Privacy Policy

1. What we collect

When you use ValQ via Telegram, web app, or mobile app, we collect:

• Telegram ID and username — to identify your account and deliver results
• Email address — only if you register via email on the web app or waitlist
• Valuation history — tickers you've valued, timestamps, and quantum outputs, so we can show your history and track accuracy
• Usage counters — daily and monthly report counts for plan enforcement
• Subscription status — your plan, billing dates, and payment provider reference IDs (not card numbers)
• Watchlist and alerts — tickers you've chosen to monitor

2. What we do not collect

• Credit card or banking details — payments processed by Stripe or PayPal directly
• Your portfolio value or actual investment positions
• Location data
• Device identifiers beyond what your browser sends in normal HTTP requests
• Any data you don't explicitly provide by using the bot or web app

3. How we use your data

• To deliver valuation results to you
• To enforce plan limits (free tier caps, monthly counters)
• To send you alerts and watchlist notifications you've opted into
• To send the daily morning brief if you're on Pro or Fund
• To calculate and publish aggregate accuracy statistics (no individual data)
• To improve the quantum models based on aggregate usage patterns

4. Data storage

Your data is stored in a PostgreSQL database hosted on Railway's infrastructure in the United States. Railway's security practices and uptime are described at railway.app/security.

Valuation snapshots are retained for 12 months for accuracy tracking purposes, after which they're deleted or anonymised.

5. Third-party services

ValQ uses the following third-party services:

• Telegram — message delivery and user authentication
• Anthropic (Claude API) — AI-generated narrative analysis
• Financial Modeling Prep — financial data
• Open Quantum / IQM / IonQ — quantum computing infrastructure (anonymised job data only)
• Stripe — payment processing (we receive only a customer reference ID, not card details)
• Railway — cloud infrastructure

None of these providers receive your personal data beyond what's necessary for their specific function.

6. Data sharing

We do not sell, rent, or share your personal data with third parties for marketing purposes. We will share data only if required by law or with your explicit consent.

7. Your rights

You have the right to:

• Request a copy of all data we hold about you
• Request deletion of your account and all associated data
• Opt out of the morning brief at any time (just stop using the Pro plan or message the bot)
• Request correction of any inaccurate data

To exercise any of these rights, message @ValQ_Official_Bot on Telegram or email us at [email protected].

8. Cookies

The web app uses a single session token stored in your browser's localStorage to keep you logged in. We don't use tracking cookies or third-party advertising pixels. See section 9 for the privacy-friendly visit statistics we keep on our own server.

9. Website visit statistics and server logs

To understand which pages are visited and whether search engines and AI crawlers can read our public pages, ValQ keeps a minimal log of page requests. This runs on our own server: no third-party analytics service or tracking pixel is involved, and no cookie is set for it.

Each log entry contains only:

• the time of the request and the result (for example "page found");
• the page address without anything after a "?" (so search terms, tokens and keys in links are never kept), with private link codes replaced by a placeholder;
• the website you came from, as a domain name only;
• whether the request looks like a phone, tablet or computer, or like an automated crawler (and which one, such as a search or AI crawler);
• a daily visitor code.

The visitor code is a one-way scrambled value calculated from your IP address, your browser's identification text and the date, using a secret key held only by us. We do not store your IP address or your browser's identification text. Because the date is part of the calculation, the same person gets a different, unlinkable code every day, so we cannot follow you from one day to the next or build a profile of you; we can only estimate how many different visitors a page had on a given day.

Nothing is recorded if your browser sends a Do Not Track or Global Privacy Control signal. Entries are deleted automatically after 180 days. Calls the app makes to our API after a page has loaded are not part of this log. The statistics are used only to understand site traffic, to find and fix problems, and to see whether crawlers can reach our content; they are not used for advertising and are not shared with third parties.

10. Children

ValQ is not intended for users under 18. We don't knowingly collect data from minors.

11. Changes to this policy

We'll notify users via the Telegram bot if we make material changes to this policy. The current version is always at valq.app/privacy.

12. Contact

Privacy questions: @ValQ_Official_Bot on Telegram.