Last updated: 18 July 2026
OpexQuant (“we”, “us”) provides a verified daily intelligence brief covering oil, markets, crypto and geopolitics. This notice explains what personal data we collect, why, and the rights you have under the UK GDPR and the EU GDPR. We are the data controller for the data described here.
Account data. When you create an account, our authentication provider Clerk processes your email address and sign-in credentials on our behalf. We use this to identify you and secure your session.
Payment data.Subscriptions are handled by Stripe. Your full card details never touch our servers, they are entered directly into Stripe’s secure checkout. We receive only limited billing metadata (for example, subscription status, plan and the last four digits of your card) needed to service your account.
Cookies & consent. We store your cookie choice and essential session cookies. Non-essential and analytics cookies are only set with your consent. See our Cookie Policy for the full breakdown.
Analytics. With your consent, we use privacy-respecting analytics to understand aggregate, non-identifying usage so we can improve the product.
Communications. If you contact us or opt into emails, we process the message and email address you provide.
Google Calendar (optional). If you choose to connect your Google Calendar, you grant access to the Google Calendar eventsscope so we can add and update OpexQuant’s events on your calendar. We store only an OAuth refresh token to keep those events in sync. We do not read, collect or store your existing events or other calendar data, and you can disconnect at any time.
• Contract — to provide your account, deliver the brief and process your subscription.
• Consent — for non-essential cookies, analytics and marketing email, withdrawable at any time.
• Legitimate interests — to secure the service, prevent fraud and improve the product.
• Legal obligation — to keep records required by tax and accounting law.
We keep account data for as long as your account is active. If you close your account we delete or anonymise personal data within a reasonable period, except where we must retain limited billing records to meet legal and accounting obligations (typically up to six years).
Under the UK/EU GDPR you have the right to access your data, to rectification, to erasure (“right to be forgotten”), to restrict or object to processing, to data portability, and to withdraw consent at any time. To exercise any of these, email privacy@opexquant.com. You also have the right to lodge a complaint with your supervisory authority, in the UK, the Information Commissioner’s Office (ICO).
We share data only with processors who help us run the service, under appropriate agreements:
• Clerk — authentication and account management.
• Stripe — payment and subscription processing.
• Supabase — database and secure application storage.
• Resend — transactional and (with consent) marketing email delivery.
• Vercel — hosting and content delivery.
• Google — Google Calendar API, used only if you connect your calendar, to add OpexQuant’s events.
Some processors may transfer data outside the UK/EEA. Where they do, transfers are protected by appropriate safeguards such as Standard Contractual Clauses.
OpexQuant’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We request the Google Calendar events scope solely to add and update OpexQuant’s events on your calendar. We do not use this data for advertising, we do not sell it, and we do not transfer it to others except as needed to provide this feature or as required by law. You can revoke access at any time from your Google Account permissions page.
Questions about this policy or your data? Email privacy@opexquant.com.
Analysis & education only, not investment advice.