Privacy and KVKK Notice

Your personal data is processed by the following data controller:

• Name: QuantPhi
• Website: quantphi.app
• E-mail: info@quantphi.app

• Identity and contact: your e-mail address and, if you give it, your name.
• Account security: an irreversible hash of your password (the password itself is not stored), session records, IP address and browser details (user agent).
• Exchange connection: the exchange, the name you gave the connection, the API key and secret (stored encrypted).
• Trading data: your bots and their settings; orders, deals, positions, balances and profit and loss — including what is read from your exchange with your API key.
• Payment data: the package you chose, the amount, network, transaction ID (TxID), payment tag, coupon and campaign. We do not process card details.
• Sign-up source: the campaign tags (utm), referral and coupon code of the link you arrived through.
• Telegram (if you link it): your Telegram user ID, username and chat ID.
• Preferences and correspondence: your language, theme and notification settings; e-mails you send us.

• to open and manage your account;
• to have bots place orders on your exchange account by the rules you set, and to show your balances, positions and results;
• to run backtests, the market scanner, the autopilot and the showcase;
• to run packages, payments, trials and campaigns, and send reminders before a package ends;
• to send in-app and Telegram notifications and answer your support requests;
• to keep the Service secure: preventing unauthorised access and abuse, limiting sign-in attempts;
• to measure which links bring sign-ups;
• to meet our legal obligations and protect our rights in a dispute.

We process your personal data on these grounds of KVKK Article 5(2):

• (c) it is directly necessary to conclude or perform a contract — providing the service under the Terms of Use;
• (ç) it is necessary to meet our legal obligations — for example keeping payment records;
• (e) it is necessary to establish, exercise or protect a right;
• (f) it is necessary for our legitimate interests, provided your fundamental rights and freedoms are not harmed — security logs, measuring sign-up sources and anonymous statistics.

For any processing outside these grounds we ask for your explicit consent separately.

We collect your data through the sign-up and in-app forms, your exchange’s API, the Telegram bot and e-mail, and automatically through server logs. Your USDT payments are matched with the transfers arriving at QuantPhi’s Binance account.

Your browser’s local storage (localStorage) holds only what the Service needs to work: the session key, your language and theme, a coupon code that came with a link, and the sign-up source. We use no advertising or analytics cookies and no third-party trackers.

We do not sell your personal data or share it for advertising. We transfer it only as far as needed to provide the Service, to these recipients:

• Hosting: Oracle Cloud Infrastructure. Our servers and database are in Oracle’s Frankfurt (Germany) data centre.
• The exchange you connect (for example Bybit, OKX, Bitget, Binance): orders and read requests are sent to your exchange on your instruction and with your API key. The exchange’s own privacy policy applies.
• Telegram: if you link it, to deliver your notifications.
• Cloudflare (domain and e-mail routing) and Google (Gmail): so that e-mails you send to info@quantphi.app reach us.
• Authorised public authorities and courts: where the law requires it.

Because our servers are in Germany and some of the providers above are outside Turkey, your personal data is transferred abroad. These transfers are made in line with the conditions of KVKK Article 9. Requests to your exchange are sent on your instruction, to perform the service.

The results of bots running on the platform may be shown anonymously in the showcase and on the public results page: a randomly generated name, the coin, the exchange, the strategy settings (as ratios instead of amounts), the number of days and returns in percent. Your name, e-mail, account, amounts, the bot’s ID and dates are never shown; the cards are built so they cannot be linked to you. For questions or requests about this, write to info@quantphi.app.

• Account data is kept while your account is open.
• When you delete an exchange connection, its encrypted API keys are deleted with it.
• When your account is closed, your data is kept for the periods the law sets (for example the periods in tax and commercial law for payment and accounting records) and for the limitation periods of possible disputes, and then deleted, destroyed or anonymised.

By applying to the data controller you may:

• learn whether your personal data is processed;
• ask for information about it if it is;
• learn the purpose of the processing and whether the data is used for that purpose;
• know the third parties in Turkey or abroad it is transferred to;
• ask for it to be corrected if it is incomplete or wrong;
• ask for it to be deleted or destroyed under the conditions of KVKK Article 7;
• ask for corrections, deletions and destructions to be notified to the third parties it was transferred to;
• object to a result against you that arises from analysis solely by automated systems;
• claim compensation if you suffer damage from unlawful processing.

Send your application by e-mail to info@quantphi.app from the e-mail address registered in our system, or in writing to the data controller’s address above. State your name, your account’s e-mail address and your request clearly.

We answer within 30 days at the latest, free of charge. If the request involves a separate cost, the fee in the tariff set by the Personal Data Protection Board may be charged.

We store your API keys encrypted and your password as a one-way hash. The connection between you and the site is encrypted with HTTPS (TLS), and access to the servers and the database is limited to authorised people. No system is completely secure: creating your API keys without withdrawal permission limits the impact of any leak.

The Service is not meant for anyone under 18, and we do not knowingly process their data.

We may update this notice; the current version and its date are on this page. We announce important changes on the website or in the app.