be replaced, never recovered.
Your email is also stored in a canonical form (lowercased, +tag removed, dots
removed for Gmail). That is what one-tenant-per-mailbox is enforced on, and it
exists so that signing up again returns your existing trial count rather than a
fresh one.
Your research. Strategy specifications, registered splits, backtest results, and the trial ledger. This is the substance of the service. It is retained for the life of the account because the trial count is the product: a ledger that forgets is a ledger that lies.
Billing. Payments are processed by Polar as merchant of record. We never see or store your card details. What we keep is a customer identifier, a subscription identifier and the plan they grant.
Site visits. Path, timestamp, referrer, and a salted hash of address plus user agent plus date. That hash cannot be reversed to an address, and because the date is inside it, it deliberately does not link one day to the next. It exists to count whether anyone visited, nothing more.
What is not collected#
- No cookies, and no third-party analytics or advertising script on any page.
- No tracking across sites, and no data sold, rented or shared for marketing.
- No card details.
- No exchange credentials. If you ingest data from another venue you give this server a URL, not an account.
Isolation between tenants#
Every tenant-scoped table carries an owner and is protected by Postgres row-level security, ENABLED and FORCED. Isolation is enforced by the database rather than by query filters, so a bug that forgets to scope returns nothing rather than another tenant's rows.
Market data — OHLCV bars — is deliberately shared, because a price is the same fact for everyone. What you did with it is not.
Sub-processors#
| Who | What they handle |
|---|---|
| Amazon Web Services (us-east-1) | Hosting and object storage |
| Polar | Payments, as merchant of record |
| Coinbase | Public market data requests, made by the server |
Retention and deletion#
Research data is kept for the life of the account. Site-visit rows are aggregated and carry no recoverable identifier.
To delete your account and its research, email abhay@quantbase.live from the address on the account. We remove it within 30 days. Billing records are kept where tax law requires it.
Your rights#
Ask for a copy of your data, correction, or deletion at abhay@quantbase.live.
Changes#
Material changes will be noted here with a new date. The service does not sell data, and any change to that would be announced rather than quietly edited in.
Read this page as Markdown:
/docs/privacy.md