Privacy Policy
This policy explains what information QM Screener ("we", "us", "our") collects from you, how we use it, and the choices you have.
1. Information We Collect
From you directly
- Email address — when you sign up.
- Password — stored only as a scrypt hash. We never store or see your plain-text password.
From Google (if you sign in with Google)
- Your verified email address and Google account ID. We do not request calendar, contacts, drive, or any other Google data.
From Stripe (when you subscribe)
- Stripe customer ID, subscription status, plan, and current billing period end date. We use this to determine whether your subscription is active.
- We do not see, store, or process your card number, CVV, or any other full payment details. Stripe handles payment processing directly — your card information never touches our servers.
Automatically
- Server logs — IP address, timestamps, request paths — kept for operational and security purposes.
- Aggregate website analytics via Google Analytics (anonymised page views and navigation patterns).
2. How We Use Your Information
- To provide, operate, and improve the Service.
- To process subscription billing through Stripe.
- To secure your account and prevent fraud.
- To diagnose errors and operational issues.
- To respond to your support requests.
- To send service-related emails (billing receipts via Stripe; account notices).
We do not sell your personal information. We do not show advertising and do not share your information with advertisers.
3. Third Parties We Share With
- Stripe for payment processing — stripe.com/privacy.
- Google for optional sign-in and aggregate analytics — policies.google.com/privacy.
- Our market data provider receives only ticker symbols; no personal data is shared.
4. Cookies
qm_session— an HMAC-signed session cookie that identifies you while signed in. Set withHttpOnly,SameSite=Lax, andSecurein production.- Google Analytics cookies for aggregate traffic measurement.
No third-party advertising cookies are set.
5. Data Retention
Account data is kept while your account exists. If you delete your account (by emailing us — see Section 6), we remove your account row from our database within 30 days. Some logs and Stripe-side billing records may be retained for legal and accounting purposes for up to seven years.
6. Your Rights
You can request any of the following by emailing support@qmscreener.com:
- Access to the personal data we hold about you.
- Correction of inaccurate data.
- Export of your data in a portable format.
- Deletion of your account and associated data.
We respond to verified requests within 30 days.
7. Security
We hash passwords with scrypt using OWASP-baseline parameters. We serve all traffic over HTTPS in production. We follow the principle of least privilege for internal access. No system is perfectly secure — if you suspect a breach, contact us immediately.
8. Children's Privacy
The Service is not directed at, or intended for, children under 18. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided us with personal data, contact us and we will delete it.
9. International Data Transfers
Our servers and processors are located in the United States. By using the Service from outside the United States, you consent to your data being transferred to and processed in the United States.
10. Changes to This Policy
Material changes will be notified by email to the address on your account at least 14 days before they take effect. Continued use of the Service after the effective date constitutes acceptance of the updated policy.
11. Contact
For any privacy question or data request, email support@qmscreener.com.