Privacy Policy

SECTION 01

Who we are and who controls your data

AriSai Quant (“AriSai Quant”, “we”, “us”, or “our”) provides
quantitative research software, dashboards, indicators,
educational materials, subscriptions, and related services.

For the purposes of the General Data Protection Regulation
(“GDPR”), AriSai Quant is the data controller for personal data
processed for the purposes described in this Privacy Policy,
unless another organization is expressly identified as the
controller.

SECTION 02

Scope of this Privacy Policy

This Policy applies when you visit the AriSai Quant website,
create or manage an account, start a trial, purchase or manage
a subscription, use the dashboard or related products, contact
support, communicate with us, or otherwise interact with the
Services.

It does not govern third-party websites, exchanges, wallets,
social platforms, payment pages, or services that operate under
their own privacy policies. We encourage you to review the
privacy information provided by those third parties.

SECTION 03

Personal data we collect

Account and identity information

Depending on how you use the Services, we may process:

• Name, username, display name, and email address;
• Account identifier, membership role, plan, and access entitlements;
• Profile information that you choose to add;
• Password-related authentication data stored in protected form;
• Account creation, login, and account-status information.

Subscription and transaction information

• Selected plan, subscription status, renewal date, and cancellation status;
• Payment-provider customer and subscription identifiers;
• Billing country, transaction status, invoice, tax, and refund information;
• Limited payment details supplied to us by the payment processor.

Full card details are generally processed by the payment
processor rather than stored directly by AriSai Quant.

Communications and support data

• Messages, questions, feedback, and support requests;
• Email correspondence and contact-form submissions;
• Information you voluntarily provide when asking about a model, indicator, account, or subscription.

Technical and usage data

• IP address and approximate location derived from the IP address;
• Browser, device, operating system, language, and screen information;
• Pages viewed, features used, timestamps, referring pages, and interaction events;
• Cookie identifiers, consent choices, session data, and security logs;
• Error, performance, fraud-prevention, and diagnostic information.

User-generated portfolio-tool data

If you use portfolio, tracking, DCA, journal, or similar tools,
we may process the entries you choose to save, such as asset
names, quantities, prices, dates, notes, or simulated portfolio
values. Do not submit information that is unnecessary for the
feature you are using.

SECTION 04

How we collect personal data

We may collect personal data:

• Directly from you when you register, purchase, submit a form, or contact us;
• Automatically through cookies, logs, security tools, and similar technologies;
• From payment processors when a checkout, renewal, cancellation, refund, or subscription event occurs;
• From authentication, hosting, analytics, email, and infrastructure providers;
• From publicly available sources where lawful and relevant;
• From another person or organization acting on your behalf.

Where personal data is required to create an account, process a
purchase, or provide a requested feature, failure to provide it
may prevent us from delivering that part of the Services.

SECTION 05

Why we use personal data and our legal bases

Performance of a contract

We process personal data where necessary to:

• Create and administer your account;
• Provide the plan, dashboard, indicator, or feature you requested;
• Authenticate you and apply the correct access level;
• Process subscriptions, cancellations, and account requests;
• Provide service-related support and communications.

Legitimate interests

Where our interests do not override your rights, we may process
data to:

• Protect accounts, prevent fraud, and maintain platform security;
• Diagnose errors and improve reliability, usability, and performance;
• Understand aggregate product usage and improve the Services;
• Establish, exercise, or defend legal claims;
• Communicate relevant operational or product information.

Legal obligations

We may process and retain data where required to comply with
accounting, tax, consumer-protection, anti-fraud, regulatory,
court, or other legal obligations.

Consent

Where required, we rely on your consent for non-essential
cookies, certain analytics, marketing communications, or other
optional processing. You may withdraw consent at any time
without affecting processing that occurred before withdrawal.

SECTION 06

Payments, subscriptions, and Stripe

Payments and subscription administration may be provided by
Stripe or another payment processor. When you purchase a plan,
the processor may collect payment-card, billing, tax, fraud,
device, and transaction information under its own privacy terms.

We may receive and store information needed to administer your
access, such as a customer identifier, subscription identifier,
price or product identifier, payment status, billing interval,
renewal date, cancellation status, and limited billing details.

We use this information to grant, update, suspend, or remove
subscription access; reconcile payments; respond to billing
questions; prevent fraud; and comply with legal obligations.

SECTION 07

Cookies, local storage, and analytics

We may use cookies, browser storage, and similar technologies
for:

• Authentication, sessions, account access, and security;
• Remembering preferences and consent choices;
• Protecting forms and preventing abuse;
• Measuring performance and diagnosing technical issues;
• Understanding website usage and improving the Services.

Essential technologies may be used where necessary to operate
the website or provide a feature you request. Non-essential
analytics or marketing technologies will be used on the basis
required by applicable law, which may include your prior
consent.

You can manage available choices through our cookie banner or
consent settings and may also adjust browser settings. Blocking
essential cookies may prevent account or subscription features
from functioning correctly.

SECTION 08

AI assistants, documentation search, and support interactions

If we offer an AI assistant or automated documentation tool,
we may process the questions, prompts, feedback, account context,
and technical data needed to generate and improve a response,
maintain security, and investigate misuse.

Do not enter private keys, wallet seed phrases, exchange
credentials, payment-card details, government identifiers,
health information, or other unnecessary sensitive information.

