Privacy Policy

Last updated: July 16, 2026

1. Data Controller

The Data Controller is:
Quantly di Alessio Battagliero
Registered office: Via Cignaretto, 32 - 15020 Moncestino (AL)
VAT: IT02771920069
For any privacy-related request: supporto@quantly.it.

We have not appointed a Data Protection Officer (DPO), as it is not mandatory given the nature and scale of our processing.

2. Data We Collect

• Registration data: name, email address, password stored using a hashing function with appropriate security measures (we never store it in plain text)
• License data: issued license keys, associated products, paired devices (QuantlyX/Oracle)
• Payment data: processed via Stripe (we never store card data)
• Agent data: .qagent files and any other files or data you voluntarily choose to sync to the Cloud
• Technical data: IP address, browser, device, operating system, access logs, timestamps, and session identifiers
• Cookies: essential only (auth session, language preference) — no tracking/profiling cookies

3. Nature of Data Provision

Registration data (name, email, password) and payment data are mandatory: without them we cannot provide the Service, create your account, or process a purchase. Other data (e.g. agent files you choose to sync) is optional: not providing it does not prevent you from using the Service, but may limit some features (e.g. cross-device sync).

4. Purposes of Processing

• Service delivery: account, licenses, dashboard, sync
• Payment processing and invoicing
• Service communications (purchase confirmation, license delivery)
• Handling support requests
• Legal and tax compliance
• Service improvement and security (fraud/abuse prevention)

5. Legal Basis

Contract performance (service and license delivery), legal obligations (tax compliance), and legitimate interest (security, fraud prevention, customer support), under Article 6 GDPR. We do not send direct marketing without separate, explicit consent.

6. Automated Decision-Making

We do not carry out automated decision-making or profiling under Article 22 GDPR. Trading decisions executed by agents you build with our software are configured and controlled by you, not by us, and do not involve processing of your personal data.

7. Data Retention

We keep different categories of data for different periods, proportionate to the purpose of processing:

• Account and license data: for the duration of the contractual relationship plus 5 years after termination, unless longer retention is legally required
• Tax documentation (invoices, transactions): 10 years, as required by tax law
• Technical and security logs: 6-24 months, depending on the specific purpose
• Support requests (tickets): up to 2 years after the request is closed

8. Data Sharing

• Stripe, for payment processing
• Our hosting/infrastructure provider
• Our transactional email provider
• Competent authorities, when required by law

Parties that process data on our behalf are appointed as Data Processors under Article 28 GDPR, where applicable. We never sell your personal data to third parties.

9. International Transfers

Some providers may process data outside the EU. When they do, we ensure adequate safeguards are in place, such as EU Standard Contractual Clauses or European Commission adequacy decisions, where applicable, in line with the GDPR.

10. Your Rights (GDPR)

Under Articles 15-22 GDPR, you have the right to:

• Access: obtain confirmation of processing and a copy of your personal data
• Rectification: correct inaccurate or incomplete data
• Erasure: request deletion of your data ("right to be forgotten")
• Restriction: restrict processing in certain circumstances
• Portability: receive your data in a structured format
• Objection: object to processing for direct marketing or on legitimate grounds
• Withdraw consent, at any time
• Know the legal basis of any processing that concerns you
• Not be subject to automated decision-making, where relevant (see Section 6)
• Lodge a complaint with the supervisory authority (see Section 14)

To exercise these rights, contact us at supporto@quantly.it. We reply within one month of your request, subject to extension in the cases provided by Article 12 GDPR.

11. Cookies

Quantly Cloud only uses essential technical cookies: the (httpOnly) auth session and the language preference. We use no analytics or marketing cookies (e.g. non-anonymized Google Analytics, Meta Pixel, Hotjar), so no separate consent banner is required for this site. Should we introduce non-essential cookies in the future, we will update this policy and, where required, add a consent banner.

12. Security

We use appropriate technical and organizational measures to protect personal data: encryption in transit and at rest, restricted and role-segregated access, periodic backups, and access logging.

13. Minors

The Service is intended solely for adults or for minors authorized by a holder of parental responsibility, as also stated in our Terms of Service. We do not knowingly collect data from unauthorized minors.

14. Complaints

If you believe our processing of your data violates the GDPR, you have the right to lodge a complaint, under Article 77 GDPR, with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali, www.garanteprivacy.it).

15. Changes to this Policy

We may update this Privacy Policy. Changes are published on this page with the updated date.

16. Terms of Service

Use of the Service is also governed by our Terms of Service.