Privacy Policy

Last updated 13 June 2026

This Privacy Policy describes how Bond Solutions, s.r.o. ("Kvantrank," "we," "us," or "our") collects, uses, shares, and protects personal data when you visit https://www.kvantrank.com, use https://app.kvantrank.com, subscribe to paid plans, or otherwise interact with our services (collectively, the "Service"). We are established in the Slovak Republic, with our registered office at Pod sadom 1146/71, 010 04 Žilina.

Your use of the Service is also governed by our Terms of Service. Capitalized terms not defined here have the meanings given in the Terms.

Our Privacy Approach

  • Kvantrank is an analytics product for cryptocurrency hype and breakout signals. We collect only what we need to run the Service.
  • We do not sell your personal data.
  • We use reputable infrastructure providers for hosting, authentication, and payments.
  • We respect EU/EEA privacy rights and provide controls described below.

Personal Data We Collect

Depending on how you use the Service, we may collect:

  • Account and contact data: email address, account identifiers, subscription plan, and communications you send us (support, feedback, or bug reports).
  • Authentication data: magic-link tokens and session information processed through Supabase when you sign in to the app.
  • Payment data: billing status, subscription period, and limited payment metadata from Stripe. We do not receive or store full payment card numbers.
  • Product usage data: dashboard interactions, alert configurations, wallet addresses and labels you choose to track, API key references for BYOK plans (stored according to your plan settings), and similar settings you configure.
  • Technical and device data: IP address, browser type, device type, operating system, pages viewed, timestamps, referral URLs, and diagnostic logs needed for security and reliability.
  • Usage and analytics data: how you navigate and use the marketing site and app, including page views, feature interactions, session duration, and similar events collected through Google Analytics 4 and our hosting logs. On the marketing site, Google Analytics runs by default until you reject non-essential cookies in our banner. On the app, analytics run when you use the Service as described below.
  • Cookie and similar data: as described in our Cookie Policy, including your cookie consent choice on the marketing site and analytics cookies on the app.
  • Marketing preferences: whether you opted in to product emails and how you engage with them, where permitted by law.

We do not require your name, postal address, or government ID to create an account unless you voluntarily provide it in support correspondence.

How We Collect Personal Data

  • Directly from you when you register, subscribe, configure alerts, or contact us.
  • Automatically when you use the Service (logs, cookies, and similar technologies).
  • From service providers that help us operate the Service (for example, payment confirmation from Stripe).

How We Use Personal Data

We use personal data to:

  • provide, maintain, and secure the Service;
  • authenticate users and manage subscriptions;
  • process payments and send billing-related messages;
  • deliver alerts (email, Telegram, or other channels you enable);
  • respond to support requests and improve the product;
  • monitor abuse, fraud, and violations of our Terms;
  • measure traffic on the marketing site and product usage in the app to understand performance and improve features;
  • comply with legal obligations and enforce our agreements;
  • send product updates or marketing communications where permitted, with opt-out options.

We may create aggregated or de-identified statistics that do not identify individuals and use them for analytics, research, and service improvement.

Legal Bases (EEA, UK, and Switzerland)

Where the GDPR or equivalent law applies, we rely on:

  • Contract: to provide the Service you request and manage your subscription.
  • Legitimate interests: to secure the Service, prevent abuse, improve features, measure marketing-site traffic until you opt out of analytics in our cookie banner, and communicate about the product, balanced against your rights.
  • Consent: for optional marketing communications where required.
  • Contract and legitimate interests: for app usage analytics (Google Analytics measurement ID G-8JWGNLDZV3), security logging, and service improvement when you use the subscriber app under our Terms.
  • Legal obligation: where we must retain or disclose data to comply with law.

Analytics (Google Analytics 4)

We use Google Analytics 4, a service provided by Google Ireland Limited / Google LLC, to understand how visitors use the marketing site and how subscribers use the app. Google may process device and usage data and set cookies as described in our Cookie Policy.

  • Marketing site (https://www.kvantrank.com): analytics run by default. Click Reject non-essential on our cookie banner to turn them off. Measurement ID: G-7260H3C8MY.
  • App (https://app.kvantrank.com): analytics run when you access or use the subscriber application, including sign-in and dashboard pages. Measurement ID: G-8JWGNLDZV3. We do not show a separate cookie banner on the app; use of the Service after account creation is governed by these Terms and this Policy.