We may use service providers to host or operate AI-related
functionality. Where such providers process personal data on
our behalf, we seek to apply appropriate contractual and
technical safeguards.

SECTION 09

How we share personal data

We do not sell your personal data. We may disclose limited data
where reasonably necessary to:

• Hosting, cloud, database, content-delivery, and infrastructure providers;
• Payment, subscription, invoicing, accounting, and tax providers;
• Email, customer-support, authentication, analytics, and security providers;
• Professional advisers such as accountants, auditors, insurers, or lawyers;
• Authorities, courts, regulators, or law-enforcement bodies where legally required;
• A buyer, investor, or successor in connection with a merger, financing, restructuring, or transfer of business assets.

Service providers acting as processors may use personal data
only as permitted by their agreements with us and applicable law.
Some providers may act as independent controllers for aspects of
their services, such as payment processing.

SECTION 10

International data transfers

Some service providers may process personal data outside Sweden
or the European Economic Area (“EEA”), including in countries
whose data-protection laws may differ from those in the EEA.

Where required, we use an appropriate transfer mechanism, such
as an adequacy decision, the European Commission’s Standard
Contractual Clauses, supplementary safeguards, or another
legally recognized mechanism.

You may contact us for further information about the safeguards
relevant to a particular transfer, subject to legal and
confidentiality limitations.

SECTION 11

How long we retain personal data

We retain personal data only for as long as reasonably necessary
for the purposes described in this Policy, including providing
the Services, maintaining security, resolving disputes, and
meeting legal, accounting, and tax obligations.

Retention periods vary depending on the type of data:

• Account data is generally retained while the account remains active and for a reasonable period afterward;
• Subscription, invoice, accounting, and transaction records may be retained for periods required by Swedish law;
• Security and technical logs are generally retained for shorter operational periods unless needed for an investigation;
• Support communications may be retained while relevant to the request, account, dispute, or legal obligation;
• Consent records may be retained to demonstrate compliance.

When data is no longer required, we delete, anonymize, or
securely isolate it, subject to backup cycles and legal
retention requirements.

SECTION 12

How we protect personal data

We use technical and organizational measures designed to protect
personal data against unauthorized access, alteration,
disclosure, loss, or destruction. Depending on the context,
these measures may include:

• Access controls, authentication, role-based permissions, and signed access tokens;
• Encryption in transit and security controls provided by reputable infrastructure vendors;
• Logging, monitoring, rate limiting, and fraud-prevention measures;
• Restricted administrative access and separation of access levels;
• Backups, updates, vulnerability management, and incident-response procedures.

No internet service is completely secure. You are responsible
for choosing a strong password, securing your devices, keeping
credentials confidential, and notifying us promptly of suspected
unauthorized access.

SECTION 13

Your rights under the GDPR

Subject to the conditions and exceptions in applicable law, you
may have the right to:

• Receive information about how your personal data is processed;
• Request access to personal data we hold about you;
• Request correction of inaccurate or incomplete data;
• Request deletion of personal data in certain circumstances;
• Request restriction of processing in certain circumstances;
• Object to processing based on legitimate interests or to direct marketing;
• Receive certain data in a structured, commonly used, machine-readable format;
• Withdraw consent where processing is based on consent;
• Lodge a complaint with a competent supervisory authority.

To exercise a right, email
info@arisaiquant.com.
We may request information reasonably necessary to verify your
identity and protect your account.

You may lodge a complaint with the Swedish Authority for Privacy
Protection (Integritetsskyddsmyndigheten, “IMY”) or another
competent supervisory authority in the EU/EEA. We encourage you
to contact us first so we have an opportunity to address your
concern.

SECTION 14

Children and automated decision-making

Children

The Services are intended only for persons aged 18 or older.
We do not knowingly collect personal data from children. If you
believe a child has provided personal data, contact us and we
will investigate and take appropriate action.

Automated decision-making

AriSai Quant’s market models calculate general research outputs
about markets and assets. They are not designed to make decisions
about an identifiable person that produce legal or similarly
significant effects.

We may use automated security or fraud-detection measures to
identify suspicious activity. Where applicable law requires
additional information or safeguards concerning such processing,
we will provide them.

SECTION 15

International users and regional privacy rights

AriSai Quant is established in Sweden and processes personal data under the GDPR and
applicable Swedish data-protection law. These protections apply to our processing as an
EU-established controller, regardless of whether you access the Services from inside or
outside the European Union or European Economic Area.

Depending on where you live, you may also have rights under local privacy or consumer laws.
Where those laws apply to us, we will respond to valid requests and provide the rights and
disclosures required by applicable law.

Rights and terminology may differ by jurisdiction. A right described in this Policy may be
subject to legal conditions, exceptions, identity verification, and retention obligations.
We will not discriminate against you for exercising a privacy right that applies to you.

If you are outside the EU/EEA, you may contact us to ask whether a specific regional privacy
right applies to your personal data. You may also contact the privacy or consumer authority
in your jurisdiction where local law permits.

SECTION 16

Changes to this Policy and how to contact us

Changes to this Privacy Policy

We may update this Policy to reflect changes to our Services,
providers, legal obligations, security practices, or data
processing. The current version will be published on this page
with a revised effective date.

Where a change materially affects your rights or how we use
personal data, we will provide additional notice where required
by law.

Contact