Privacy Policy

1. Introduction

Welcome to Quant Mec Technologies (SSM Registration No: 003836548-H) ("we," "our," or "us"). We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our websites and products including SparkQuant AI (sparkquantai.com), QuantJin AI (quantjinai.com), and any other platforms we operate (collectively, the "Services").

2. Information We Collect

2.1 Account Information

When you create an account through our authentication provider (Clerk), we collect:

• Email address and name
• Authentication credentials (managed securely by Clerk)
• Profile information you choose to provide

2.2 Business Consultation Data (SparkQuant AI)

When you use SparkQuant AI's consulting system, we process:

• Consultation inputs: Business descriptions, industry information, and questions you provide during AI consulting sessions
• AI-generated outputs: Analysis reports, recommendations, financial projections, and PDF reports generated by our AI agents
• Session data: Conversation history within consulting sessions
• Cross-session memory: Business context stored for consultation continuity (can be cleared by you at any time)

Important: Do not submit trade secrets, financial account credentials, passwords, or other highly sensitive information through our AI consulting interface.

2.3 Payment Information

Payment processing is handled entirely by Stripe. We do NOT store your credit card numbers, bank account details, or other payment credentials. We only receive confirmation of transactions, subscription status, and the last four digits of your card for display purposes.

2.4 Automatically Collected Information

• Usage Data: Pages visited, features used, interaction patterns
• Device Information: Browser type, operating system, IP address
• Cookies: Session cookies for functionality and analytics

3. How We Use Your Information

• Provide and maintain our AI consulting and recommendation services
• Process subscription payments and send billing-related communications
• Maintain cross-session consultation memory for improved service continuity
• Generate and store PDF reports for your access
• Send technical notices, updates, and support messages
• Improve our AI models and develop new features
• Comply with legal obligations, including tax reporting requirements

4. Third-Party Service Providers

We use the following trusted third-party services:

• Clerk — Authentication and user management
• Stripe — Payment processing (PCI DSS compliant)
• Supabase — Database hosting and storage (encrypted at rest and in transit)
• Vercel — Frontend hosting and content delivery
• Railway — Backend application hosting
• OpenAI — AI language model provider for consulting analysis

5. Data Storage & Security

• Database encryption at rest and in transit (via Supabase)
• Row Level Security (RLS) ensuring users can only access their own data
• Secure authentication with Clerk (supports MFA)
• HTTPS encryption on all our websites

No method of transmission over the Internet is 100% secure. We encourage you to use strong passwords and enable multi-factor authentication where available.

6. Data Sharing

We do NOT sell, rent, or trade your personal data or business consultation data to third parties. Your business data submitted through SparkQuant AI is NOT used to train AI models.

We may share information only with service providers listed in Section 4, when required by Malaysian law, or in connection with any merger, acquisition, or sale of assets.

7. Your Rights

You have the right to:

• Access your personal data and consultation history
• Correct inaccurate data in your account
• Delete your account and associated data
• Clear your cross-session consultation memory at any time
• Export your consultation reports (PDF downloads)
• Withdraw consent for optional data processing

To exercise any of these rights, contact us at support@quantmec.com.

8. Data Retention

We retain your data for as long as your account is active. Upon account deletion, we remove your personal data within 30 days, except where retention is required by law (e.g., financial records for 7 years under Malaysian law).

9. Children's Privacy

Our Services are designed for business professionals and are not intended for anyone under 18.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify subscribed users of material changes via email.

11. Contact Us