Privacy Policy

Last updated 16 September 2026

This policy covers signal.kafra.ai. It describes what we collect, why we hold it, and who else touches it. Questions go to support@kafra.ai.

What we collect

Name, email and phone number — given at registration, used to issue your access key and to reach you about your account.
Your access key and its expiry — this is what logs you in.
Broker account number — only if you apply for free access through membership, so the introducing broker can verify the account qualifies. We see the account reference, never your broker login or your trades.
Notification subscription — if you allow browser notifications, we store the token your browser issues so we can send signal alerts. Revoking the permission ends this.
Basic usage — last login time, and which signals your dashboard has loaded.

What we never see

Your card details — payments run entirely through Stripe and card numbers never reach our servers. Your broker credentials — we never ask for a password or trading access, only the account number needed to verify membership.

Who processes your data

Stripe — payments, subscriptions and invoices.
Supabase — the database holding subscribers, access keys and signal history.
Vercel — hosting for this website and its API.
Resend — sending account emails, such as your access key.
Infinox — for membership applications only, we confirm with the broker that the account you gave qualifies.

We do not sell your data, and we do not share it for advertising.

How long we keep it

Account records are kept while your account exists and for as long as we must retain payment records. Signal history forms part of our published performance record and is not linked to individual customers.

Your choices

See or correct your details — email us and we will send you what we hold.
Delete your account — email us. Personal details are removed; accounting records are kept in a minimal form where the law requires it.
Stop notifications — turn them off in your browser, or in the dashboard.
Stop marketing emails — every one carries an unsubscribe link. Payment and access emails continue.

Security

The site is served over HTTPS. Your access key is the credential for the dashboard, so treat it like a password. If yours may have leaked, email us and we will issue a new one.

Changes

Material changes update the date at the top of this page. Continuing to use the service after a change means you accept it.