Privacy Policy

1. Introduction

Spekule Ltd ("Spekule," "TextToQuant," "TTQ," "we," "us," or "our") operates texttoquant.com and provides natural language backtesting tools for trading strategies across cryptocurrency and other financial markets (the "Service"). Spekule Ltd is responsible for the personal information described in this policy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our Service.

2. Information We Collect

2.1 Information You Provide Directly

We collect information that you voluntarily provide to us, including:

• Account Information: Name, email address, username, password (stored by our authentication provider, never in plain text)
• Payment Information: Billing details, processed by Whop (card payments) or NOWPayments (cryptocurrency payments). We never receive or store full card numbers
• Trading Queries: Natural language strategy descriptions you submit, and the strategies, backtests and settings you save
• Communications: Messages, feedback, and support requests

2.2 Information Collected Automatically

When you access our Service, we automatically collect:

• Device Information: IP address, browser type, operating system
• Usage Data: Pages visited, features used, time spent
• Cookies: We use cookies, pixels, and similar tracking technologies
• Trading Data: Backtest results and analysis outputs

2.3 Information from Third Parties

We may receive information from:

• Sign in providers: if you sign in with Google or X, we receive your email address and basic profile information from that provider
• Advertising Partners, only after you accept non essential cookies: Meta, Reddit, Google Ads and X (see section 8)
• Payment Processors: Whop and NOWPayments, which tell us whether a payment succeeded, renewed, was refunded or was disputed

3. How We Use Your Information

3.1 Service Delivery

• Providing and maintaining the backtesting tool
• Processing your trading strategy queries, including sending the text of your strategy to our AI provider to be translated into backtest rules
• Generating backtest reports and analysis
• Authenticating your account and preventing fraud

3.2 Communication

• Responding to your inquiries and support requests
• Sending service announcements and updates
• Providing educational content and community updates
• Marketing communications (with your consent)

3.3 Improvement and Analytics

• Analyzing usage patterns to improve the Service
• Developing new features and functionality
• Conducting research and analysis
• Troubleshooting technical issues

3.4 Marketing and Advertising

• Displaying targeted advertisements on third party platforms (only after you accept non essential cookies)
• Measuring advertising effectiveness
• Building custom and lookalike audiences
• Retargeting visitors who have shown interest in our Service

4. How We Share Your Information

We may share your information in the following circumstances:

4.1 Content You Choose to Publish

When you share a backtest by link or list one in the public gallery, that report is displayed together with the name of the account that published it. If you have set a username on your profile, that username is shown. If you have not set a username, your account email address is shown instead. You can set or change a username at any time on your profile, and you can revoke a share link or unlist a gallery entry at any time. Social preview images generated for shared links never contain an email address.

4.2 Service Providers

We share information with the following service providers, who process it on our behalf and only for the purpose listed:

• OpenAI: translating the strategies you describe in plain English into backtest rules, and powering the AI assistant features. It receives the text you submit and related strategy context
• Supabase: sign in, authentication and our main database
• Fly.io: hosting for our backend servers
• Vercel: hosting for our website, and Vercel Analytics for aggregate page and performance measurement
• Redis Cloud: the job queue that runs backtests
• Amazon Web Services (SES): sending account and billing emails
• Sentry: error monitoring, which can include technical details such as your IP address, browser and account identifier when something fails
• Whop: card payments and subscriptions
• NOWPayments: cryptocurrency payments

We fetch public market data from exchanges and data providers such as Binance and CoinGecko. These requests do not include any personal information about you.

4.3 Advertising Partners

Only after you accept non essential cookies, we share limited information with advertising platforms:

• Meta (Facebook): conversion tracking, custom audiences
• Reddit: conversion tracking, ad performance measurement
• Google Ads: conversion tracking and ad measurement (we do not use Google Analytics)
• X (Twitter): conversion tracking, ad performance measurement

Besides the browser pixels, we send some of these conversion events from our own servers (the Meta, Reddit and Google Ads conversion APIs). Those events can include a hashed (SHA 256) email address, your IP address and your browser user agent. They are sent only after you have accepted non essential cookies.

5. Your Privacy Rights

5.1 Rights for California Residents (CCPA/CPRA)

If you are a California resident, you have the following rights:

• Right to Know: Request disclosure of personal information we collected
• Right to Delete: Request deletion of personal information
• Right to Correct: Request correction of inaccurate information
• Right to Opt Out: Opt out of sale or sharing (Note: We do not sell personal information)
• Right to Non Discrimination: Not be discriminated against for exercising rights

5.2 Rights for EEA/UK Residents (GDPR)

If you are in the European Economic Area or United Kingdom, you have the following rights:

• Right of Access: Access your personal data
• Right to Rectification: Correct inaccurate personal data
• Right to Erasure: Request deletion ("right to be forgotten")
• Right to Data Portability: Receive your data in a portable format
• Right to Object: Object to processing for direct marketing
• Right to Lodge a Complaint: File a complaint with a supervisory authority

5.3 Self Service Export and Deletion

You do not need to ask us for the two most common requests. In your account settings, under Profile, you can download a copy of your account data as a file, and you can permanently delete your account. Deleting your account removes your profile, strategies, backtests and stored run files, and cannot be undone.

6. Data Retention

We keep your personal information while your account is open, and for as long as needed to:

• Provide you with the Service
• Comply with legal obligations
• Resolve disputes and enforce agreements

7. Data Security

We implement reasonable security measures to protect your information, including:

• Encryption of data in transit (HTTPS), and encryption at rest provided by our hosting and database providers
• Access controls and authentication
• Error monitoring and audit logging of administrative actions

8. Cookies and Tracking Technologies

8.1 Types of Cookies We Use

• Essential Cookies: Necessary for authentication and security
• Analytics Cookies: Help us understand user behavior
• Advertising Cookies: Used to deliver relevant ads
• Preference Cookies: Remember your settings
• Affiliate Attribution Cookie (ttq_ref): Set for 90 days when you arrive through an affiliate or referral link, so the referrer can be credited if you subscribe. Written only after you accept non essential cookies

8.2 Third Party Tracking

We use the following third party tracking technologies:

• Meta (Facebook) Pixel and Conversions API: Conversion tracking and ad targeting
• Reddit Pixel/CAPI: Conversion tracking and ad performance
• Google Ads tag and Conversions API: Conversion tracking and ad measurement. We do not run Google Analytics
• X (Twitter) Pixel: Conversion tracking and ad performance
• Vercel Analytics: Aggregate page and performance measurement for our own site

8.3 Opt Out Options

To opt out of interest based advertising:

• Facebook: www.facebook.com/settings/?tab=ads
• Google: www.google.com/settings/ads
• X (Twitter): x.com/settings/ads_preferences
• Reddit: www.reddit.com/settings/privacy
• NAI Opt Out: www.networkadvertising.org/choices

9. Children's Privacy

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that are different from the laws of your country.

Our service providers listed in section 4 process data in the United States and other countries. Where you are in the EEA or UK, we rely on the transfer safeguards those providers offer, such as Standard Contractual Clauses.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last Updated" date
• Sending you an email notification (for material changes)
• Displaying a prominent notice on our Service

Your continued use of the Service after changes become effective constitutes acceptance of the revised Privacy Policy.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us: