プライバシーポリシー

発行 StrategyQuant s.r.o., ID No.: 04000498, with its registered seat at Korunní 2569/108, Vinohrady, 101 00 Prague, Czech Republic, registered in the Commercial Register maintained by the Municipal Court in Prague, file No. C 241239 (hereinafter referred to as “私たち”または“コントローラー”または“StrategyQuant”).

当社は、お客様の個人情報の保護を非常に重要視しています。本プライバシーポリシーでは、個人情報を処理する目的、法的根拠、およびその方法について説明します。また、お客様のプライバシーに関する権利と、その行使方法についても定めています。.

If you have any questions about how we process your Personal Data, please contact us by email at [email protected].

一部の個人データは売買契約の履行に必要であり、一部は当社の正当な利益に基づいて処理されます。また、法令（会計処理など）により個人データの処理が義務付けられている場合もあります。当社に代わって個人データにアクセスできる処理委託者を起用する場合があります。必要な場合には、個人データを処理する前に同意を求めます。.

このプライバシーポリシーを読みやすくするため、以下の定義語を使用しています：

1. HOW WE APPROACH THE PROCESSING OF PERSONAL DATA

プライバシーは最優先事項です。弊社では、サービスを提供するために必要な個人データのみを要求し、GDPR基準に準拠して処理します。.

お客様が当社にデータを委託される場合、当社はお客様に適用されるデータ保護法に従ってそのデータを取り扱います。当社の個人データの処理は、処理が行われる各国の特定の法的要件に合わせて調整される場合がありますが、いかなる場合でもGDPRが当社の最低基準となります。個人データに関するお客様の権利については、以下に記載されています。.

We also use artificial intelligence (AI) in the processing of Personal Data in justified cases. However, we do not perform automated decision-making or profiling within the meaning of the GDPR (in particular Article 22), only your Personal Data is processed automatically in justified cases. All processing of Personal Data is subject to human decision, AI itself does not make any decisions about you. We use artificial intelligence primarily for the provision of Services and process optimization. This concerns AI tools we use in our own operations, for example in customer support. The processing of your content when you use Q is described in the Q Terms and in Section 4. We do not use prompts, inputs or outputs submitted to Q to train AI models.

At the same time, it may happen that some of your Personal Data (for example system logs) will be anonymized if it is possible and subsequently used to be processed for statistical data using artificial intelligence (AI). All data obtained in this way for statistical purposes, due to complete anonymization, no longer have the nature of Personal Data, and we therefore no longer treat this data as Personal Data. We approach the anonymization of Personal Data on the basis of legitimate interest and subsequent use for statistical purposes is no longer Processing of Personal Data.

2. OUR ROLE IN RELATION TO PERSONAL DATA

文脈によっては、StrategyQuantはコントローラーとして、あるいはプロセッサとして機能する場合があります。.

このプライバシーポリシーはいつ適用されますか？ 本プライバシーポリシーの条項は、特に別段の定めがない限り、StrategyQuantが「管理者」として行動する場合に適用されます。これらは、ユーザーの個人データの処理を対象としています。ただし、当社が他者の指示に基づき「処理者」として個人データを処理する状況については、本ポリシーの適用対象外となります。.

A. コントローラーとしてのStrategyQuant

当社が収集し、その利用方法を決定する個人データに関して、当社は特に以下の管理者の役割を果たします。

• Customers using our downloadable software, the Platform, Q, the Marketplace, Support, Data Services or Courses (e.g., account data, billing contact, prompts, inputs and outputs submitted to Q, usage logs necessary for security and troubleshooting).
• Contributors who publish extensions in the Marketplace (e.g., display name, extension content, payout and tax data).
• Website Visitors to our public websites and pages (e.g., analytics, cookies – subject to consent where required).
• 採用活動に参加する求職者.

この方針には、データのカテゴリー、利用目的、および法的根拠のリストが記載されています。.

当社のProプロセッサ。. To deliver our services efficiently, we engage Processors (e.g., cloud hosting, email delivery, analytics, support tools). We have data processing agreements in place and require appropriate security and confidentiality. Our current processors are listed in Section 5.

