1. Introduction
Quantovest Capital ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our copytrading and investment platform (the "Platform").
By using the Platform, you agree to the collection and use of information in accordance with this policy. If you do not agree, please discontinue use immediately.
2. Information We Collect
Personal Information
- Full name, email address, and contact details
- Government-issued identification documents (passport, driver's license, national ID) for KYC verification
- Proof of address documents (utility bills, bank statements dated within 3 months)
- Bank account details and cryptocurrency wallet addresses for deposit/withdrawal processing
- Account credentials (encrypted passwords, optional two-factor authentication secrets)
Financial Information
- Deposit and withdrawal transaction records
- Portfolio balance, ROI history, and investment plan details
- Payment proof screenshots submitted for deposit verification
Technical Information
- Browser type, device type, and operating system
- IP address and approximate geographic location
- Login timestamps and session activity
3. How We Use Your Information
- KYC Compliance: Verify your identity as required by anti-money laundering (AML) regulations
- Account Management: Process deposits, withdrawals, and maintain your investment portfolio
- Platform Operations: Execute copytrading strategies, calculate ROI, and manage your investment plan
- Communication: Send account notifications, transaction confirmations, and platform updates
- Security: Detect fraud, prevent unauthorized access, and protect against suspicious activity
- Legal Compliance: Meet regulatory obligations and respond to lawful requests from authorities
4. Data Storage & Security
All personal data and verification documents are stored using encrypted, multi-layer cold storage infrastructure. We implement industry-standard security measures including:
- AES-256 encryption for data at rest
- TLS 1.3 encryption for data in transit
- Supabase Row Level Security (RLS) policies on all database tables
- Role-based access controls for staff and administrative personnel
- Regular security audits and penetration testing
5. Data Sharing
We do not sell, trade, or rent your personal information to third parties. We may share your data only in the following circumstances:
- Service Providers: Trusted third-party providers (payment processors, cloud infrastructure) who assist in platform operations, bound by strict confidentiality agreements
- Legal Requirements: When required by law, court order, or regulatory authority
- Business Transfers: In connection with a merger, acquisition, or sale of assets, with prior notice
- With Your Consent: When you explicitly authorize sharing for a specific purpose
6. Data Retention
We retain your personal information for as long as your account is active or as needed to provide services. After account closure, we retain KYC documents and transaction records for a minimum of 5 years as required by anti-money laundering regulations.
7. Your Rights
- Access: Request a copy of all personal data we hold about you
- Rectification: Request correction of inaccurate or incomplete data
- Erasure: Request deletion of your personal data (subject to regulatory retention requirements)
- Portability: Request your data in a structured, machine-readable format
- Objection: Object to processing of your data for specific purposes
8. Cookies & Tracking
The Platform uses essential cookies for session management and authentication. We do not use third-party advertising cookies or tracking pixels. Analytics data is collected anonymously to improve platform performance.
9. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via email or platform notification. Continued use after changes constitutes acceptance of the updated policy.
10. Contact Us
For privacy-related inquiries, data requests, or complaints, contact our Data Protection team at privacy@quantovest.com. We aim to respond within 30 days.