Privacy Policy

This Privacy Policy explains how AllocaFi Digital / KaliTrader ("KaliTrader," "we," "us," or "our") collects, uses, discloses, retains, and protects information when you use KaliTrader, Kali ZION, Kali ZION RSI, member and marketing workspaces, payment flows, support, and related services (the "Service").

Information We Collect

Member and account data

We may collect your email address, name, member or user ID, plan, entitlement status, paid-through date, signup and activity timestamps, preferences, alert settings, account notes, and records of access grants, suspensions, cancellations, or other account changes.

Stripe subscription and payment data

Stripe processes payment credentials. We may receive and store Stripe customer, checkout-session, subscription, price, invoice, charge or payment identifiers; payment and subscription status; renewal or cancellation status; paid-through dates; amount, currency, tax, discount, and receipt metadata; and limited payment-method details such as brand and last four digits when supplied by Stripe. We do not receive or store complete card numbers or CVVs. Stripe handles payment data under its own privacy terms.

Stablecoin invoice and blockchain data

We may collect the invoice ID, plan, network, token, token contract, amount, destination wallet, sending wallet, refund address, transaction hash, confirmation and verification status, block information, and review notes. Wallet addresses, transaction hashes, token transfers, and related blockchain events are public records. Do not send us a private key, seed phrase, or wallet recovery phrase.

Device, session, usage, and analytics data

We may collect IP address, browser and device type, operating system, referring page, pages or features used, timestamps, error and diagnostic events, approximate location derived from IP, and cookie, local-storage, session, or similar identifiers. We may use first-party or service-provider analytics to understand performance, adoption, reliability, and abuse. Analytics may be aggregated or associated with a session or member record where needed.

Support and communications

We collect messages, screenshots, request categories, identity-verification details, receipts, invoice and transaction identifiers, refund or deletion instructions, and our responses. Remove passwords, full card data, private keys, seed phrases, and unrelated personal information before sending a screenshot or message.

Connected social and marketing-platform data

If an approved operator connects Facebook, Instagram, X, or another platform, we may process access tokens, platform account and Page IDs, profile names, permission scopes, connection status, draft and approval history, publishing instructions, post identifiers, public content, engagement needed for the workflow, and publishing results. We use platform permissions only for the selected connection and publishing workflow and do not sell Meta user data.

How We Collect Information

We collect information directly from you, automatically through the Service, from payment and integration providers, from authorized operators, and from public blockchains. A blockchain record remains publicly available independently of KaliTrader.

How We Use Information

• Create and maintain member records, sessions, preferences, plans, and entitlements.
• Process Stripe checkout and renewals, verify stablecoin invoices, reconcile payments, and handle cancellations, refunds, disputes, and fraud reviews.
• Provide live or delayed market intelligence, proof records, exports, alerts, APIs, and support.
• Operate approved social connections and publish content when an authorized operator enables publishing.
• Monitor availability, troubleshoot errors, measure usage, improve features, and secure the Service.
• Communicate service, billing, security, policy, and support information.
• Enforce agreements, protect users and providers, prevent abuse, and comply with law.

Where a law requires a legal basis, we rely as applicable on performance of our agreement with you, legitimate interests in operating and protecting the Service, consent, and compliance with legal obligations.

Cookies, Sessions, and Analytics

The Service may use cookies, browser storage, or similar technologies to maintain a session or member selection, remember preferences, protect requests, measure usage, diagnose errors, and prevent abuse. Blocking required storage can prevent account or entitlement features from working. Where required, we will seek consent before using nonessential analytics or similar technologies. Browser controls can clear stored data, but doing so may sign you out or reset preferences.

How We Disclose Information

We may disclose information:

• To hosting, database, security, analytics, communications, and support providers that operate the Service for us.
• To Stripe and other payment providers for checkout, billing, fraud, refunds, disputes, and compliance.
• To blockchain nodes, RPC providers, and explorers when verifying public transactions.
• To connected social platforms when an approved operator requests connection or publishing.
• To professional advisers, auditors, insurers, or authorities when reasonably necessary for legal, security, or compliance purposes.
• In a financing, acquisition, reorganization, or sale, subject to appropriate confidentiality and notice requirements.

Public posts are intentionally disclosed to the selected platform. Public blockchain data is disclosed by the blockchain itself. We do not sell personal information for money. If our practices become subject to a broader statutory definition of sale or targeted-advertising sharing, we will provide required notices and choices.

Retention

We retain member, entitlement, payment-reference, invoice, support, security, and operational records while needed to provide the Service and for legitimate accounting, tax, audit, fraud, dispute, enforcement, and legal purposes. Session and diagnostic data may be kept for shorter operational periods. Connected-platform tokens are retained only while needed for the authorized connection and are deleted or disabled when the connection is removed or a verified deletion request is completed, subject to legal exceptions.

When information is no longer needed, we delete, anonymize, or aggregate it. Limited copies may remain temporarily in rotating backups and security logs. We cannot delete information from a public blockchain, a third party's independent records, or a public post controlled by another platform.

Security

We use administrative, technical, and organizational safeguards appropriate to the Service, including limiting access to payment and connection records. No storage or transmission method is completely secure. Protect your email, devices, sessions, payment accounts, and wallets, and report suspected unauthorized activity promptly.

Your Choices and Rights

You may update account information, manage available cookie or browser controls, disconnect social integrations, cancel recurring billing, and request access, correction, deletion, or a copy of certain information. Rights vary by location and may be subject to identity verification and lawful exceptions. We will not discriminate against you for exercising a privacy right protected by applicable law.

Cancellation and deletion are separate. Cancel a Stripe subscription to stop future renewal, then submit a deletion request if you also want eligible account data removed. See the Data Deletion Instructions and Refund and Cancellation Policy.

International Processing

We and our providers may process information in countries other than where you live. Where required, we use recognized safeguards for cross-border transfers and remain responsible for our processing instructions.

Age Requirement

The Service is for people age 18 and older. We do not knowingly collect personal information through the Service from anyone under 18. If you believe a minor provided information, contact support so we can review and delete it.

Changes and Contact

We may update this Policy and will post the new effective date, with additional notice where required. Use the verified channel described on the Support page for privacy questions or requests. Include enough information to verify the account, but never send a password, full card number, CVV, private key, seed phrase, or wallet recovery phrase.