Privacy Notice
QuantCancha · Last updated: September 2026
This is a translation. QuantCancha is operated from Mexico and the binding version of this notice is the Spanish one, Aviso de Privacidad, which is the version required by Mexican data protection law. This English text is provided for convenience. If the two versions differ in meaning, the Spanish version governs.
1. Identity and address of the controller
QuantCancha, with its address in Comondú, Baja California Sur, Mexico, hereinafter "QuantCancha", is the controller responsible for processing your personal data, under the Federal Act on the Protection of Personal Data Held by Private Parties published in Mexico's Official Gazette on 20 March 2025 and in force since 21 March 2025.
For any matter relating to this notice: hola@quantcancha.com.
2. What data we collect
QuantCancha collects only the following personal data:
| Data | Source | Required |
|---|---|---|
| Full name | You, when creating your account | Yes |
| Email address | You, when creating your account | Yes |
We collect no other personal data. We do not ask for your address, phone number, date of birth, or any national identification number or official ID. We do not collect sensitive personal data under any circumstances.
We automatically record technical data strictly necessary to operate and protect the service — IP address, date and time of access, and application errors. These logs are kept for a limited period for security and diagnostic purposes, and are not used to build commercial profiles.
3. Payment data: we do not have it
QuantCancha never receives, processes or stores bank card information.
Subscription billing is handled entirely through Stripe, Inc., a payment processor certified under the PCI DSS Level 1 standard. When you subscribe, you enter your card details directly into Stripe's infrastructure. That information is tokenized at the moment of capture: Stripe replaces it with an identifier from which the card number cannot be reconstructed.
Out of that whole process, QuantCancha receives only:
- Confirmation that a payment was approved or declined.
- The subscription identifier generated by Stripe.
- The email address associated with the payment, in order to link it to your account.
At no point do we have access to your card number, its expiry date, its security code or your bank details. Not even in encrypted form: that information never reaches our servers.
Stripe's processing of your payment data is governed by its own policies,
available at https://stripe.com/privacy.
4. What we use your data for
Your data is processed for the following primary purposes, necessary to provide the service:
- To create, identify and administer your user account.
- To authenticate your access to the platform.
- To link your active subscription to your account and enable the features corresponding to your plan.
- To send you essential operational communications: registration confirmation, password recovery, notices about the status of your subscription, and changes to this notice or to the Terms and Conditions.
- To handle your support requests and the exercise of your rights.
Additionally, and only if you expressly and separately consent, we may process your email address for the following secondary purpose:
- To send you information about new QuantCancha features or content.
Declining this secondary purpose does not affect in any way your access to the service or the fulfilment of the primary purposes. You may withdraw that consent at any time by writing to hola@quantcancha.com.
5. Who we share your data with
QuantCancha does not sell, rent or trade your personal data.
Your data is hosted and processed through the following infrastructure providers, which act as processors and are contractually bound to handle it only in accordance with our instructions:
| Provider | Function | Data it accesses |
|---|---|---|
| Supabase, Inc. | Authentication and account database | Name and email address |
| Fly.io, Inc. | Application hosting | Technical connection data |
| Stripe, Inc. | Payment processing | Payment data (which we never see) |
These providers may store information on servers located outside Mexican territory. By using QuantCancha you acknowledge this circumstance, which is inherent to the operation of an online service.
Beyond the above, we would disclose your data only upon a duly founded and substantiated request from a competent authority.
6. Your rights over your data
Under Mexican law these are known as ARCO rights. You have the right to Access the personal data we hold about you, to Rectify it when it is inaccurate or incomplete, to Cancel it when you consider it is not needed for the purposes described in this notice, and to Object to its processing for specific purposes.
How to exercise them. Send a request to hola@quantcancha.com with the subject "ARCO rights", including:
- Your full name and an email address to receive the response.
- A document proving your identity — or your legal representation, where applicable.
- A clear description of the data the request concerns.
- Anything else that helps us locate your data.
Our commitment. We will acknowledge your request within 5 business days and communicate our decision within a maximum of 20 business days, in accordance with the deadlines set by law. If the request is granted, it will take effect within 15 business days after that communication.
Exercising these rights is free of charge; only justified shipping or reproduction costs may be passed on, on the terms set by law.
Limitations. Cancelling your identifying data means permanently closing your account and losing access to the platform, since without a name and an email address a user cannot be authenticated. We will retain the information strictly necessary to meet tax and accounting obligations arising from payments made, for the periods required by applicable law.
7. Withdrawing consent
You may withdraw your consent to the processing of your data at any time, using the same procedure described in the previous section. Please note that withdrawing it with respect to the primary purposes is equivalent to requesting termination of the service.
8. Security measures
QuantCancha applies reasonable administrative, technical and physical measures to protect your data against damage, loss, alteration, destruction or unauthorized use. Among them:
- Passwords are stored encrypted using irreversible derivation functions. No one at QuantCancha can read your password, not even whoever administers the platform.
- All traffic between your browser and the platform is encrypted with TLS.
- Infrastructure credentials are kept in encrypted secret stores, never in the source code or in the repository.
No security measure is infallible. In the event of a breach that significantly affects your economic or moral rights, we will inform you without delay at the email address associated with your account.
9. Use of cookies and visit measurement
QuantCancha uses only local storage and the technical cookies strictly necessary to keep your session signed in. We do not use advertising, third-party or cross-site tracking cookies.
To know how many people visit the site and where they arrive from, we use Cloudflare Web Analytics. This tool sets no cookies and builds no fingerprint of your browser, so it cannot follow you across sites or recognise you on a later visit. It records, in aggregate, the page viewed, the address you reached it from, the country, the browser and device type, and the load time.
Cloudflare is not a new third party in this relationship: it is the provider that already serves this site, so its servers already handle every request you make. The measurement brings no additional company into it.
Typefaces are served from this same domain. Until September 2026 they were requested from Google Fonts, which sent your IP address to Google on every visit to any page, including this one. That stopped: the files now come from quantcancha.com and your browser does not contact Google.
10. Changes to this notice
This notice may be amended to reflect changes in legislation, in our practices or in the service. Any material change will be communicated by email and published at this same address, with the update date visible at the top of the document.
11. Supervisory authority
If you believe your right to the protection of personal data has been violated, you may file a complaint with the Secretaría Anticorrupción y Buen Gobierno (Mexico's Ministry for Anti-Corruption and Good Governance), through its Directorate for Complaints and Verification in the Private Sector, which took over the functions previously held by the now-extinct INAI in matters of personal data held by private parties.
By creating a QuantCancha account you declare that you have read and understood this Privacy Notice, and you give your consent to the processing of your personal data for the primary purposes described here.
Reminder: this is a convenience translation. In case of any discrepancy, the Spanish version at /privacidad.html governs.