Privacy & Data Practices
What We Collect
When you create an account, Quantiterate stores your email address and a cryptographically hashed password. We never store your password in plain text.
When you use the platform, we maintain session cookies to keep you signed in across properties. These cookies are HttpOnly, Secure, and scoped to the quantiterate.com domain.
When you subscribe to Pro, all payment processing is handled by Stripe. Your credit card number, billing address, and payment details are stored by Stripe — Quantiterate never sees or stores this information. We store only your subscription status (free or Pro), billing period, and Stripe customer ID.
Some verticals track usage metrics — for example, the number of AI-assisted analysis sessions you've used in a billing cycle. This is used solely for enforcing usage limits on free-tier accounts.
What We Do Not Do
We do not sell your personal data. We do not share your data with advertisers. We do not use your data to train AI models. We do not track you across the web. We do not serve ads of any kind.
AI Features and Your Data
When you use AI-powered features (Red Ink writing analysis, MathLab research sessions, Wire scan summaries, Bueller evaluations), your input is sent to Anthropic's Claude API for processing. Anthropic does not use API inputs to train models. Your prompts and results are not stored by Anthropic beyond the duration of the API call.
Quantiterate may store the results of AI interactions in its own database to allow you to access your history. This data is associated with your account and is not shared.
Geographic Availability
Quantiterate is currently available to users in the United States only. Access from the European Union and United Kingdom is blocked at the network level.
Data Retention and Deletion
Account data is retained as long as your account is active. If you wish to delete your account and all associated data, contact support.
Security
All traffic to Quantiterate properties is encrypted via TLS. Authentication cookies use HttpOnly, Secure, and SameSite flags. API endpoints are protected by rate limiting. Administrative endpoints require internal token authentication.