LEGAL
Privacy Policy
THE SHORT VERSION
- We keep very little: your name, email, login, which plan you are on, and for partner-broker members the broker account number.
- No card numbers. Payments are handled by the payment provider; we never see or store card details.
- No tracking, no ad pixels, no analytics scripts on any page. The scanner uses browser storage only to remember your own settings.
- We never access your trading account. From a partner broker we receive only the account number and whether it is linked and active.
- Ask and we delete it. Write to hello@kasandra.app.
SECTION 1Who we are
The service is operated by Kasandra ("we", "us"). We are the controller of the personal data described here. Contact details are in section 12.
SECTION 2What we collect
| Data | When | Details |
|---|---|---|
| Name and email | When you request access | Given by you on the sign-up form or by email. |
| Login and password | When we create your access | The password is stored only as a one-way hash. We cannot read it. |
| Plan and status | While you are a member | Subscription or partner-broker route, start date, active or not. |
| Broker account number | Partner-broker members only | Given by you, used only to confirm the link with the broker. |
| Country | Optional, on the sign-up form | Used for invoicing and to know where our members are. |
| Payment record | Subscribers only | What was paid and when, as reported by the payment provider. Card and bank details stay with the provider. |
| Server access logs | Every visit | IP address, time, requested page, browser type, and for the scanner the login name. Standard web-server logs, used for security and to diagnose faults. |
| Emails you send us | When you write | Kept with our correspondence. |
We do not collect anything from your trading account, we do not profile you, and we do not buy data about you from anyone.
SECTION 3Why, and on what basis
- To provide the service you asked for (contract): creating and running your login, billing, confirming a partner-broker link, answering your messages.
- To keep the service secure and working (legitimate interest): access logs, blocking abuse, diagnosing faults, backups.
- To meet legal obligations (legal duty): keeping invoicing records for as long as tax law requires.
- To tell you about the service (legitimate interest, and you can opt out at any time): occasional emails about changes to the service or your plan. We do not send marketing emails to people who are not members, and we do not share your email with anyone for marketing.
SECTION 4Where it is kept
Member records, logs and the scanner run on a server we rent from Vultr Holdings LLC, located in Singapore, with an encrypted backup kept by the same provider. Email is handled by our email provider. The payment provider named at checkout keeps the payment data. Depending on where you live, this may mean your data is processed outside your country; where the law requires it, we rely on the provider's standard contractual safeguards.
SECTION 5Who sees it
- Our hosting, email and payment providers, only to the extent needed to run the service, under their own privacy terms.
- Partner brokers, for partner-broker members only: we may confirm with the broker that an account number you gave us is linked to our partner code. We do not send the broker anything else about you, and we receive from the broker only the account number and its link status.
- Authorities, where the law obliges us.
We do not sell personal data, and we do not share it with advertisers.
SECTION 6Cookies and browser storage
The public site sets no cookies and loads no analytics or advertising scripts. Fonts are loaded from Google Fonts, which receives your IP address as part of that request.
The scanner uses your browser's local storage to remember your own choices: the instrument, timeframe and strategy you last looked at, whether sound and notifications are on, and similar settings. That data stays in your browser and is never sent to us. The scanner login uses standard HTTP authentication handled by your browser; no tracking cookie is set.
SECTION 7How long we keep it
| Data | Kept |
|---|---|
| Member record (name, email, login, plan, broker account number) | While you are a member, then up to 12 months in case you return or a question arises, then deleted. Deleted sooner on request. |
| Invoicing records | As long as tax law requires, typically 5 to 10 years, in a form limited to what the law needs. |
| Server access logs | Rotated automatically; at most about 90 days. |
| Backups | Overwritten on a rolling schedule; a deleted record leaves the backups within the same cycle. |
| Correspondence | Up to 2 years after the last message. |
The scanner's track record contains no personal data: it logs the engines' output, not any member's activity.
SECTION 8Your rights
Depending on where you live, you may have the right to ask us for a copy of your data, to correct it, to delete it, to restrict or object to how we use it, to receive it in a portable form, and to complain to a data-protection authority. Email hello@kasandra.app from the address on your account and we act within 30 days. Deleting your record ends your access.
SECTION 9Security
All traffic to the site and the scanner is encrypted (HTTPS). Passwords are stored as one-way hashes. Member records live on a server reachable only through the web front door and an administrator connection secured with keys. Backups are encrypted. No system is perfectly secure; if we learn of a breach affecting your data we tell you without undue delay.
SECTION 10Children
The service is for adults. We do not knowingly collect data from anyone under 18; if you believe we have, tell us and we delete it.
SECTION 11Changes
We may update this policy. The date at the top shows the current version; material changes are announced on the service or by email before they apply.
SECTION 12Contact
Kasandra · hello@kasandra.app · kasandra.app