Privacy Policy

1. Information We Collect

We collect information you provide directly and information generated through your use of the Service:

• Email address and name when you create an account
• Payment information when you subscribe (collected and processed by Stripe)
• Venue API credentials you choose to connect (encrypted at rest using AES-256)
• Usage data including plans created, alerts configured, and features accessed
• Device information, browser type, IP address, and referring URLs
• Copy trading and auto-execution configuration preferences

2. How We Use Information

We use your information to:

• Provide, operate, and improve the Service
• Process payments and manage subscriptions
• Send alerts, notifications, and transactional emails you request
• Execute copy trading and auto-execution orders on your behalf
• Analyze usage patterns to improve product features
• Prevent fraud, abuse, and enforce our Terms of Service
• Comply with legal obligations

3. Data Processors

We share personal information with the following third-party processors, each of which processes data solely on our behalf and under contractual obligations:

• Stripe for payment processing and subscription management
• Supabase for authentication and data storage
• PostHog for product analytics
• Resend for transactional email delivery

4. Cookies

We use the following categories of cookies:

• Essential cookies: Required for authentication, session management, and core Service functionality. These cannot be disabled.
• Analytics cookies: Used by PostHog to understand how you interact with the Service. You can opt out of analytics cookies in your account settings.

We do not use third-party advertising cookies or sell data to advertisers.

5. Data Security

We implement industry-standard security measures to protect your data. Venue API credentials are encrypted at rest using AES-256 encryption. We never store your venue passwords, only API keys you explicitly provide. All data is transmitted over TLS-encrypted connections.

6. Data Retention

We retain your personal data according to the following schedule:

• Account data is kept for as long as your account is active and you maintain a relationship with us.
• Upon account deletion, your personal data is deleted within 30 days. Anonymized aggregate data may be retained for analytical purposes.
• Billing records are retained as required by applicable tax and accounting laws.

7. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

GDPR (EU/EEA/UK residents)

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your personal data
• Portability: Receive your data in a structured, machine-readable format
• Objection: Object to processing based on legitimate interests

CCPA (California residents)

• Right to know: Request disclosure of the categories and specific pieces of personal information collected
• Right to delete: Request deletion of your personal information
• Right to opt-out of sale: We do not sell your personal information to third parties

To exercise any of these rights, contact us at privacy@kalopoly.com.

8. International Transfers

Your data may be transferred to and processed in the United States, where our servers and service providers are located. If you are located outside the United States, you consent to the transfer of your data to the US. We ensure appropriate safeguards are in place for international data transfers, including standard contractual clauses where required.

9. Children's Privacy

The Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected data from a person under 18, we will take steps to delete that information promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on the Service with a new effective date. Continued use of the Service after changes are posted constitutes acceptance of the updated policy.

11. Contact

For privacy-related questions or to exercise your data rights, contact us at privacy@kalopoly.com. For general support, contact support@kalopoly.com.