Privacy Policy
A clear record of what KLINEO collects, why it is needed, how exchange access is protected, and how you can exercise your data rights.
Last updated: October 18, 2026
See what KLINEO holds- Not sold
- Personal information is not sold, rented or traded to third parties for marketing.
- AES-256
- Encryption on stored API secrets; keys with withdrawal permissions are never requested.
- 30 days
- To respond to a request to exercise your privacy rights.
- 90 days
- How long technical logs are retained.
What KLINEO holds, and why
Pick a kind of data. Every line beside it is quoted from this policy.
- Collected
- Email address (for account creation and communication)
- Username and password (encrypted)
- Payment information (crypto checkout through NOWPayments; historical CoinPayments records where applicable)
- Trading preferences and risk parameters
- Communication preferences
- Used to
- Create and maintain your account
- Authenticate users and prevent fraud
- Send important account notifications
- Provide customer support
- Kept
- Account data: While your account is active plus 7 years for legal compliance
- You can
- You can update or correct your account information at any time via Settings.
- You can request deletion of your account and personal data, subject to legal retention requirements for financial records.
Introduction
The baseline for how KLINEO treats personal, account, and trading data.
KLINEO ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our trading workspace.
By using KLINEO, you consent to the data practices described in this policy. If you do not agree with this policy, please do not use our Service.
Information We Collect
Account details, encrypted exchange API data, trading activity, and technical diagnostics.
2.1 Personal Information
We collect information you provide directly to us:
- Email address (for account creation and communication)
- Username and password (encrypted)
- Payment information (crypto checkout through NOWPayments; historical CoinPayments records where applicable)
- Trading preferences and risk parameters
- Communication preferences
2.2 Exchange API Information
To provide exchange-connected trading services, we collect:
- Exchange API keys (encrypted and stored securely)
- API secrets (encrypted with AES-256)
- Exchange account balances and positions
- Trade execution data
2.3 Trading Activity Data
- Orders, positions, and performance metrics
- Platform fees and pass usage
- Risk control triggers and events
- Automation activation and pause history
2.4 Technical and Usage Data
- IP address and device information
- Browser type and operating system
- Login timestamps and session duration
- Platform feature usage and navigation patterns
- Error logs and diagnostic data
How We Use Your Information
Service operation, account management, platform improvement, and essential communication.
We use collected information for the following purposes:
3.1 Service Provision
- Execute eligible exchange-connected trading instructions
- Apply risk controls and position sizing
- Calculate and collect platform fees
- Reconcile historical records where required
- Manage subscription billing
3.2 Account Management
- Create and maintain your account
- Authenticate users and prevent fraud
- Send important account notifications
- Provide customer support
3.3 Platform Improvement
- Analyze usage patterns to improve features
- Monitor platform performance and reliability
- Develop new trading tools and capabilities
- Conduct security audits and prevent abuse
3.4 Communication
- Send platform updates and feature announcements
- Notify about risk events (daily loss limits, etc.)
- Share educational content (if opted in)
- Respond to support inquiries
Data Sharing and Disclosure
KLINEO does not sell personal data and limits sharing to required service contexts.
4.1 We Do Not Sell Your Data
KLINEO does not sell, rent, or trade your personal information to third parties for marketing purposes.
4.2 Service Providers
We may share information with trusted service providers who assist us:
- Payment processing (NOWPayments for configured crypto checkout; historical CoinPayments transaction records may be retained)
- Hosting, account authentication and data storage (including the configured Supabase service)
- Email delivery through the configured SMTP service
- Google Analytics, Plausible and PostHog when configured, as described in the analytics section
Provider processing depends on the feature and configured service. AI-assisted analysis and workflow authoring can send submitted prompts, relevant market context and workflow content to Google Gemini. Do not submit API secrets, passwords or seed phrases in AI prompts. Contact support@klineo.xyz for questions about a particular processing activity.
4.3 Exchange Platforms
We connect to supported cryptocurrency exchanges via your API keys to execute trades. Exchanges may have their own privacy policies governing how they handle trading data.
4.4 Legal Requirements
We may disclose your information if required by law or in good faith belief that such action is necessary to:
- Comply with legal obligations or court orders
- Protect the rights and safety of KLINEO and users
- Investigate fraud, abuse, or security issues
- Cooperate with law enforcement investigations
4.5 Aggregated Data
We may share anonymized, aggregated data (platform statistics, trading volume, etc.) that does not personally identify you.
Data Security
Encryption, access controls, and practical limits around absolute security guarantees.
We implement industry-standard security measures to protect your information:
5.1 Encryption
- Public service connections use HTTPS/TLS; service availability and implementation limits still apply
- Stored exchange credentials encrypted with AES-256-GCM by the credential service
- Account authentication handled by the configured authentication service
- Access to stored account and trading records is restricted by service and account permissions
5.2 Access Controls
- KLINEO account two-factor enrollment is unavailable in the current build; the Settings enrollment control is disabled
- Role-based access for internal systems
- Security issues can be reported to security@klineo.xyz; no independent audit or certification is claimed here
- Limited employee access to personal data
Data Retention
How long account, trading, API, communication, and technical records remain available.
We retain your information for as long as necessary to provide services and comply with legal obligations:
- Account data: While your account is active plus 7 years for legal compliance
- Trading history: Retained indefinitely for tax and audit purposes
- API credentials: Disconnecting retires the saved connection when active work has been reconciled; it does not immediately erase the encrypted credentials. Revoke the key or API-wallet approval at the exchange as well. Contact privacy support about retained credential data and deletion requests, including account closure.
- Communication logs: Retained for 3 years
- Technical logs: Retained for 90 days
Your Privacy Rights
Access, portability, correction, deletion, opt-out choices, and request handling.
You have the following rights regarding your personal data:
7.1 Access and Portability
You can request a copy of your personal data in a machine-readable format.
7.2 Correction
You can update or correct your account information at any time via Settings.
7.3 Deletion
You can request deletion of your account and personal data, subject to legal retention requirements for financial records.
7.4 Opt-Out
You can opt out of non-essential communications (marketing, newsletters) while still receiving critical account notifications.
7.5 Exercising Your Rights
To exercise any of these rights, contact us at privacy@klineo.xyz. We will respond within 30 days.
International Data Transfers
Cross-border operations, contractual safeguards, and encrypted transfer handling.
KLINEO operates globally and may transfer data across borders. We use standard contractual clauses and encryption to protect data during international transfers. By using KLINEO, you consent to such transfers.
Children's Privacy
KLINEO is not intended for minors and does not knowingly collect minor data.
KLINEO is not intended for users under 18 years of age. We do not knowingly collect information from minors. If you believe a minor has provided us with personal information, please contact us immediately.
Changes to This Policy
Policy updates, material change notices, and continued-use acceptance.
We may update this Privacy Policy periodically. Changes will be posted on this page with an updated "Last Updated" date. Material changes will be communicated via email or platform notification. Your continued use after changes constitutes acceptance.
Contact Us
Direct contacts for privacy questions, support, and rights requests.
For privacy-related questions or to exercise your data rights:
By using KLINEO, you acknowledge that you have read and understood this Privacy Policy.
Company details
KLINEO is operated by Zaum International Private Limited.
Company registration: C-0423/2014
Zimm Building, Majeedhee Magu Road, Male' 20160, MaldivesContact the operating company for account, platform, or legal questions.
About KLINEO and its team