Kalshi Eye collects as little personal data as it needs to run your account and bill you. We do not sell personal data and we do not use advertising trackers.
What we collect
- Account: your email address and a hashed password (we never store the password itself), your plan, and the date you signed up and verified your email.
- Billing: Stripe handles payments. We store your Stripe customer and subscription IDs and your plan. Card details go straight to Stripe and never reach our servers.
- Usage: the files and API requests you make, their sizes and times, so we can apply your download allowance and API limits. API keys are stored as hashes.
- Technical: IP addresses and request logs, used for security, rate limiting and fixing problems.
- Site visits: Plausible Analytics counts page views, where visitors came from, and sign-ups and checkouts started. It uses no cookies, does not store IP addresses, and does not identify you or follow you across sites.
- Messages: what you send us by email.
Why we use it
To provide the service you signed up for (contract), to bill you and keep records the law requires (legal obligation), and to keep the service secure and working (legitimate interest). We email you about your account, security and billing. We send product news only if you ask for it.
Cookies and local storage
We use one cookie to keep you signed in, limited to our sign-in endpoints, and your browser’s local storage to remember your session, your selected downloads and the last page you viewed. These are needed for the site to work. Our analytics (Plausible) uses no cookies, and we use no advertising cookies. Stripe sets its own cookies on its checkout pages to prevent fraud.
Who processes it for us
- Stripe: payments, invoices and the billing portal.
- Amazon Web Services: hosting, the database and logs (United States).
- Cloudflare: storage and delivery of data files.
- Resend: sending account emails.
- Plausible Analytics: cookieless visitor statistics (European Union).
Each processes data only to provide its service to us. Some are in the United States; where the law requires it, transfers use the safeguards those providers offer, such as standard contractual clauses.
How long we keep it
Account data is kept while your account is open and deleted within 30 days after you close it. Billing records are kept as long as tax law requires. Request logs are kept for up to 90 days.
Your rights
You can ask for a copy of your personal data, ask us to correct it, or ask us to delete your account and data by emailing support@kalshieye.com from your account email. We answer within 30 days. Depending on where you live you may also have the right to object to or restrict processing, to data portability, and to complain to your data protection authority.
Security
Traffic is encrypted with TLS, passwords are hashed with bcrypt, the database is encrypted at rest, and access to production systems is restricted. No system is perfectly secure; if a breach affects your data we will tell you as the law requires.
Children
The service is not meant for anyone under 18 and we do not knowingly collect their data.
Changes
If we change this policy in a material way we will email account holders before the change takes effect.
Contact
Privacy questions and requests: support@kalshieye.com.