Privacy

Privacy Policy

Your data and privacy matter. Here's exactly how we handle your information.

Last Updated: March 6, 2026

At KumoQuant Platform, we take your privacy and data security seriously. This Privacy Policy explains how we collect, use, and protect your information when you use our automated crypto trading platform, in compliance with global standards including the GDPR and Australian Privacy Principles.

1. Information We Collect

We practice "Data Minimization," collecting only what is strictly necessary to operate the Service.

Account Information

Name and email address, processed securely via our authentication provider, Clerk.

Billing Information

We use Stripe as our payment processor. We do not collect or store your full credit card numbers on our servers. Stripe manages your payment data.

Exchange API Keys

Encrypted at rest and injected securely into your isolated trading environments.

Custom Strategy Code

Your Python strategy files, stored privately and never shared or claimed by us.

Trade History & Logs

Generated by your bots and necessary for rendering your dashboard and performance analytics.

Technical Data

IP addresses, browser types, and device information used for security monitoring and troubleshooting.

2. How We Use Your Information

We use your data solely to provide and improve the Service:

To provision your dedicated trading bots (Freqtrade) on our infrastructure.
To authenticate your connections to third-party cryptocurrency exchanges to execute your trades.
To provide customer support and send critical system alerts.
To process subscription payments securely via Stripe.

3. How We Share Your Information

We do not sell your personal data. We only share data with trusted third-party service providers who assist us in operating the platform:

Role	Provider	Purpose
Authentication	Clerk	Identity management and secure login
Payments	Stripe	Billing and invoicing
Cloud Infrastructure	AWS / Azure / DigitalOcean	Bot hosting and execution environment
Exchanges	Binance, Kraken, etc.	Trade execution via your API keys under your instruction

4. Data Security and API Protection

Because we handle sensitive exchange API keys, we employ strict security measures:

API keys and secrets are encrypted at rest using industry-standard encryption.
Your trading bots run in isolated environments (Kubernetes Pods), ensuring separation between users.
We do not have access to withdraw funds from your exchange accounts, provided you follow our strict instruction to disable withdrawal permissions on your API keys.

5. Global Data Transfers

Our servers may be located in various global regions. By using the Service, you consent to the transfer of your information to facilities outside of your country of residence, where data protection laws may differ. However, we ensure all third-party processors comply with stringent global privacy frameworks (such as GDPR).

6. Your Rights

Depending on your jurisdiction (e.g., EU under GDPR, or Australia under the Privacy Act), you have the right to:

Access the personal data we hold about you.
Correction — request correction of inaccurate data.
Deletion — request deletion of your account, strategies, and API keys ("Right to be Forgotten").
Opt-out — opt out of non-essential communications at any time.

To exercise any of these rights, please contact us at:

support@kumoquant.com