Privacy policy

Last updated: 2026-04-29

Keeping this current

We review and update this policy as the platform evolves. Data-handling and privacy questions reach the operator through the contact page or at the postal address in section 8.

1. Who we are

The Five Rings Financial platform is operated by Quantrex LLC, a Florida limited liability company. The platform is a multi-tenant SaaS used by insurance agencies and IMOs to manage agents, clients, compliance documents, training, and automation workflows.

2. What we collect

Account data: name, email, phone, organisation, role.
Operational data the operator's users enter: clients, suitability files, compliance documents, training progress.
System-generated audit log entries (regulator-required, 7-year retention).
AI invocations: prompt + completion, retained 7 years.
Operational telemetry: error reports (Sentry), uptime probes (Better Stack).

3. How we use it

Provide the service and respond to your support requests.
Compute analytics, run AI features, ship product updates.
Comply with regulatory retention rules (FINRA, NAIC, state insurance commissions).

4. Who we share it with

Sub-processors, each under a Data Processing Agreement. The complete and current list, with each vendor's purpose, region and certifications, is published on our trust page. It is maintained there rather than copied here so the two can never disagree.
We do not sell your data. We do not use your data to train cross-tenant models.

5. Google user data (Calendar)

Agents may optionally connect their own Google account so the platform can schedule and read calendar events on their behalf. When an agent connects, we request the Google Calendar scopes calendar.events and calendar.readonly, and store the resulting access and refresh tokens encrypted at rest, scoped to that individual agent.

The Five Rings Financial platform's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, we use Google Calendar data only to provide the calendar feature the agent enabled; we never use it for advertising, never sell it, and never use it to train generalised AI models. An agent can revoke access at any time by disconnecting in Settings, under Connectors, or via their Google Account permissions, which deletes the stored tokens.

6. Your choices

You can request export or deletion of your account data at any time through the contact page or in writing at the address in section 8. We honour deletion within 30 days, except where regulatory retention requires us to keep certain records (audit logs, executed compliance documents).

7. Security

All data is encrypted at rest (Postgres TDE + Supabase Storage SSE) and in transit (TLS 1.2+). RLS policies enforce strict tenant isolation; cross-org reads are prevented at the database layer.

8. Contact

Quantrex LLC, 627 Cape Coral Pkwy W, Apt 202, Cape Coral, FL 33914, United States. Written requests to that address, or through the contact page, reach the operator directly.