Personal Data Processing
Last updated: 2026-10-06
At Quantisight AI, we are committed to handling personal data responsibly, transparently, and in accordance with applicable data protection laws, including the EU General Data Protection Regulation (GDPR)and applicable Swedish data protection legislation.
This Personal Data Processing Notice explains how Quantisight processes personal data when you visit our website, create an account, use our platform, communicate with us, or otherwise interact with our services.
1. Data Controller
The controller responsible for your personal data is:
Where Quantisight determines the purposes and means of processing personal data, Quantisight acts as the data controller.
2. Personal Data We Process
Depending on how you use Quantisight, we may process:
Account Information
- Name
- Email address
- Account credentials
- Account preferences
- Subscription information
- Communication preferences
Technical Information
- IP address
- Browser type
- Operating system
- Device information
- Language and regional settings
- Log information
- Authentication information
- Cookies: essential ones (sign-in session, language, country and currency) and, only if you accept them, Google Analytics cookies
Portfolio and Watchlist Data
Holdings, share quantities, purchase prices and dates, transactions, portfolios, watchlists, cash account balances and property entries that you add to Quantisight. This information describes your finances, so we treat it as confidential and use it only to show you your own data and to power the features you use.
Chat and AI Data
The questions you ask the AI assistant, the answers it generates, and your chat history. To answer, the assistant may look up your own portfolio and watchlist data.
Usage Information
We may process information about how you interact with Quantisight, including:
- Pages viewed
- Features used
- Searches and interactions
- Session information
- Product preferences
- Error and diagnostic information
Communications
When you contact us, we may process your name, email address, message, attachments, and other information you provide.
Payment and Subscription Information
If you purchase a paid service, we may process information necessary to manage your subscription, billing, and payment status. Payment card information may be handled directly by third-party payment providers.
3. Purposes of Processing
We may process personal data to:
- Provide and operate Quantisight
- Create and manage user accounts
- Authenticate users
- Process subscriptions and payments
- Provide customer support
- Improve our products and services
- Maintain platform security
- Detect fraud and abuse
- Troubleshoot technical issues
- Communicate with users
- Comply with legal obligations
- Establish, exercise, or defend legal claims
4. Legal Bases
Depending on the circumstances, we may rely on the following legal bases under the GDPR:
Contract
Where processing is necessary to provide services you have requested or to perform a contract with you.
Legitimate Interests
Where processing is necessary for legitimate interests pursued by Quantisight, provided those interests are not overridden by your rights and freedoms.
Consent
We rely on consent for analytics cookies (Google Analytics). They are off until you accept, and you can withdraw consent at any time with the Cookie settings link at the bottom of every page. Withdrawing does not affect earlier processing. Where other laws require consent, we will ask for it first.
Legal Obligation
Where processing is necessary to comply with a legal obligation.
5. AI-Related Processing
Quantisight's AI assistant is powered by Google's Gemini models. When you ask a question, we send it to Google through the Gemini API, together with the earlier messages in that conversation. If answering needs your own data, for example your portfolio or watchlist, the relevant figures are also sent to Google for that request.
Google processes this information to generate the response. How Google may use content sent through its API depends on the API terms and service tier that apply to our account; we will keep this notice up to date. We do not use your chats to train our own models.
Do not enter unnecessary personal, confidential, or sensitive information into AI prompts. Responses are generated automatically and no decision with legal or similarly significant effect is made about you by the AI.
6. Data Sharing
We may share personal data with service providers that help us operate Quantisight, including providers of:
- Google (Gemini API), AI processing of your questions and the data needed to answer them
- Stripe, payments and subscriptions for paid plans
- Neon, database hosting for account, portfolio, watchlist and chat data
- Our application hosting and infrastructure providers
- Google and Apple, if you choose to sign in with them
- Google Analytics, only if you accept analytics cookies
We do not sell personal data. Market data shown in Quantisight comes from a data provider that receives no personal data. We may also disclose information where required by law or where necessary to protect our rights, users, systems, or services.
7. International Transfers
Some service providers, including Google and Stripe, may process personal data outside the European Economic Area, for example in the United States. Where personal data is transferred outside the EEA, Quantisight will use appropriate safeguards required under applicable data protection law.
These may include adequacy decisions, Standard Contractual Clauses, or other legally recognized safeguards.
8. Retention
Account, portfolio, watchlist and chat data is kept while your account exists. You can delete individual chats, holdings and watchlists yourself at any time, and if you ask us to delete your account we delete this data too.
Payment and invoice records are kept for as long as accounting law requires (in Sweden, generally seven years). Other personal data is kept only for as long as reasonably necessary for the purposes described in this notice.
When information is no longer required, it will be deleted, anonymized, or otherwise handled in accordance with applicable law.
9. Your Rights
Subject to applicable legal conditions, you may have the right to:
- Access your personal data
- Correct inaccurate information
- Request deletion
- Restrict processing
- Object to certain processing
- Receive certain personal data in a portable format
- Withdraw consent where processing is based on consent
To exercise your rights, contact:
Account deletion is handled by email: write to us from the address on your account and we will delete your account and its data. We reply within one month, and may need to verify your identity first.
10. Supervisory Authority
If you are located in Sweden, you may lodge a complaint with the Swedish Authority for Privacy Protection (IMY). You may also contact Quantisight first so that we can investigate your concern.
11. Security
We use reasonable technical and organizational measures designed to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure. However, no online service can guarantee absolute security.
12. Changes
We may update this notice when our services, technology, legal obligations, or data processing practices change. The latest version will be published on the Quantisight website.