OpexQuantOpexQuantLast updated: 4 October 2026
OpexQuant (“we”, “us”) provides a verified daily intelligence brief covering oil, markets, crypto and geopolitics. This policy explains what personal data we collect, why we collect it, who we share it with, and the rights you have under the UK GDPR, the Data Protection Act 2018, the Privacy and Electronic Communications Regulations (PECR) and the EU GDPR.
The data controller is Mohammad Zahid Shaik, trading as OpexQuant, United Kingdom. You can contact us about anything in this policy at research.mshaik@opexquant.com.
Account and sign-in data. When you create an account, our authentication provider Clerk processes your email address, name (if given), profile picture (if given) and your sign-in details on our behalf. We never see or store your password. We keep your email address and an account identifier so we can recognise you and secure your session.
If you sign in with Google. Google shares your name, email address, profile picture and Google account identifier with us (through Clerk), so we can create and recognise your account. That is all the sign-in provides: we do not receive access to your Gmail, contacts, Drive, calendar or any other Google data through sign-in.
Newsletter. If you give us your email address in the newsletter box, we store it so we can send you the digest. If you have an account you receive the daily report by email; if you only gave us an address you receive a short weekly digest. Every email carries an unsubscribe route.
Messages to us. If you use the contact form or email us, we process your name, email address and message to reply to you.
Google Calendar (optional). Only if you choose to connect it, you grant the Google Calendar events permission so we can add OpexQuant’s events watchlist to your calendar. We store an access (refresh) token to keep those events up to date. We only ever list, create or delete events that carry an OpexQuant tag, those we created ourselves. We do not read, collect or store any of your other events or calendar details. You can stop this at any time with the “Disconnect Google Calendar” button in Account settings (it removes the events we added and revokes our access), or by revoking access in your Google Account.
Technical data. Like most websites, our hosting provider records your IP address, browser type and the pages requested in security and server logs, used to run and protect the service. The Gulf Watch map loads map tiles from Esri, which therefore receives your IP address and browser details when the map is displayed.
Cookies and similar technologies. We use strictly necessary cookies (sign-in and payment security) and one local-storage item that remembers your cookie choice. At the date above we run no analytics, advertising or tracking cookies. See our Cookie Policy.
What we do not do. We do not sell your personal data, show advertising, build advertising profiles, or knowingly collect special-category data (such as health or political opinions).
No payments. OpexQuant is free to use. We take no payments and hold no card or billing details, so there is no financial data about you in our systems at all.
• Contract — to create and run your account and deliver the content you asked for.
• Consent — for the newsletter, for connecting Google Calendar, and for any non-essential cookies we may add in future. You can withdraw consent at any time.
• Legitimate interests — to keep the service secure, prevent fraud and abuse, fix faults and answer your messages.
• Legal obligation — to keep the billing and accounting records the law requires.
OpexQuant’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
• We use Google sign-in data only to create and recognise your OpexQuant account.
• We request the Google Calendar events permission only to add, update and remove OpexQuant’s own events on your calendar.
• We do not use Google user data for advertising, we do not sell it, and we do not transfer it to anyone except as needed to provide these features, to comply with the law, or for security.
• No person at OpexQuant reads your Google data unless you ask us to, it is needed for security or abuse investigations, or the law requires it.
You can revoke OpexQuant’s access at any time from your Google Account permissions page. You can also email research.mshaik@opexquant.com and we will delete the token we hold for your calendar.
We share data only with providers who help us run the service, under data-protection terms:
• Clerk — sign-in and account management.
• Google — if you choose “Sign in with Google”, and for Google Calendar if you connect it.
• Supabase — our database and application storage.
• Resend — sending email.
• Vercel — hosting and delivery of the site.
• Esri — map tiles for Gulf Watch (receives your IP address when the map loads).
We may also disclose data if the law requires it, or to protect our rights, our users or the service.
Some of these providers process data outside the UK and the European Economic Area, including in the United States. Where they do, the transfer is protected by an adequacy decision or by appropriate safeguards, such as the UK International Data Transfer Agreement or Addendum and the EU Standard Contractual Clauses.
• Account data — while your account is open. When you delete your account, your profile, saved settings and calendar connection are removed from our database.
• Newsletter — until you unsubscribe.
• Messages to us — only as long as needed to deal with your enquiry and any follow-up.
• Server logs — for a short period set by our hosting provider, for security and fault-finding.
Under the UK and EU GDPR you have the right to be told what we hold about you and to get a copy; to correct it; to have it erased; to restrict or object to our use of it; to receive it in a portable format; and to withdraw consent at any time without affecting what we did before. To use any of these rights, email research.mshaik@opexquant.com. We aim to reply within one month.
Deleting your account. You can delete your account yourself: open your profile menu, choose “Account settings” and then “Delete account”. This removes your sign-in, profile, saved settings, calendar connection and newsletter signup. You can also ask us to do it by email.
Unsubscribing. Reply to any newsletter email, or write to us, and we will remove you.
We protect your data with encryption in transit, access controls on our systems, database access rules and secret keys held only on the server. No online service is perfectly secure, so please keep your sign-in details private.
Our briefs, summaries and commentary are produced with the help of automated analysis of public data sources. We do not feed your personal data into that analysis. We do not make automated decisions about you that have legal or similarly significant effects.
The service is for people aged 18 or over. We do not knowingly collect data from children. If you think a child has given us data, tell us and we will delete it.
Please contact us first so we can put things right. You also have the right to complain to the UK Information Commissioner’s Office (ico.org.uk, 0303 123 1113) or to the data protection authority in the EU country where you live.
We will update this policy when our practices change and show the date above. If a change is significant we will tell you on the site or by email.
Questions about this policy or your data? Email research.mshaik@opexquant.com.
Analysis & education only, not investment advice.