Effective Date: 23 September 2026
This Privacy Policy is issued by Quantli Pty Ltd ACN 696 058 536 (Quantli, we, us or our)
Background
Quantli is a publisher of impersonal investment research. We collect the personal information needed to run your account, verify your eligibility, operate the tools you choose to use and keep the platform secure. We do not sell your personal information. We do not use the holdings or watchlists you enter to prepare advice tailored to you; those tools are operated by you. This policy explains what we collect, why, who we share it with, how long we keep it, and the rights you have under Australian law and, where they apply to you, the laws of other countries.
- About this policy and who we are
Quantli operates the website at quantli.com and the related research tools and services (the Platform). We are committed to protecting your personal information and to handling it in accordance with the Privacy Act 1988 (Cth) (Privacy Act) and the Australian Privacy Principles (APPs), and, where they apply to you, the data protection laws of other countries described in this policy.
This policy explains how we collect, hold, use, disclose and protect your personal information, and how you can access and correct it or make a complaint. It applies to your use of the Platform and to any dealings you have with us. Where you access our research through a third party that distributes it (a Distributor), that Distributor handles your personal information under its own privacy policy in respect of the services it provides to you; this policy covers only Quantli’s handling of your information.
By using the Platform, you acknowledge that your personal information will be handled as described in this policy.
- The information we collect
The kinds of personal information we collect depend on how you interact with us. They may include:
a. Information you provide to us
- Account and identity information: your name, email address, username, password and profile details.
- Eligibility and verification information: information needed to confirm your location, age, and (where relevant) your status as a wholesale client, which may include identity and, where required, accountant or professional certificates.
- Payment information: billing details and payment information, which are processed by secure third-party payment providers; we do not store full card numbers.
- Tools information: the securities, holdings, watchlists, alert settings and screening criteria you choose to enter into or configure within the Platform.
- Communications: the content of enquiries, support requests, survey responses and other correspondence with us.
b. Information we collect automatically
- Usage data: how you interact with the Platform, including pages and features viewed and time spent.
- Device and connection data: IP address, browser type, operating system, language and device identifiers.
- Cookies and similar technologies: data collected through cookies and similar technologies (see Section 11).
c. Information from third parties
- Identity, eligibility or fraud prevention providers; payment providers; analytics and hosting providers; a Distributor through which you access our research; and, if you choose to use a social or single sign-on login, the provider of that login.
We generally do not collect sensitive information (as defined in the Privacy Act, which includes information such as health, racial or ethnic origin, political opinions and biometric information). We will only collect sensitive information with your consent or where we are required or permitted by law to do so. Note that financial information such as your holdings is not “sensitive information” as defined in the Privacy Act, but we treat it with care as described in this policy.
- How we collect your information
We collect personal information directly from you when you create an account, verify your eligibility, subscribe, use the tools, or contact us; automatically as you use the Platform; and from the third parties described in Section 2(c). Where it is reasonable and practicable, we collect personal information directly from you. If you provide us with personal information about another person, you must ensure you are authorised to do so and that the person is aware of this policy.
- Why we collect, hold and use your information
We collect, hold and use your personal information to:
- provide, maintain and improve the Platform and the research tools;
- create and administer your account and process your subscription and payments;
- verify your location, age and eligibility, including your status as a wholesale client where relevant, and to determine whether the research may lawfully be made available to you;
- operate the tools you choose to use, including recording the holdings, watchlists and settings you enter, and generating the alerts you configure;
- respond to your enquiries and provide customer support;
- communicate with you about the Platform, including service messages and, where permitted, marketing (see Section 9);
- detect, investigate and prevent fraud, misuse, security incidents and breaches of our terms; and
- comply with our legal obligations and manage legal claims.
Operating the tools is not the provision of advice to you. The holdings, watchlists and settings you enter are used to operate those tools for you. We do not use that information to assess your portfolio or to prepare any recommendation or advice that is tailored to you. Our research is impersonal and is made available in identical form to all users of the relevant tier.
- Automated processing, ratings and profiling
Parts of our research, including ratings, scores and signals, are generated using algorithmic, statistical, machine learning and artificial intelligence techniques applied uniformly across the securities covered. These techniques are applied to securities data. They are not used to make decisions that produce legal or similarly significant effects about you as an individual, and they do not profile you to make automated decisions about you.
Where we use automated processing in relation to your personal information (for example, for fraud detection or eligibility screening), and you are in a jurisdiction that gives you rights in relation to automated decision-making, you may exercise those rights as described in Section 14.
- Legal bases for processing (EU / UK users)
If you are in the European Economic Area or the United Kingdom, we process your personal information on one or more of the following legal bases: your consent; the performance of a contract with you; compliance with a legal obligation; and our legitimate interests in operating, securing and improving the Platform, where those interests are not overridden by your rights.
