Privacy Policy

What We Collect

The information we collect depends on which products and features you use. We adhere strictly to the principle of data minimisation — collecting only what is necessary to operate, maintain, and secure our services:

• —Account information: Email address and authentication identifiers when you create an account for the TV Signal Forwarder extension or any GQuant service (managed via Supabase).
• —Payment data: Payments are processed directly through Paystack. GQuant does not receive, store, or process debit/credit card numbers, bank account details, or PINs. We receive only a unique transaction reference, billing status, and associated registered email.
• —Configuration data: Webhook URLs, bot tokens, and alert parameters you enter when configuring GQuant tools. In our browser extension, this data is stored locally in your browser storage and is never uploaded to GQuant backend servers.
• —Usage & Diagnostics: Anonymised diagnostic logs, error traces, and interaction metrics used exclusively to maintain reliability and resolve technical issues.
• —Chart screenshots: Screenshots captured by the TV Signal Forwarder are processed locally inside your browser runtime and forwarded directly to the endpoints you configure (e.g. Telegram or Discord). GQuant servers do not intercept, view, or store these screenshots.
• —Support Communications: Correspondence, inquiry details, and bug reports sent to our support email (gquantlive@gmail.com) to assist you and maintain service history.

Legal Basis for Processing (NDPA 2023)

Under Section 25 of the Nigeria Data Protection Act (NDPA) 2023 (as well as Article 6 of the GDPR for users in the UK/EEA), every processing activity conducted by GQuant is grounded in a valid lawful basis:

• —Performance of a Contract: Processing necessary to deliver the software, authenticate your licence, provide product features, and maintain your subscription.
• —Consent: Where you have provided clear, affirmative consent for specific optional communications or features, which you may withdraw at any time.
• —Legitimate Interests: Securing our systems, detecting fraud, debugging software defects, and improving application stability, provided such processing does not override your fundamental rights.
• —Legal & Regulatory Obligations: Maintaining tax, accounting, and transaction records in compliance with Nigerian laws and regulatory directives.

How We Use Your Data

GQuant processes your information solely for the following legitimate purposes:

• —Authenticating users and managing subscription/licence statuses
• —Processing payment receipts and activating paid product tiers
• —Providing customer support, debugging help, and responding to inquiries
• —Delivering critical service notices, security updates, and billing confirmations
• —Complying with statutory reporting and legal requirements under Nigerian law

Zero Data Monetisation: GQuant does not sell, rent, lease, or trade user data to third-party data brokers or marketing agencies under any circumstances.

Data Retention & Record of Processing (ROPA)

In compliance with the NDPA 2023, GQuant maintains a comprehensive Record of Processing Activities (ROPA) documenting our data flows, retention schedules, and security safeguards.

Account credentials and subscription metadata are retained for as long as your account remains active. Financial transaction references are retained for up to 7 years to satisfy Nigerian statutory accounting and tax regulations. When an account is closed or deleted, personal data not required for statutory compliance is securely erased or anonymised within 30 days.

Cross-Border Data Transfers

To deliver cloud-based authentication and reliable hosting, GQuant utilises enterprise infrastructure providers whose servers may be situated outside Nigeria (e.g. Supabase and Vercel in the EU and US).

In compliance with Part VII (Cross-Border Data Transfers) of the NDPA 2023, GQuant ensures that all transfers outside Nigeria are governed by appropriate legal safeguards, including standard contractual clauses, Data Processing Agreements (DPAs) with enterprise cloud vendors, and strict encryption at rest and in transit (AES-256 / TLS 1.3).

Third-Party Sub-Processors

GQuant relies on established service providers to deliver software functionality. Each provider operates under contractual data protection terms:

Your Rights as a Data Subject

Under the Nigeria Data Protection Act 2023 (Sections 34–38) and international privacy laws, you have the right to:

• —Right of Access: Request confirmation and copies of your personal data being processed.
• —Right to Rectification: Request correction of inaccurate, outdated, or incomplete records.
• —Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data when no longer required for legitimate or statutory purposes.
• —Right to Restriction & Objection: Object to or restrict specific processing operations based on legitimate interests.
• —Right to Data Portability: Request transmission of your personal data in a structured, commonly used machine-readable format.
• —Right to Withdraw Consent: Withdraw previously given consent at any time without impacting prior lawful processing.

To exercise any statutory right, contact us at gquantlive@gmail.com. Requests are processed within 30 days free of charge, subject to appropriate identity verification.

Breach Notification (72-Hour Rule)

In compliance with Section 40 of the NDPA 2023, in the event of a personal data breach likely to result in risk to the rights and freedoms of data subjects, GQuant will notify the Nigeria Data Protection Commission (NDPC) within 72 hours of becoming aware of the incident. Where the breach poses a high risk to individuals, affected users will also be notified without undue delay with actionable mitigation steps.

Regulatory Compliance & Commission Oversight

GQuant operates as a designated Data Controller in Nigeria. In compliance with NDPC directives, GQuant conducts periodic Data Protection Impact Assessments (DPIAs) and participates in mandatory annual Data Protection Compliance Audit Returns (CAR) facilitated by licensed Data Protection Compliance Organisations (DPCOs).

If you believe your data protection rights have not been adequately respected, you have the right to lodge a formal complaint with the supervisory authority:

Age Restriction & Minors

GQuant products, software tools, and websites are designed exclusively for individuals aged 18 years and above (or the legal age of majority in your jurisdiction). We do not knowingly collect or process personal data relating to children. If we discover that personal data of a minor has been collected without verifiable parental consent, it will be permanently purged immediately.

Contact Our Privacy Team

For questions regarding this policy, data rights requests, or NDPA compliance matters, reach us at:

Privacy FAQs