B. StrategyQuant（Proプロセッサとして）

シナリオによっては、例えば次のように、管理者の文書化された指示に従って、別の管理者に代わって個人データを処理する場合があります。

• 購入が行われる場合 ファストスプリング, ファストスプリング is typically the Controller for the checkout and billing relationship. To the extent StrategyQuant receives Personal Data from FastSpring solely to fulfill license delivery/activation or provide support linked to that purchase, StrategyQuant acts as Processor to FastSpring for that data and processes it under their instructions and our data processing terms with FastSpring.
• あなたが管理者である個人データをユーザーアカウントやその他の場所に入力した場合、当社はその個人データの処理者となります。.

当社が第1次処理者（Processor）として活動する場合、適用されるデータ処理契約（DPA）に従い、サブプロセッサーを起用することがあります。個人データへのアクセスは制限されており、契約上および技術上の保護措置によって管理されています。.

3. WHAT PERSONAL DATA DO WE PROCESS ABOUT YOU?

個人データはどのように処理されますか？ 当社は、データの収集目的を達成するために必要な範囲に限りお客様の個人データを取り扱い、処理にあたっては技術的および組織的なセキュリティ規則を遵守します。個人データの処理プロセスは自動化されていますが、プロファイリングは行いません。.

機微な個人データ. 当社は、お客様に関する機微な個人データ（センシティブデータ）はいっさい処理いたしません。.

Pro　AIによる個人データの処理。. In the context of processing Personal Data, we also use artificial intelligence (AI) in justified cases. However, we do not use it for automated decision-making or profiling within the meaning of the GDPR (in particular Article 22). All processing of Personal Data is subject to human decision-making, AI itself does not make any decisions about you. We use artificial intelligence primarily for the provision of our Services and process optimization. This concerns AI tools we use in our own operations, for example in customer support. The processing of your content when you use Q is described in the Q Terms and in Section 4. We do not use prompts, inputs or outputs submitted to Q to train AI models.

4. SUMMARY OF REASONS AND PURPOSES FOR PROCESSING YOUR PERSONAL DATA

個人データの処理方法やその理由を説明する膨大な文章を理解することが時に難しい場合があることは、当社も理解しております。個人データの処理に関する基本情報を迅速かつ分かりやすくお伝えするため、すべてを以下の分かりやすい表にまとめました。

5. WHO ARE OUR PROCESSORS?

Processors. We use only verified Processors with whom we have concluded a written agreement, and who provide us with at least the same guarantees as we provide to you. The data that Processors may process, including the purpose and legal title for processing, have been listed above.

External Contractors. We also engage individual contractors and smaller companies for software development and customer support. All of them are bound by a written data processing agreement and confidentiality obligations.

Legal Obligations. In addition to the Processors listed above, we may transfer Personal Data to third parties if required by law or in response to lawful requests by public authorities or upon court request in legal disputes.

Processing outside the EEA. If data is transferred from the EEA to other countries, we ensure a high standard of Personal Data protection through standard contractual clauses approved by the European Commission, or equivalent standard contractual clauses for the United Kingdom, for transfers to countries that are not subject to an adequacy decision by the European Commission or your local legislator

AI model providers for Q. Prompts and inputs submitted to Q are transmitted to the AI model providers listed above, directly or through a routing service, which we engage as Processors or sub-processors under data processing terms that do not permit them to use your content to train their models. They may process a limited amount of data as independent controllers for security, abuse prevention and legal compliance purposes, in accordance with their own terms. Details for each provider:

OpenRouter, Inc. – country of processing: United States or European Union, depending on routing configuration; transfer safeguard: EU Standard Contractual Clauses; retention by the provider: inputs are not stored by default after processing unless prompt logging or a feature requiring storage is enabled.

Anthropic, PBC – country of processing: United States, Europe, Asia and Australia; data storage in the United States; transfer safeguard: EU Standard Contractual Clauses; retention by the provider: up to 30 days for API inputs and outputs, unless otherwise agreed or longer retention is required for policy enforcement or by law.

OpenAI Ireland Limited – country of processing: EEA and, where applicable, other jurisdictions including the United States; transfer safeguard: EU Standard Contractual Clauses or an adequacy decision; retention by the provider: up to 30 days for API abuse-monitoring logs, subject to endpoint-specific retention and applicable data-retention controls.

