Privacy Policy

This Privacy Policy describes how Kayros Trading ("Kayros", "we") handles the personal data of anyone who visits kayrostrading.com or uses the Kayros dashboard.

It applies both to visitors of the public site and to registered subscribers.

Account data: your email address, your display name, and the plan and subscription status linked to your account. Your password is never stored in readable form; authentication is handled by Supabase Auth. If you sign in with Google, we receive your email address and basic profile data from Google, never your Google password.

Billing data: the plan you bought, the amount, the currency, the state of the subscription and the identifiers our payment provider returns. We do not receive or store your full card number, its expiry date or its security code — those go directly to DodoPayments.

Usage data: the simulated trades, prop firm simulations, Challenge participation and preferences you generate inside the platform, plus basic activity such as sign-in times.

Technical data: IP address, browser and device type, language and log data generated automatically when you connect. We use it for security, abuse prevention and diagnostics.

Referral data: if you arrive through an affiliate link, the referral code and the fact that your account came from it, so that a commission can be attributed correctly.

Support data: whatever you write to us by email.

We only use the cookies needed to run the Service. We do not use advertising cookies and we do not sell your data.

Supabase session cookies keep you signed in. The NEXT_LOCALE cookie remembers whether you use the platform in English or Spanish. The kayros_ref cookie stores an affiliate referral code for 90 days so that a referral can still be credited if you subscribe later.

You can delete cookies from your browser at any time. Deleting the session cookies signs you out.

To create and maintain your account and give you the access included in your plan.

To process your subscription, its renewals, receipts and refunds through our payment provider.

To run the features you use: charts, levels, paper trading, the prop firm simulator, Challenges and leaderboards.

To send you service messages: email confirmation, password resets, payment problems and changes to these documents. We only send commercial email if you ask for it, and you can stop it at any time.

To keep the Service secure, detect fraud, abuse and account sharing, and comply with our legal and accounting obligations.

To understand aggregate usage and improve the product.

Where data protection law such as the GDPR applies to you, we rely on: performance of our contract with you (running your account and your subscription), our legitimate interest (security, fraud prevention and improvement of the Service), your consent (optional communications) and compliance with legal obligations (tax and accounting records).

Supabase — database, authentication and storage of your account and your platform data.

DodoPayments — payment processing, subscription management and billing. Your payment data is handled under their own privacy policy.

Hosting and infrastructure providers that run the site and its servers, and the market data providers that supply the feeds shown in the charts. Market data providers do not receive your identity.

Email delivery providers used for transactional messages.

Publicly inside the platform: your display name appears on the leaderboard of any Challenge you take part in. Your email address never appears there.

Authorities or advisers when we are legally required, or in order to establish, exercise or defend a legal claim.

A buyer or successor if the business is reorganised or sold, under the same commitments made here.

We do not sell, rent or trade your personal data, and we do not share it for third-party advertising.

Our providers may process data on servers outside your country. When data leaves the European Economic Area or the United Kingdom, we rely on the safeguards those providers offer, such as standard contractual clauses.

Account and usage data: while your account is open, and up to 12 months after you close it, so that it can be recovered and any dispute resolved.

Billing records: for as long as tax and accounting law requires, usually between 5 and 10 years, kept to the minimum needed.

Technical logs: normally up to 12 months.

Support emails: up to 24 months.

When a period ends we delete the data or anonymise it so that it can no longer be linked to you.

You can ask for a copy of the personal data we hold about you, correct it if it is wrong, ask us to delete it, ask us to restrict or object to certain processing, receive it in a portable format, and withdraw a consent you had given.

You can change your display name and your password yourself from your profile. For anything else, write to support@kayrostrading.com from the email address registered on the account. We answer within 30 days.

Some data may survive a deletion request when the law obliges us to keep it, invoices being the typical case. If you are in the EEA or the United Kingdom you also have the right to complain to your data protection authority.

Data travels over encrypted connections, passwords are stored hashed by our authentication provider, and access to production data is limited to the people who need it. No system is perfectly secure: if a breach affects your data, we will notify you and the relevant authority as the law requires.

The Service is not intended for anyone under 18 and we do not knowingly collect data from minors. If you believe a minor has registered, write to us and we will delete the account.

We may update this Policy. The date at the top shows the current version, and we will give notice of material changes by email or inside the Service.

Questions, requests or complaints: support@kayrostrading.com