Privacy Policy

Account and waitlist data. When you join the waitlist or create an account, we collect your email address, plan preferences, billing-cycle preference, self- reported trader experience level, and (optionally) how you heard about us. We also record the date and time you acknowledged the research-only disclosure.

Technical data. We record your IP address and browser user-agent string when you submit forms or use the Service. This is used for security, rate-limiting, and abuse prevention.

Usage data. When you are logged in and using the terminal, we keep a private log of the analyses you run, alerts routed to your account, and preferences you configure (e.g. notification settings). This data is used to personalise your experience and to improve the Service.

Communication data. If you link a Telegram chat to receive alerts, we store the Telegram chat identifier associated with your account. If you contact support, we store the messages so we can respond.

Payment data. When paid plans go live, payment is processed by our billing provider (Lemon Squeezy). We receive a payment status and subscription identifier — we do not receive or store your full card number, CVV, or bank credentials.

• We do not collect your brokerage account balances, positions, or trades.
• We do not connect to any brokerage or execution venue.
• We do not use tracking pixels from third-party ad networks.
• We do not sell your personal information to any third party.

We use the information we collect to:

• Provide, operate, and improve the Service;
• Send you alerts, notifications, and account-related emails;
• Process payments and manage subscriptions;
• Detect, prevent, and investigate abuse, security incidents, and violations of our Terms;
• Comply with legal obligations and enforceable requests from authorities.

We rely on a small number of infrastructure providers to run the Service. They only process the data needed to perform their role, under contractual data-protection obligations:

• a cloud infrastructure provider (application hosting and databases);
• a delivery network provider (DNS, edge caching, TLS);
• a payments provider (subscription billing);
• a messaging platform (delivery of Telegram alerts, only if you link your account);
• an AI reasoning provider (generation of plain-English narratives from the engine's pre-computed outputs);
• market-data providers (delivery of price and event data).

We do not disclose the specific vendor names on the marketing surface to reduce attack-surface disclosure. If you need the full list for a compliance or due-diligence review, contact us at support@kriterioniq.com.

We use cookies and browser local storage strictly for essential functionality: keeping you logged in (session tokens), remembering your UI preferences, and CSRF/security tokens. We do not use advertising or cross-site tracking cookies.

Waitlist entries. We retain waitlist submissions until you request deletion or until 24 months of inactivity following the launch of paid access.

Account data. We retain your account data while your account is active and for up to 12 months after cancellation, after which it is deleted or irreversibly anonymised, except where longer retention is required by law (e.g. tax records for invoiced customers).

Logs. Security and operational logs are retained for up to 90 days.

Depending on where you live (including under the EU GDPR, UK GDPR, and California CCPA/CPRA), you may have the right to:

• Access — request a copy of the personal data we hold about you;
• Rectify — ask us to correct inaccurate data;
• Delete — ask us to erase your data ("right to be forgotten");
• Object or restrict — object to certain uses;
• Portability — receive your data in a machine-readable format;
• Opt out — of marketing emails at any time using the unsubscribe link;
• Withdraw consent — where we rely on consent, you may withdraw it.

To exercise any of these rights, email support@kriterioniq.com. We respond within 30 days.

Kriterion IQ is operated globally. Your data may be processed in countries other than where you live. Where required, we rely on appropriate legal mechanisms (such as Standard Contractual Clauses) to protect cross-border transfers.

We implement industry-standard technical and organisational measures to protect your data — including encryption in transit (TLS), password hashing, access controls, and rate limiting. However, no system is perfectly secure. If we become aware of a personal-data breach, we will notify affected users and applicable authorities as required by law.

Kriterion IQ is not directed to children under 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

We may update this Privacy Policy from time to time. Material changes will be announced by email or in the Service at least 14 days before they take effect. The "Effective Date" at the top of this page reflects the latest revision.

For privacy questions, data requests, or anything else: support@kriterioniq.com.