6. WHAT MEASURES HAVE WE TAKEN TO PROTECT YOUR PERSONAL DATA?

Our Users can influence the scope of processing within the provision of Services through their own settings through Platform in the user account.

Technical measures. Security is very important to us, and therefore we continuously work to ensure your Personal Data is protected. When choosing measures, we take into account the scope of processing, the risk of processing, or the state of our technology.

• We regularly back up data;
• We encrypt data using SSL/TLS for all data transmission;
• We use the secured HTTPS protocol;
• Our data on servers is encrypted.

Organizational measures. We have adopted and commit to maintaining the following measures:

• Our employees are bound by confidentiality;
• Our employees are properly trained and also regularly re-trained regarding GDPR and familiarized with the rules of safe work on work devices;
• Access to all systems, including the information system, is personalized and protected by secure passwords.

7. YOUR RIGHTS AND POSSIBILITY TO SUBMIT A REQUEST REGARDING PERSONAL DATA PROTECTION

You can exercise your rights at the e-mail [email protected].

How quickly will we handle your request? We will answer you no later than within one month. If providing information would jeopardize the privacy of other persons, or if providing it would be disproportionate to the risks or costs of providing it, it is possible that we will not be able to comply with your request. To handle your request as soon as possible, we may need to verify your identity. In the case of a repeated request, the Controller will be entitled to charge a reasonable fee for a copy of Personal Data.

8. INTERNATIONAL PROVISION OF SERVICES

If we use Processors who are based abroad, we ensure that we comply with the requirements of the relevant legislation. In particular, where there are transfers of data from the EEA to other countries, we ensure a high standard of protection for Personal Data through standard contractual clauses approved by the European Commission, or the equivalent standard contractual clause for the United Kingdom (UK General Data Protection Regulation (UK GDPR)), for transfers to countries that are not subject to an adequacy decision by the European Commission or your local legislator.

We follow the standards of the GDPR and the protection of Personal Data is very important to us. We also provide our Services outside of the EEA market, so your rights related to the protection of Personal Data depend on the applicable legislation that applies to you.

CALIFORNIA CONSUMER PRIVACY ACT

If you are a California resident or resident of other states of the United States of America, you are subject to the CCPA legislation and have the right to know how we process your data.

What data do we process? In order to provide our Service to you, we need your data. What personal data this is and for what purpose we process it is set out above. We may retain this personal data for as long as needed for the purposes for which it was collected, and only for the necessary period. This will depend on our business, legal and regulatory needs, but it will always be for a reasonable period of time.

What are your rights? The CCPA guarantees you the following rights.

How can you exercise your rights? You can exercise your rights by email at [email protected] or by post at our registered office.

We may require verification of your identity in order to process your request, depending on the nature of the right you are exercising. If a representative is exercising rights on your behalf, we will need to see proof of their authority to do so. We will also require your representative to identify themselves. We take these steps to ensure the highest possible standard of protection of your Personal Data.

9. CONCLUSION

These Personal Data Processing Principles can only be changed in writing. You will be informed about this through our website. Therefore, please check these principles regularly. By continuing to use the Services, you agree to the changes in these principles.

If you are not satisfied, you can always submit a suggestion or complaint to the office address according to the country you come from. Below are the contacts for the offices in the countries from which most of our Users come:

• Czech Office for Personal Data Protection, with its registered office at Pplk. Sochora 727/27, 170 00 Prague 7 – Holešovice, Czechia (more at www.uoou.cz),
• Spanish Data Protection Agency (AEPD), with its registered office at Jorge Juan, 6, 28001 Madrid, Spain (more at www.aepd.es),
• Italian Data Protection Authority (Garante), with its registered office at Piazza Venezia 11 – 00187 Roma, Italy (more at www.garanteprivacy.it),
• Germany Federal Commissioner for Data Protection and Freedom of Information (BfDI), with its registered office at Graurheindorfer Str. 153, 53117 Bonn, Germany (more at www.bfdi.bund.de)
• or to another personal data protection authority located in the place of your habitual residence.

These Personal Data Protection Principles are effective from 6. 10. 2026.