Privacy Policy

Account Information

When you create an account, we collect your name, email address, and authentication credentials. If you sign in via Google, GitHub, or LinkedIn, we receive your basic profile information from those providers.

Financial Data

We store portfolio holdings, transaction history, watchlists, and investment preferences that you enter into the platform. This data is used solely to provide our portfolio analytics services.

Usage Data

We automatically collect device information, browser type, IP address, and interaction data (pages visited, features used) to improve the platform experience.

• Providing Services — To deliver portfolio analytics, advanced insights, market data, and all platform features
• Account Security — To authenticate your identity, enable two-factor authentication, and detect unauthorized access
• Communications — To send account notifications, security alerts, dividend alerts, and product updates
• Platform Improvement — To analyze usage patterns, fix bugs, and improve features
• Legal Compliance — To comply with applicable laws and regulations

We implement industry-standard security measures to protect your data:

• Encryption — All data is encrypted in transit (256-bit TLS/SSL) and at rest (AES-256)
• Authentication — Passwords are hashed using bcrypt with salt rounds. We support 2FA via authenticator apps
• Access Control — All portfolio and financial data is user-scoped with JWT-based authorization
• Infrastructure — Hosted on AWS with enterprise-grade infrastructure security, regular security audits
• Rate Limiting — API endpoints are rate-limited to prevent abuse

We integrate with the following third-party services to provide market data and analytics:

• Market Data Providers — Premium institutional data feeds (for real-time quotes and financial data)
• Analytics Engine — Advanced portfolio analysis and reporting tools
• OAuth Providers — Google, GitHub, LinkedIn (for social login; we only receive basic profile information)

We do not sell, rent, or share your personal data or financial information with any third parties for marketing purposes.

We retain your account data and portfolio information for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where retention is required by law.

Market data caches and anonymous usage analytics may be retained for up to 12 months for platform improvement purposes.

You have the right to:

• Access — Request a copy of your personal data
• Correction — Update or correct inaccurate information
• Deletion — Request deletion of your account and data
• Export — Download your portfolio data in standard formats (CSV, Excel)
• Opt-out — Unsubscribe from non-essential communications

To exercise any of these rights, contact us at support@indyxquant.com.

We use essential cookies for authentication (JWT session tokens) and user preferences (theme settings). We do not use third-party advertising or tracking cookies.

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or an in-app notification. Continued use of the platform after changes constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy or our data practices, please contact:

INDYXQUANT Pro
Email: support@indyxquant.com
Website: www.indyxquant.com