Privacy Policy
Last updated: 8 May 2026 · Applies to all pizq users
Note: This policy is a working draft pending review by qualified legal counsel. It should not be treated as final until that review is complete and this notice is removed.
1. Who We Are
pizq operates the algorithmic trading platform at aiquant.pizq.com and the marketing website at pizq.com. For the purposes of GDPR, pizq is the data controller for personal data collected through the Platform.
Contact: hello@pizq.com
2. What Data We Collect
Account data
Email address, display name, and hashed password. Collected at registration and required to operate your account.
Broker credentials
If you connect a broker account, we store the credentials you provide. These are encrypted with AES-256-GCM before storage and are never accessible in plaintext by pizq staff. We store them solely to facilitate your broker connection.
Strategy files
Algorithm files you create or upload are stored in your account on AWS S3. You own this data. We store it to provide the service.
Usage and activity data
Backtest runs, AI agent interactions, billing events, and security-relevant actions (login, logout, password changes) are recorded in an audit log. This log is used for security monitoring, support, and fraud prevention.
Payment data
Payment processing is handled by Stripe. pizq does not store card numbers or bank details. We receive confirmation of payment and a Stripe customer ID only.
Technical data
IP addresses, browser type, and session tokens — collected automatically when you use the Platform and used for security and service operation.
3. How We Use Your Data
- To operate and provide the Platform (legal basis: contract performance)
- To send transactional emails — password resets, email verification, billing receipts (legal basis: contract performance)
- To detect and prevent fraud and security incidents (legal basis: legitimate interest)
- To comply with legal obligations (legal basis: legal obligation)
We do not use your data for advertising. We do not sell your data to third parties. We do not share your data except as described in Section 4.
4. Data Sharing
We share data only with the following third parties, and only as necessary:
- AWS — Cloud infrastructure for hosting the Platform and storing files
- Stripe — Payment processing
- Our AI infrastructure provider — AI processing for the AI Quant Agent (your messages to the agent are processed by our AI provider's API)
- Your connected broker — Order and account data transmitted as required to execute your strategies
We may disclose data where required by law or to protect the rights, property, or safety of pizq, our users, or the public.
5. Data Retention
We retain your account data for as long as your account is active. Backtest records and audit log entries are retained for a minimum of 12 months.
When you delete your account, we permanently delete your personal data within 30 days, except where we are required by law to retain it longer. Encrypted broker credentials are deleted immediately on account deletion.
6. Your Rights (GDPR)
If you are located in the European Economic Area, you have the following rights:
- Access — request a copy of your personal data
- Rectification — request correction of inaccurate data
- Erasure — request deletion of your account and data (Article 17)
- Restriction — request restriction of processing in certain circumstances
- Portability — request your data in a portable format
- Objection — object to processing based on legitimate interest
To exercise these rights, contact us at hello@pizq.com. We will respond within 30 days. You also have the right to lodge a complaint with your national data protection authority.
7. Security
We use industry-standard security measures to protect your data, including AES-256-GCM encryption for credentials, HTTPS everywhere, and AWS security controls. No system is perfectly secure, but we take data security seriously and maintain it as a priority.
8. Cookies
The Platform uses session cookies (HttpOnly, Secure) required for authentication. The marketing website (pizq.com) uses minimal, privacy-respecting analytics. We do not use advertising cookies or third-party tracking cookies.
9. Changes
We may update this policy. We will notify you of material changes by email or in-platform notice. The current version is always available at this URL.