Legal
Last updated: April 2026
This Privacy Policy describes how QuantTau Research collects, uses, stores, and protects personal information shared with us through this website, the contact form, and the client portal. We are committed to data minimisation and only collect what is strictly necessary to provide our service. This policy is written in compliance with the principles of the Digital Personal Data Protection Act, 2023 (DPDP Act) of India.
When you submit our contact form, we collect only the following information:
Full name, email address, organisation, type of entity (AMC, RIA, RA or other), and the message content you provide.
No other data is collected from the contact form. We do not record IP addresses, browser fingerprints, or any tracking data on form submission.
For client portal access, we store only the following:
The client email address and an encrypted password hash. Passwords are not stored in plain text.
Login credentials are created and assigned by QuantTau Research at the time of client onboarding. The client may request a password change at any time.
No other personal data is stored. We do not track usage patterns, signal viewing history, click data, or session duration. Login session activity is monitored only to enforce the device limits described in our Terms & Conditions.
QuantTau Research does not use cookies, web beacons, analytics scripts, or any form of user tracking on this website. We do not run Google Analytics, advertising trackers, or third-party tracking pixels. The only browser storage used is the temporary session token required to keep a logged-in client signed in within their browser, which is removed on sign-out.
QuantTau Research relies on three external service providers to operate this website:
Cloudflare — for website hosting, DNS, and HTTPS encryption. Cloudflare may receive standard server-level connection data when you visit the site.
Supabase — for client authentication. Supabase securely stores client email addresses and encrypted password hashes for the login system.
Web3Forms — for contact form submissions. When you submit the form, Web3Forms receives the form data and forwards it to our official email inbox.
No other third-party services receive any data from QuantTau Research. The privacy practices of the above three providers are governed by their own respective privacy policies, and any data they collect or process at their end is subject to their own terms. QuantTau Research is responsible only for the data we ourselves hold and process; we are not responsible for the independent data practices of these third parties.
The third-party services listed above operate globally distributed infrastructure. As a result, your data may be processed and stored on servers located outside India. We disclose this transparently. Where applicable, our service providers maintain appropriate data protection standards within their own platforms. Clients who are not comfortable with international data processing should not subscribe to our service.
Data we collect is used solely for the following purposes:
To respond to enquiries received through the contact form; to provide and maintain client portal access; to communicate service-related updates, signal output, and operational notices; to enforce contract terms including device limits and credential security; and to send occasional marketing or service-update emails to clients and prospective clients.
Clients who do not wish to receive marketing communications may opt out at any time by emailing contact@quanttau.com. Service-related emails (such as signal delivery and renewal reminders) are not optional while a subscription is active.
Active client data is retained while the subscription is active.
Upon subscription cancellation, the client's login credentials are deleted immediately on written request from the client. In the absence of such a request, credentials are deleted automatically within ninety (90) days of subscription end.
Contact form submissions received via email are retained indefinitely in our email inbox for record-keeping purposes, unless deletion is specifically requested by the sender.
Under the Digital Personal Data Protection Act, 2023, you have the right to:
Access the personal data we hold about you; request correction of any inaccurate data; request deletion of your data; and withdraw consent for any processing where consent is the legal basis.
To exercise any of these rights, please email contact@quanttau.com. We will respond to verified requests within a reasonable timeframe.
QuantTau Research is an institutional service intended only for SEBI-registered entities and registered individual professionals. The service is not intended for, and is not made available to, anyone under the age of eighteen. We do not knowingly collect any data from minors.
QuantTau Research implements the following technical and operational security measures:
All website traffic is encrypted via HTTPS (TLS) end-to-end.
Client passwords are stored only as cryptographically hashed values, never in plain text. Industry-standard hashing algorithms are used.
Login credentials are never embedded in our website source code. They are stored exclusively within the secure authentication backend.
Login activity is monitored on an IP basis to detect and prevent unauthorised credential sharing, in line with the device limits set out in our Terms & Conditions.
In the event of a data breach affecting QuantTau Research's own systems and the personal data we directly hold, we will notify all affected clients via email within thirty (30) days of becoming aware of the breach, in accordance with applicable Indian data protection regulations.
Where a breach occurs at one of our third-party service providers (Cloudflare, Supabase, or Web3Forms), QuantTau Research bears no liability or responsibility for that breach. Clients affected by a third-party breach must contact the respective service provider directly. QuantTau Research's liability in such cases is expressly excluded.
This website contains links to our external YouTube channel and other social media presence. Clicking these links takes you to third-party platforms, each governed by its own privacy policy. We do not embed YouTube videos or other interactive third-party content directly on this website. Visiting our YouTube channel is subject to YouTube's own privacy practices, over which we have no control.
QuantTau Research may update this Privacy Policy from time to time at its sole discretion. Changes take effect immediately upon publication of an updated version on this page. Clients are encouraged to review this page periodically. Material changes affecting client data will additionally be communicated via email to active clients.
For privacy-related questions, data access requests, or to exercise any of your rights under this policy, please email contact@quanttau.com.