Privacy Policy
This Privacy Policy describes how KTR Capital, LP ("Helios", "we", "us") collects, uses, and shares personal information in connection with the Helios Markets website, applications, and APIs (the "Service"). By using the Service you agree to this Policy.
1. Information We Collect
Information you provide
- Account information: email address, password (stored hashed via bcrypt), and, if you sign in with Google, your name and email from your Google profile.
- Billing information: processed and stored by our payment processor Stripe. We do not store full card numbers on our servers.
- Communications: any messages or support requests you send us.
Information collected automatically
- Usage data: pages viewed, API calls made, signals retrieved, timestamps.
- Device & technical data: IP address, browser type and version, operating system, referring URL.
- Cookies: we use cookies and similar technologies to maintain your authenticated session (NextAuth) and to remember preferences. We do not currently use third-party advertising cookies.
2. How We Use Information
- To provide and maintain the Service, including authenticating you and delivering signals.
- To process subscriptions and payments through Stripe.
- To communicate with you about your account, security, billing, and product updates.
- To monitor, troubleshoot, and improve performance, reliability, and security.
- To detect, prevent, and respond to fraud or abuse.
- To comply with legal obligations.
3. Legal Bases (where applicable)
Where the GDPR or similar laws apply, we process personal data on the bases of (i) performing our contract with you, (ii) our legitimate interests in operating and improving the Service, (iii) your consent (e.g., for cookies in some jurisdictions), and (iv) compliance with legal obligations.
4. How We Share Information
We do not sell your personal information. We share information only as necessary to operate the Service:
- Stripe — for payment processing. See Stripe's Privacy Policy.
- Google — if you use Google sign-in, identification information is exchanged with Google.
- Hosting and infrastructure providers — for example, Google Cloud, who host our infrastructure under our instructions.
- Legal process — when required by valid subpoena, court order, or other legal obligation.
- Business transfers — in the event of a merger, acquisition, or sale of assets, your information may transfer to the successor entity.
5. Data Retention
We retain account and usage information for as long as your account is active and for a reasonable period thereafter to comply with legal, tax, accounting, and dispute resolution obligations. Billing records may be retained for up to seven (7) years to satisfy U.S. tax requirements. You may request deletion of your account and personal data at any time by contacting us, subject to records we are required to keep.
6. Security
We use industry-standard technical and organizational measures to protect personal information, including encrypted transport (TLS), hashed passwords, restricted internal access, and audit logging. No system is perfectly secure, and we cannot guarantee absolute security.
7. Your Rights
Depending on your jurisdiction, you may have rights to (i) access the personal information we hold about you, (ii) correct inaccurate information, (iii) request deletion, (iv) restrict or object to certain processing, and (v) request portability of your data. To exercise these rights, email privacy@helios.markets. We will respond within the timeframes required by applicable law.
If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information is collected and the right to opt out of any "sale" (we do not sell personal information).
8. International Transfers
Helios is operated from the United States. If you access the Service from outside the United States, your information may be transferred to and processed in the United States, where data protection laws may differ from those in your country.
9. Children's Privacy
The Service is not directed to children under 18. We do not knowingly collect personal information from anyone under 18.
10. Changes to this Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by updating the effective date above and, where appropriate, by email or in-product notice.
11. Contact
Privacy questions: privacy@helios.markets