Privacypolicy.
Last updated · 2026-05-31
- // 01
What we collect
Account info you give us (email, name, optional profile). Authentication data (Google OAuth identifiers, magic-link tokens). Usage data (pages visited, signals viewed, traders followed). Trading data when you use Approval or Auto mode (orders, fills, P&L). Technical data (IP, device, browser, timestamps). That's the entire list.
- // 02
Why we collect it
To run the product. Authentication needs identity. Personalized feeds need to know who you follow. Performance fees need to know what you traded. Security and abuse prevention need IPs and device fingerprints. We collect the minimum required for each function — never extra, never to resell.
- // 03
Who we share it with
Service providers we use: Turnkey (wallet infrastructure), Anthropic (AI signal narration), Vercel (hosting), Stripe (billing when applicable), Hyperliquid and Solana (trade execution). Each receives only the data they need for their function. We never sell data and never share it with advertisers, brokers, or data aggregators.
- // 04
Onchain data
Trades you execute through KiheiRoad are recorded onchain by their nature. We don't control what blockchains store. Your wallet address, trade amounts, timestamps, and counterparties are publicly visible on the chain you trade on. This is not a KiheiRoad disclosure choice — it's how the underlying networks work.
- // 05
Cookies and analytics
We use functional cookies (auth session, preferences) and a privacy-respecting analytics provider (Vercel Analytics, Plausible, or similar — no Google Analytics, no Meta pixels, no third-party tracking SDKs). You can clear cookies anytime in your browser.
- // 06
Your rights
You can: access your data (request a JSON export), delete your account and associated data (within 30 days), correct any inaccurate info, restrict processing, or opt out of communications. Email privacy@kiheiroad.app to exercise any of these.
- // 07
Data retention
Account data: retained while your account is active and for 12 months after closure (for legal and tax compliance). Trading records: retained for 7 years per typical financial regulations. Logs: 90 days. Marketing emails: until you unsubscribe.
- // 08
Security
We use industry-standard practices: encrypted-at-rest databases, encrypted-in-transit traffic (TLS 1.3+), MFA for staff access, principle-of-least-privilege internal permissions, regular dependency audits, third-party penetration testing. No system is 100% secure, but we treat your data like ours.
- // 09
International transfers
Some service providers are based outside your country. When data crosses borders, we rely on standard contractual clauses or equivalent legal protections. EU/UK users: we comply with GDPR. California users: we comply with CCPA. Other jurisdictions: we comply with applicable law.
- // 10
Contact
Privacy questions: privacy@kiheiroad.app. Data requests: privacy@kiheiroad.app. Complaints: contact us first; you also have the right to lodge a complaint with your local data protection authority.
// placeholder copy · final language pending legal review