You can learn how Google uses data at policies.google.com/technologies/partner-sites . Google offers an optional browser add-on to opt out of Google Analytics at tools.google.com/dlpage/gaoptout .

Third-Party APIs and Data Sources

Kvantrank is a crypto hype and breakout analytics product. To produce scores, rankings, and dashboard signals, our automated pipeline queries public market data, social attention metrics, news, and on-chain activity from third-party APIs and data providers. These integrations power the Service; they do not give us access to your personal accounts on those platforms unless you separately sign in to Kvantrank or configure a BYOK (bring-your-own-key) integration as described below.

The following categories of third-party tools and APIs may be used in Kvantrank operations. Availability depends on configuration, API keys, and plan settings. Missing keys or failed requests skip that signal without stopping the Service.

  • Market and derivatives data: CoinGecko, CoinMarketCap, FreeCryptoAPI, Alpha Vantage, Binance Futures (public funding and open-interest endpoints), and alternative.me (Fear & Greed Index fallback).
  • Social and search attention: YouTube Data API v3 (public video title mentions), Google Trends search interest (via SerpApi or pytrends), Reddit (OAuth, public JSON, or Apify scrapers), Apify (X/Twitter, Reddit, influencer, and whale-alert scrapers), LunarCrush, and CryptoCompare social scores.
  • News and catalysts: CryptoPanic, Google News RSS, DuckDuckGo HTML search (conservative gap-fill for launch dates and news counts), and Google Gemini (AI catalyst summaries from public headlines when configured).
  • On-chain and whale data: Google BigQuery public datasets (on-chain activity and Hacker News mentions), Etherscan, Arkham Intelligence, Helius, Alchemy, TronGrid, Ethplorer, and other public chain explorers for balances, transfers, and holdings.
  • Service infrastructure: Vercel (hosting), Supabase (database and authentication), Stripe (payments), Resend (transactional email), Telegram (optional alert delivery), and Google Analytics 4 (usage measurement as described above).
  • Fonts and static assets: Google Fonts (Inter and Inria Serif) loaded on the app and marketing site.

Data retrieved from these sources is generally public or aggregated market and social signal data (for example, coin prices, mention counts, news headlines, and on-chain statistics). We use it to compute daily hype, momentum, and breakout scores shown in the dashboard. We do not sell this aggregated signal data as a separate product, and we do not use third-party API responses to identify individual visitors to Kvantrank unless you provide personal data directly to us (such as by creating an account).

BYOK (bring-your-own-key) plans: If you subscribe to a plan that lets you supply your own API keys, we store those credentials in your account settings (via Supabase) so our pipeline or your configured features can call the relevant provider on your behalf. You control which keys you add and can remove them in account settings. BYOK keys are deleted when you delete your account or remove them manually, as described under Account and Data Deletion below.

Each third-party provider has its own terms and privacy practices. We are not responsible for their availability, accuracy, or policies. Links to major provider privacy pages are included in the YouTube API Services section and in our Cookie Policy for analytics cookies.

YouTube API Services

Kvantrank uses YouTube API Services (YouTube Data API v3), provided by Google, as one optional social attention signal for shortlisted cryptocurrencies.

  • What we access: Our server-side pipeline searches public YouTube videos and reads metadata such as video titles and publish dates. We count how many recent videos mention a coin name or symbol in the title. This produces an aggregate "YouTube mentions" score on the dashboard.
  • What we do not access: We do not sign users into YouTube, request YouTube OAuth scopes from visitors, access private uploads, subscriptions, playlists, comments, or any YouTube account holder's personal profile data through the YouTube API.
  • What we store: We store aggregated daily mention counts and related scoring outputs in our database. We do not store YouTube user identifiers, channel owner data, or raw YouTube API responses beyond what is needed to compute those aggregates.
  • API key usage: YouTube API calls are made with a server-side API key operated by Kvantrank (or, on BYOK plans, a key you provide). End users do not grant YouTube permissions to Kvantrank through an OAuth consent screen.

By using Kvantrank, you acknowledge that our use of YouTube API Services is subject to the YouTube Terms of Service and the Google Privacy Policy .

