GDPR Information

1. Data controller

The data controller for LiMiT Quant is LIMIT SRL.

2. What data we process

2.1 Data you provide

• Account email (for login / account creation).
• Support messages (contact form: name, email, and message text).
• Payment verification info you provide (payment reference + transaction hash) for manual crypto verification.

2.2 Data collected automatically (typical)

• Logs (IP address, user agent, timestamps, pages/endpoints accessed, errors) for security and debugging.
• Session cookies (for sign-in and credit/unlock flows).
• Local storage: the dashboard can store an API key locally in your browser (convenience feature).
• Referral parameters: if you arrive with ?aff= or ?ref=, we may record attribution.

3. Why we process data

• Provide the dashboard and account access.
• Manage credits (balance, unlocks) and key-based access for full tickets/API where enabled.
• Verify manual crypto payments (payment reference + tx hash).
• Answer support requests and troubleshoot onboarding.
• Maintain security and prevent abuse (rate limiting, fraud, intrusion detection).

4. Legal bases (GDPR)

We rely on one or more of the following, depending on context:

• Contract necessity (Art. 6(1)(b)) — to provide the Service you request.
• Legitimate interests (Art. 6(1)(f)) — security, abuse prevention, reliability, and basic attribution.
• Legal obligation (Art. 6(1)(c)) — where required (e.g., accounting/tax, lawful requests).
• Consent (Art. 6(1)(a)) — where we explicitly ask for it (e.g., optional cookies if you add analytics later).

5. Sharing and processors

We do not sell personal data. We may share data with service providers (“processors”) needed to operate the Service. Based on how the site is built today, this can include:

• Security/CDN (the site uses a Cloudflare email protection script, which suggests Cloudflare-style edge protection may be in use).
• Asset CDNs: Google Fonts and Tailwind CDN (your browser requests these assets directly).
• Hosting/infrastructure: servers/databases running the dashboard and API.
• Email delivery: for verification/reset emails and support replies.

6. International transfers

Some service providers may process data outside the EEA. Where required, we use appropriate safeguards (such as contractual clauses) depending on the provider and processing context.

7. Retention

• Account data: retained while your account is active and as needed for service and security.
• Support messages: retained as needed to resolve issues and maintain support history.
• Payment verification records: retained as needed for fraud prevention and operational/accounting purposes.
• Logs: retained for a limited period appropriate for security and debugging.

8. Your rights

Under GDPR (where applicable), you may have the right to:

• Access your personal data
• Rectify inaccurate data
• Request deletion (where applicable)
• Restrict processing (in certain cases)
• Object to processing (in certain cases)
• Data portability (in certain cases)
• Withdraw consent (where processing is based on consent)

9. How to make a GDPR request

Email [email protected] with the subject: GDPR Request.

10. Complaints

You can lodge a complaint with your local supervisory authority. If you are in Romania, this is ANSPDCP (Autoritatea Naţională de Supraveghere a Prelucrării Datelor cu Caracter Personal).

11. Cookies and tracking

The Service uses essential cookies for sessions (sign-in, credits/unlocks) and security. We do not run ad tracking on purpose. If we add analytics or marketing tags later, we will update the Privacy Policy and (where required) implement consent controls.

12. Changes

We may update this page. The “Last updated” date and version will change accordingly.