Privacy Policy and Data Protection Framework – Quantumvibeio Version 5.0 – Last Updated: April 27, 2026

Article 1: Identification of the Data Controller This privacy policy describes the strict data processing protocols employed by Quantumvibeio ("the Platform", "we", "us", or "our"), headquartered at Avenue Louise 149, 1050 Brussels, Belgium. We act as the data controller within the meaning of the General Data Protection Regulation (EU GDPR) and the Belgian law of July 30, 2018, concerning the protection of natural persons with regard to the processing of personal data. To ensure the absolute integrity of data, we have appointed a Data Protection Officer (DPO), reachable via [email protected].

Article 2: Categories of Personal Information Collected In accordance with the principle of minimal data processing, we collect:

Identity Data: Full legal name, date of birth, nationality, and government-issued identification for mandatory KYC/AML verification.

Financial Telemetry: Source of wealth, digital wallet addresses (public keys), and transaction history.

Digital Footprint: IP addresses, hardware device specifications, and detailed interaction logs with our predictive interfaces.

Article 3: Legal Basis for Processing Our collection and use of information are based on:

Contractual Necessity: Essential for managing your account and delivering our services.

Legal Obligations: Compliance with Belgian anti-money laundering legislation (Law of September 18, 2017).

Legitimate Business Interests: Proactive fraud prevention and enhancement of network security.

Explicit Consent: For personalized market insights and non-essential analytical cookies.

Article 4: Advanced Security and Sovereignty * Encryption: All stored data is secured with AES-256 cryptographic protocols.

Transmission: Secured via TLS 1.3 end-to-end encryption.

Hosting: Data is exclusively hosted on redundant, high-security servers within the European Economic Area (EEA), ensuring full protection under EU data sovereignty laws.

Article 5: Retention and your rights We retain identity and financial data for a minimum of five (5) to seven (7) years after account closure to comply with Belgian tax and AML requirements. Under the EU GDPR, you have the right to access, rectify, erase, and port your data. Requests can be sent to [email protected]. You also have the right to file a complaint with the Belgian Data Protection Authority (GBA).