Who and what this covers
This notice covers the qyu website, Atlas research features, account services and communications with the qyu team. For privacy questions or requests, contact hello@qyu.finance.
Following a source link, opening an external publication or using a third-party sign-in service takes you to services with their own privacy notices. This notice describes qyu’s use of information.
Information we handle
- Correspondence. Your email address, the page you contacted us from and information you include in messages to us. We also use technical request information, including IP addresses and timestamps, to limit automated or repeated submissions.
- Account details. Your email address, sign-in provider identifier and profile details you supply, such as name, country, date of birth or an optional phone number. Available fields depend on the registration flow. Passwordless sign-in uses an identity provider and a session token. Accounts using password-based sign-in store a password hash rather than the plaintext password. Do not send us your email or brokerage password.
- Portfolio and research information. Portfolio names, holdings, quantities, values and dates you enter or confirm, together with watched companies, saved searches, workspace items, questions, answers and feedback. You can explore public material without uploading a portfolio.
- Usage and device information. Pages and features used, browser and device information, approximate location derived from network information, error reports and security logs. If you enable device notifications, we process the delivery token and your notification preferences.
- Public-source records. Company names and identifiers, people’s professional roles, affiliations and disclosed relationships from sources such as company filings, corporate registries and public reporting.
Why we use it
We use account and research information to provide the features you request: signing in, preparing holdings for review, saving research, matching entities, generating explanations and showing information relevant to your interests or holdings. We use technical information to operate the service, investigate errors, measure performance and prevent abuse.
Registering creates your qyu account. It does not subscribe you to marketing emails.
Where a law requires a legal basis, we rely on providing a requested service or taking steps at your request; our legitimate interests in securing and improving the service, answering correspondence and making public-source research useful; consent for optional communications where required; and compliance with applicable legal obligations. The basis depends on the activity and the law that applies to it.
Relevance ranking may use your selected interests, holdings and feedback. qyu does not execute trades or make lending, employment or insurance decisions about you. Research outputs remain information for you to assess.
Imports and AI features
When you import a holdings file, qyu prepares proposed positions for you to review. The positions you confirm are saved to your portfolio. For consolidated account statement (CAS) PDFs, the file and optional document-opening password are processed during the import request; the portfolio store does not retain the PDF, password, PAN, folio or bank details extracted from it.
If you describe your holdings in text, that text is sent to the configured model provider to prepare a draft for your review.
Screenshot imports can send the selected images to an AI provider after file checks and image metadata removal. qyu does not save the original or processed screenshot in the portfolio store. This does not mean the provider has no processing logs or retention of its own.
AI-assisted research can send your question and relevant context to the model provider used for that feature. Context may include a stored research view, possible impact paths and portfolio relevance. Avoid including account credentials, identity documents or unrelated personal information in a question or upload.
AI features can use externally hosted or locally hosted models. Processing and retention depend on the feature and service configuration. We do not promise zero external processing or retention. Contact us before using an AI feature if your information is subject to restrictions on third-party processing.
Public company and people records
Atlas draws on corporate registries, regulatory filings, issuer disclosures and reporting to connect companies, officers and other relevant people. Sources include SEC filings, GLEIF records, national company registries and exchange disclosures.
A shared name does not establish that two records describe the same person. A relationship, public role or sanctions-related reference is not, by itself, evidence of wrongdoing. Coverage and identity resolution can be incomplete or out of date.
If a record is about you and is inaccurate, misidentified or includes information that should not be displayed, email us with the page or record reference and the correction you are requesting. We may ask for enough information to verify the request; please do not send a full identity document unless we have agreed a suitable way to handle it.
Cookies and browser storage
The product uses browser storage for preferences and navigation state, and authentication services use session technologies, including cookies, to keep you signed in.
The product uses aggregate analytics and performance measurement. The marketing website uses Cloudflare Web Analytics to count page views and visits through a browser script. These tools can use request-derived information for aggregate measurement without third-party advertising cookies. This is separate from sign-in cookies and ordinary server logs.
You can clear site storage and control cookies in your browser. Doing so may sign you out or reset preferences. The marketing website also stores the last successfully loaded public aggregate counts in your browser so it can show a dated fallback during an outage. This contains public totals, not account or portfolio data. The website does not use advertising cookies.
Retention and deletion
We keep information for the purpose it was collected, subject to security, legal and recordkeeping needs. There is no single retention period for all qyu data:
- Correspondence and email: records are held in delivery systems and the support inbox so we can respond. You can ask us to remove them or stop contacting you.
- Account and saved research: information is retained to provide your account and saved work. Where available, product controls let you delete portfolios, holdings, watchlists, saved searches and workspace items.
- Import material: CAS documents, opening passwords and screenshots follow the transient processing described above; confirmed positions remain until removed.
- Operational records: security and audit records may need to remain after a specific item is deleted to investigate abuse, meet legal duties or resolve a dispute. Provider records and backup copies can have separate retention cycles.
Deleting sign-in access does not automatically erase all stored research or portfolio information. For an account-wide deletion request, email hello@qyu.finance. We will explain any information that must be retained and the reason.
Your choices and rights
Depending on the law that applies, you may have rights to access or obtain a copy of your personal information, correct it, request deletion, restrict processing or receive information in a portable format. You can withdraw consent for optional communications without affecting processing already carried out.
You can object to processing based on legitimate interests, and to direct marketing. To exercise a right or stop optional emails, write to hello@qyu.finance with the subject “Privacy request” and describe what you need.
We may verify that a request concerns your information before acting on it. Rights can have legal exceptions; if one applies, we will explain it. You can also complain to the data protection authority where you live or another authority with jurisdiction. You do not have to contact us first to do so.
Security
qyu uses authenticated access, request limits and file checks to reduce misuse. Access to stored information is limited by service permissions. No online service can guarantee that information will never be lost, exposed or accessed without authorization.
Do not send trading credentials, one-time sign-in codes or brokerage passwords to qyu. Report a suspected exposure to hello@qyu.finance, including enough detail for us to locate the issue without sending another person’s private data.
qyu is not directed at children. If you believe a child has supplied personal information that should not be processed, contact us so we can review and address it.
Changes and contact
We update this notice when our services or data practices change. The date at the top identifies this version. For material changes affecting an existing account, we will provide a notice through the service or an appropriate contact channel.
Privacy requests, record corrections and questions can be sent to hello@qyu.finance. The terms of use explain the responsibilities and limits that apply when using qyu.