Privacy Policy

1. Information we process

Account and sign-in: email address (if you use email or Google), Telegram user and chat identifiers (if you use Telegram), Solana wallet addresses you bind by signing a message, and sign-in records. Technical: sessions, necessary cookies, IP address (used for rate limiting and security), device and browser information, and security and access logs. Product usage: a random identifier kept in your browser's local storage (not a cookie) and the product steps you take with it, such as opening a template, checking a strategy, running a trial or creating an agent, with the page path. These are recorded in our own database, with no third-party analytics and without your IP address. When you sign in or register, the steps recorded under that identifier before you signed in become linked to your account; clearing your browser storage starts a new identifier. Product content: your strategy prompts, the strategies compiled from them, agent settings, AI decision records and notifications. Funds and execution: your Vault address, balances, positions, transactions, fee claims and reconciliation records, most of which are public on-chain. Referrals: your referral code, who referred you, the people you referred, reward records and payout transactions. Error reports: when the web app hits an unexpected error we send a report to our error-monitoring provider; screen replays are captured only around errors, with all text and inputs masked. We never ask for your private keys or seed phrase.

2. Purposes of use

We use this information to create and secure accounts, run your agents within the boundaries you set, observe and reconcile on-chain state, calculate fees, referral discounts and rewards, send the notifications you enable, provide support, prevent abuse (for example rate limits and usage quotas), diagnose faults, and keep the decision and transaction records needed for security, accounting and disputes. We do not use advertising trackers and do not sell personal information.

3. Service providers

Information may be processed by providers acting for us: hosting and database infrastructure, Cloudflare (network and bot protection), email delivery, Google and Telegram sign-in, Solana RPC providers, Jupiter and Meteora data services, the AI model provider that reads your strategy prompts and market data to make decisions, and Sentry (error monitoring). Do not put unrelated personal or sensitive information in your strategy prompts. We may disclose information where required by law, to protect users and the service, or to investigate fraud or abuse.

4. Cookies, authentication and public on-chain data

The application uses the cookies or similar storage needed to keep you signed in, prevent request forgery, and remember necessary security state. Disabling them may make account features unusable. Local storage also keeps your interface preferences (language, theme, PnL unit) and the product-usage identifier described in section 1. Sign-in providers may set necessary cookies under their own policies.

Blockchain records are not controlled by Alokumi alone. Once broadcast, wallet addresses and transactions may be replicated long-term by nodes, indexers, and third parties around the world, and generally cannot be changed or deleted. Even if account records are deleted, public on-chain records may remain linked to an address.

5. Retention and security

Account information is retained for as long as needed to provide the service; authentication and security logs, strategy versions, and transaction and reconciliation evidence may continue to be retained after an account is closed to meet security, financial, dispute-handling, and legal requirements. Specific retention periods must be confirmed and published by the operator according to data category and applicable law; we do not invent a uniform period here.

The system separates the AI decision, policy, execution and observation functions into different processes and database roles, and live funds stay in Vaults owned by your wallet. However, no system can guarantee absolute security, and this policy is not a statement that the system has been independently audited, certified, or found to comply with any particular standard.

6. Your choices and rights

Depending on the laws where you are located, you may have the right to request access to, correction, export, or deletion of your information, to restrict or object to processing, to withdraw consent for processing based on consent, and to lodge a complaint with a regulator. We will first verify the identity of the person making the request. These rights may be limited by anti-fraud requirements, financial records, dispute preservation, legal obligations, the rights of others, and blockchain immutability.

You can update your account or stop agents to the extent the application allows. Send requests to [email protected].

7. Cross-border processing

Our servers and providers may process information outside your country. We take reasonable steps to protect it in line with this policy. The service is not available in the regions listed in the Terms of Service.

8. Contact and changes

The service is operated under the Alokumi brand. For privacy questions or requests (access, correction, deletion, objection), email [email protected]; we will verify your identity before acting on a request. Some records cannot be deleted where we must keep them for security, accounting or legal reasons, and public on-chain records cannot be changed by anyone. We will announce material changes to this policy in the application or on this site; the date at the top shows the latest version.