This policy explains what personal data QuantStep collects, why, who sees it, and what you can do about it.
The controller is Quant Technology Group Pte. Ltd. (UEN 202404871E), a company incorporated in Singapore with its registered office at 68 Circular Road, #02-01, Singapore 049422, which operates quantstep.com and the services behind it. Our data protection officer is Markus Sichler, reachable at privacy@quantstep.com.
1. What we collect
1.1 Account and identity data
Your name, email address, phone number, country of residence, and, where you apply as a firm, your role, the entity’s name, jurisdiction and regulatory status. Where we are required to verify identity before granting access, the documents you provide for that purpose.
1.2 Trading performance data
Closed and open positions, instruments, sizes, timestamps, balances, equity curves, drawdowns and the metrics we compute from them. We receive this from the sources you connect or authorise — a partner firm, a broker or platform, or a group account such as TraderWaves — always on a read-only basis. We never receive trading permissions, withdrawal rights or credentials that could place an order.
1.3 Application answers
What you tell us when you apply: how you trade, the length of your record, the capital you are looking for, and, for allocators, your mandate and criteria.
1.4 Technical and usage data
IP address, device and browser information, pages viewed, and how you arrived. Email delivery data — whether a message was delivered, opened or reported — where you receive email from us.
1.5 Communications
Your correspondence with us, and notes from calls or meetings about an application.
2. Why we use it, and on what basis
- To operate your account and provide the service — performance of our contract with you.
- To verify and measure a trading record — performance of our contract with you; consent where you connect an account.
- To introduce a trader to a named allocator — your consent, given per firm and withdrawable at any time.
- To review and approve applications, and to prevent fraud and misuse — our legitimate interest in a network that counterparties can trust.
- To improve the service and our methodology — our legitimate interest, using aggregated or de-identified data wherever it will do.
- To send service messages — performance of our contract. To send anything else, your consent.
- To meet legal, sanctions and anti-money-laundering obligations — compliance with a legal obligation.
We do not sell personal data, and we do not use it to train models for anyone else.
3. Who sees your data
3.1 Capital allocators
A trader’s record is shown to an allocator only where that trader has asked us to show it, to that firm, and we tell you what the firm will see before it is shared. Nothing is published to a marketplace and nothing is visible to allocators by default. You can withdraw an introduction at any time; we will stop sharing, though we cannot retrieve what a firm has already seen.
3.2 Partner firms
Where your record reaches us through a partner firm, that firm is the source of the data and has its own relationship with you. No trader data moves before a data processing agreement is in place and the trader has opted in.
3.3 Service providers
Hosting and infrastructure, email delivery, analytics, error monitoring and customer support tools, each under contract, each processing only what they need, and none of them permitted to use your data for their own purposes.
3.4 Group companies
Quant Technology Group companies, where they operate part of the infrastructure a service runs on, under the same terms as any other processor.
3.5 Everyone else
Professional advisers, and regulators, authorities or courts where the law requires it. If the business is ever sold or reorganised, data may transfer with it, and this policy continues to apply to it.
4. International transfers
We are based in Singapore and use providers in Singapore, the European Economic Area, the United Kingdom and the United States. Where data leaves the EEA or the UK we rely on the European Commission’s standard contractual clauses or the UK addendum, and where it leaves Singapore we take the steps the PDPA requires to ensure comparable protection. Ask us at privacy@quantstep.com if you want the detail for a particular provider.
5. How long we keep it
- Account and application data: while your account is open, and for three years after it closes.
- Trading performance data: while your account is open. If you disconnect a source we stop receiving new data immediately, and delete the history on request unless we must keep it to evidence a verification we issued.
- Records we are required to keep for legal, tax or anti-money-laundering reasons: for the period the relevant law sets.
- Aggregated or de-identified data, which cannot be traced back to you: indefinitely.
6. Security
Data is encrypted in transit and at rest, access is limited to the people who need it for their work and logged, and connections to trading accounts are read-only by design, which limits what a breach could ever reach. No system is perfectly secure; where a breach affects you and the law requires notice, you will receive it.
7. Your rights
Wherever you are, you can ask us for a copy of your data, ask us to correct it, ask us to delete it, withdraw a consent you have given, or object to what we do on the basis of legitimate interest. In the EEA and the UK you also have the right to restrict processing and to portability. Under the PDPA you have the right to access and correct your personal data, and to withdraw consent.
Write to privacy@quantstep.com. We respond within 30 days, and will tell you if we need longer. There is no charge unless a request is repetitive or excessive. Your privacy choices sets out the settings you can change yourself, without writing to us at all.
If you are not satisfied, you can complain to Singapore’s Personal Data Protection Commission, or to the supervisory authority in your country.
8. Your choices
What you can turn off, change or ask for, in one place.
Who sees your trading record
Your record is shown to a capital allocator only where you have asked us to show it, to that named firm. There is no marketplace, no public profile and no default visibility.
You can withdraw an introduction at any time from your account, or by writing to privacy@quantstep.com. We stop sharing immediately. We cannot retrieve what a firm has already seen, and a firm you have already been introduced to keeps its own records under its own privacy policy.
Connected accounts
Every connection is read-only, and you can disconnect any account at any time. When you do, we stop receiving new data at once. Ask us and we will delete the history too, unless we have to keep enough of it to evidence a verification we have already issued.
- Marketing and product updates — optional, off unless you opted in. Unsubscribe from any such email, or change it in your account.
- Service email — application status, introductions, security and billing notices. These are part of the service and cannot be turned off while your account is open.
Cookies and analytics
Essential cookies keep you signed in and the site secure, and cannot be turned off. Analytics cookies are set only with your consent; decline them on the banner, withdraw consent later by writing to privacy@quantstep.com, or set Global Privacy Control in your browser and we will treat it as a withdrawal.
Selling and sharing
We do not sell personal data, and we do not share it for cross-context behavioural advertising — including as those terms are defined under US state privacy laws. There is nothing here to opt out of, because we do not do it.
Access, correction, deletion and portability
Ask us for a copy of your data, ask us to correct something that is wrong, ask us to delete your account and what sits behind it, or ask for your data in a portable format. Write to privacy@quantstep.com from the address on your account. We respond within 30 days, and will tell you if we need longer.
We may need to confirm who you are before acting, and we may have to keep records the law requires us to keep. We will say so if that applies.
9. Cookies and analytics
We use the cookies needed to keep you signed in and to keep the site secure, and privacy-preserving analytics to understand which pages are used. Non-essential cookies are set only with your consent, and you can change that choice at any time on your privacy choices.
10. Children
The service is for people aged 18 and over. We do not knowingly collect data from children, and will delete it if we find we have.
11. Changes
We will post any change here and update the date at the top. Where a change is material we will tell you before it takes effect.
12. Contact
Quant Technology Group Pte. Ltd. (UEN 202404871E), 68 Circular Road, #02-01, Singapore 049422. Data protection officer: Markus Sichler, privacy@quantstep.com. Everything else: team@quantstep.com.