- How and with whom we disclose your information
We may disclose your personal information to:
- Service providers: hosting, payment, analytics, communications, identity verification and security providers who handle information on our behalf under confidentiality and data protection obligations;
- Distributors: where you access our research through a Distributor, to the extent necessary to make the research available to you through that channel;
- Professional advisers and authorities: our legal, accounting and audit advisers, and regulators, law-enforcement or other authorities where required or authorised by law;
- Business transfers: a purchaser or successor in the event of a merger, acquisition, restructure, financing or sale of assets, subject to appropriate confidentiality protections.
We do not sell your personal information, and we do not share it for cross-context behavioural advertising. We do not receive payment for order flow and do not disclose your information in exchange for remuneration referable to any transaction.
- Overseas disclosure and international transfers
We may store and process personal information in, and disclose it to service providers located in, countries outside your own, which may include the United States, the European Union, the United Kingdom, Singapore and India. Those countries may have data protection laws that differ from those in your country.
Where we disclose personal information overseas, we take reasonable steps to ensure it is handled consistently with this policy and applicable law. For transfers of personal information out of the European Economic Area or the United Kingdom, we rely on appropriate safeguards such as Standard Contractual Clauses. For Australian users, we handle overseas disclosures in accordance with APP 8.
- Direct marketing and communications
We may send you service and administrative messages relating to your account, which you cannot opt out of while you hold an account. We may also send you marketing communications where you have consented or where we are otherwise permitted to do so. You can opt out of marketing at any time using the unsubscribe function in the message or by contacting us. We handle marketing in accordance with APP 7 and the Spam Act 2003 (Cth), and, where applicable, the direct marketing rules of other jurisdictions.
- Cookies and tracking technologies
We use cookies and similar technologies to operate the Platform, remember your preferences, measure usage and improve the service. Essential cookies are necessary for the Platform to function and do not require consent. Non-essential cookies are used only with your consent, which you can manage through our cookie tool or your browser settings. Disabling some cookies may affect how the Platform works.
- Data security
We implement technical and organisational measures designed to protect personal information from misuse, interference and loss, and from unauthorised access, modification or disclosure. These include access controls, encryption in transit, and monitoring. No method of transmission or storage is completely secure, and you are responsible for keeping your account credentials confidential and for any activity under your account.
- Data retention
We retain personal information only for as long as necessary for the purposes described in this policy, including to provide the Platform, to comply with our legal, tax and record-keeping obligations, and to resolve disputes and enforce our agreements. When personal information is no longer needed, we take reasonable steps to delete or de-identify it.
- Your privacy rights and choices
Australia
Under the APPs, you may request access to the personal information we hold about you and ask us to correct it if it is inaccurate, out of date, incomplete, irrelevant or misleading (APP 12 and APP 13). To make a request, contact us using the details in Section 16. We will respond within a reasonable period. If we decline a request, we will tell you why and how you can complain.
European Economic Area and United Kingdom
If the GDPR or UK GDPR applies to you, you may have the right to access, rectify, erase, restrict or object to the processing of your personal information, to data portability, to withdraw consent, and not to be subject to solely automated decisions producing legal or similarly significant effects. You may also lodge a complaint with your local supervisory authority.
United States
If you are a US resident, you may have rights under applicable state privacy laws, including to know, access, correct and delete personal information, and to opt out of any “sale” or “sharing” of personal information and of targeted advertising. As stated in Section 7, we do not sell your personal information or share it for cross-context behavioural advertising. We will not discriminate against you for exercising these rights.
Other jurisdictions
If you are in another jurisdiction with applicable data protection law, you may have rights under that law, which you can exercise by contacting us.
- Data breaches
We maintain procedures to detect, assess and respond to data breaches. Where a breach is an eligible data breach likely to result in serious harm, we will notify the Office of the Australian Information Commissioner and affected individuals in accordance with the Notifiable Data Breaches scheme under Part IIIC of the Privacy Act. Where other laws apply (for example, the GDPR’s 72-hour notification requirement), we will comply with those requirements as well.
- Children and minors
The Platform is intended for adults. It is not directed to, and we do not knowingly collect personal information from, anyone under 18 years of age. If we become aware that we have collected personal information from a person under 18, we will take reasonable steps to delete it.
- How to contact us and how to complain
Privacy enquiries and requests: support@quantli.com
If you have a complaint about how we have handled your personal information, please contact us first at the address above so we can try to resolve it. We will acknowledge your complaint and respond within a reasonable period.
If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner at oaic.gov.au or 1300 363 992. If you are in the EU or UK, you may complain to your local supervisory authority.
- Third-party services and links
The Platform may link to, or integrate with, third-party websites and services, including data providers and Distributors. We are not responsible for the privacy practices of those third parties, and we encourage you to read their privacy policies.
- Changes to this policy
We may update this policy from time to time. The current version is identified by its effective date. Where a change is material, we will take reasonable steps to notify you, for example by email or by a prominent notice on the Platform, before it takes effect. Your continued use of the Platform after the effective date of an updated policy constitutes acceptance of the updated policy.