Privacy Policy

1. Who is responsible

QuantModeLab is a quantitative research application operated by Abdou Kaba. This policy describes personal data processed when you visit https://quantmodelab.com or use its research workspace. For privacy requests, contact abdoukaba81@gmail.com.

2. Data we use

• Sign-in identity: a verified user identifier and email address supplied through Cloudflare Access for Google accounts or Supabase for email/password accounts. When Google is the selected sign-in provider, Google authenticates you and Cloudflare passes the verified identity to the application. QuantModeLab does not receive your Google password.
• Research workspace: the information you choose to save, including watchlists, strategies, parameters, research notes, experiments, backtest results, trial records, and simulated portfolio orders. Records are associated with your user identifier.
• Analysis inputs: symbols, date ranges, market data, and uploaded CSV data used for calculations. Data used for server-side analysis is sent to the application server and, when enabled, its configured computation service. Saved research may include inputs and results.
• Technical information: Cloudflare processes request information such as IP address, browser details, timestamps, and authentication or security events to host and protect the service.
• Support: messages and contact details you send when requesting help.

Account identity is needed to use the private workspace. Research inputs and support messages are provided at your choice. Please do not upload sensitive personal information about yourself or others.

3. Email and Google sign-in

Email/password authentication is provided by Supabase. Your email and password are securely transmitted to Supabase for registration and sign-in; passwords are not stored in the research database or application logs. Supabase processes email verification and password-reset requests. See the Supabase Privacy Policy. Session cookies keep you signed in for a limited time. Email and Google accounts have separate workspace identifiers; use your original sign-in method to open existing research.

Google is used for authentication, not for access to your mailbox. This application does not request permission to read or send Gmail messages, or to access Google Drive or Google Contacts. Your verified identity is used to identify your account, display your email, and keep saved research associated with the correct user.

Google and Cloudflare also process authentication information under their own privacy policies: Google Privacy Policy and Cloudflare Privacy Policy. Removing an application's connection in your Google account does not by itself delete research already saved in QuantModeLab; contact us to request that deletion.

4. Purposes and legal bases

We use account identity and saved research to provide the workspace and calculations you request. Where the GDPR applies, this processing is necessary to perform the service agreement with you. We process technical and security information for our legitimate interests in operating a reliable service, preventing abuse, and troubleshooting failures. We handle support requests to provide the service or, for general enquiries, in our legitimate interest in responding. We may also process information when required by law.

Research models analyze the data you select. They are not used by QuantModeLab to make decisions about your eligibility for credit, employment, insurance, or access to other essential services.

5. Service providers and transfers

Cloudflare provides hosting, the D1 database, and Google access protection. Supabase provides email/password authentication and authentication email delivery through a configured email provider. The operator and service providers may access information as needed to run, secure, and support the application. We do not sell your personal data or use Google sign-in information for advertising.

When you request market or economic data, the relevant query is sent to the configured data provider, such as Yahoo Finance or FRED. Optional computation and QuantConnect/LEAN integrations process the strategy and market inputs needed for jobs you request when those integrations are enabled. Any external service has its own terms and privacy practices.

Providers may process data in countries outside your country of residence, including outside the European Economic Area. Where applicable, transfers require a lawful safeguard such as an adequacy decision or standard contractual clauses. Contact us for information about the providers and safeguards relevant to your use. We may disclose information where legally required or necessary to address abuse or protect legal rights.

6. Cookies, storage, and security

Cloudflare Access and QuantModeLab use essential authentication cookies to maintain signed-in sessions. Email sessions expire after at most one hour. The research workspace stores a theme preference in your browser. These public information pages do not load analytics, advertising scripts, or third-party fonts.

Saved workspace data is stored in Cloudflare D1 and access is checked against a verified identity. Connections use HTTPS. Security measures reduce risk but cannot guarantee that any service is completely secure. Keep your sign-in account secure and sign out on shared devices.

7. How long information is kept

Saved research is retained to make it available across your visits, until you remove it where controls are available or request deletion. The current application does not automatically delete a workspace because of inactivity. Closing a browser session or revoking Google sign-in does not erase saved research.

Support information is kept for handling the request and any necessary follow-up. Technical logs and provider backups follow the hosting and security providers' retention settings. Information may need to be retained longer to meet a legal obligation, resolve a dispute, or investigate abuse; deletion from backups may follow the provider's recovery cycle. Contact us for a deletion request or details relevant to your records.

8. Your choices and rights

You can request access to, correction of, or deletion of your personal data by emailing abdoukaba81@gmail.com. Please identify the email used for the workspace; do not send passwords or authentication tokens. We may need to verify your identity before acting.

Depending on your location and the applicable legal basis, you may also have rights to restrict or object to processing, receive portable data, and withdraw consent where processing relies on it. You can complain to your local data protection authority; in France, this is the CNIL.

9. Policy updates

Changes will be published on this page with an updated date. If a change materially affects how account information is used, an additional notice will be provided where required. Please contact us if any part of this policy is unclear.