You can review or revoke Google account permissions related to apps that access Google services at myaccount.google.com/permissions . Because Kvantrank does not use per-user YouTube OAuth, revoking access there affects other Google-connected apps you use, not a Kvantrank YouTube login (we do not offer one). To stop Kvantrank from processing your personal data, use the account deletion and data rights options below.

How We Share Personal Data

We may share personal data with:

  • Service providers who process data on our behalf under contract, including hosting (Vercel), database and authentication (Supabase), analytics (Google Analytics), payments (Stripe), email delivery (Resend), and Telegram for alert delivery when you enable it.
  • Professional advisers (lawyers, accountants, insurers) where necessary.
  • Authorities when required by law or to protect rights, safety, and security.
  • Business transferees in connection with a merger, acquisition, reorganization, or sale of assets, subject to appropriate safeguards.

We do not sell personal data.

International Transfers

We and our providers may process personal data in the European Economic Area, the United States, and other countries. Where required, we use appropriate safeguards such as Standard Contractual Clauses or equivalent mechanisms for transfers outside the EEA/UK.

Retention

We retain personal data for as long as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. When data is no longer needed, we delete or anonymize it within a reasonable period, subject to backup retention cycles.

Security

We implement technical and organizational measures designed to protect personal data, including access controls and encryption in transit. No method of transmission or storage is completely secure. You use the Service at your own risk and should protect your email account and devices.

If we become aware of a personal data breach likely to affect your rights, we will notify you and regulators as required by law.

Account and Data Deletion

You can request deletion of your Kvantrank account and associated personal data at any time. When we delete your account, we remove or anonymize personal data linked to it, including:

  • your email address and Supabase authentication record;
  • subscription and billing metadata we hold (Stripe retains payment records under its own retention rules);
  • saved settings, starred coins, alert configurations, portfolio trackers, and whale watchlists;
  • BYOK API keys and other credentials stored in your account settings;
  • Telegram alert linkages you enabled; and
  • support messages and feedback you sent us, where deletion is technically feasible and not overridden by a legal retention obligation.

Aggregated daily crypto signal data produced by our pipeline (such as public-market scores and YouTube mention counts) is not personal data about you and is not deleted when you delete your account, because it does not identify individual users.

How to request deletion: email legal@kvantrank.com from the address tied to your account with the subject line "Account deletion request," or use any in-product account deletion option we make available. We may ask you to verify ownership before processing the request. We aim to complete verified deletion requests within 30 days, or sooner where required by law.

After deletion, residual copies may remain in encrypted backups for a limited period before they are overwritten in the ordinary course of operations. We may retain minimal records where required for tax, accounting, fraud prevention, or legal compliance.

Your Rights

Depending on your location, you may have the right to access, rectify, erase, restrict, or object to certain processing of your personal data, and to data portability. Where processing is based on consent, you may withdraw consent at any time without affecting prior lawful processing. Account and data deletion is described in the section above.

To exercise your rights, contact legal@kvantrank.com. We may need to verify your identity. We will respond within the timeframes required by applicable law (generally one month under the GDPR).

If you are in the EEA, you may lodge a complaint with your local supervisory authority. In Slovakia, the supervisory authority is the Office for Personal Data Protection of the Slovak Republic (Úrad na ochranu osobných údajov SR): dataprotection.gov.sk.

Marketing Communications

We may send service-related messages (security, billing, material changes) that you cannot opt out of while you have an account. Marketing emails, where sent, include an unsubscribe link or instructions.

Children

The Service is not directed to anyone under 18. We do not knowingly collect personal data from children. If you believe a child has provided us personal data, contact us and we will delete it.

Cookies

See our Cookie Policy for details on cookies. The marketing site runs analytics by default and lets you opt out via the cookie banner. The app uses analytics cookies as part of the Service when you have an account.

Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be posted on https://www.kvantrank.com with an updated "Last updated" date. Where required, we will provide additional notice.

Contact

Data protection and privacy questions: legal@kvantrank.com.

Bond Solutions, s.r.o.
Pod sadom 1146/71, 010 04 Žilina, Slovak Republic
Business ID: 54171211
Tax ID: 2121586049
VAT ID: SK2121586049