Privacy Policy

We collect only what we need to run the Service:

• Account data— your email address (we use a one-time code to sign you in; we don’t store a password).
• Strategy and usage data — the strategies you author, conversations with the Edgena agent, backtests, deployments, decisions, and trade history generated by your use.
• Exchange data — public wallet addresses and agent authorizations you connect, and the orders and positions placed through them. We never receive your exchange private keys.
• Billing data — credit balance and ledger entries. Card and on-chain payments are handled by our payment processors; we do not store full card numbers.
• Technical data — basic logs and error reports needed to operate and secure the Service.

To provide and operate the Service (authoring, backtesting, running deployments, and billing), to maintain security and prevent abuse, to provide support, and to improve the product. We process AI requests (for the chat agent and trading agents) through model providers to generate the features you use.

We share data with vetted third parties only as needed to run the Service, including: cloud hosting and database providers; AI model gateways and providers (to process your prompts and strategy context); exchanges such as Hyperliquid (to place the orders you authorize); and payment processors (to handle top-ups). These providers process data on our behalf under their own terms.

We do not sell your personal information, and we do not use your private strategy content to train third-party models beyond what is necessary to process your own requests.

We retain your data for as long as your account is active and as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. You may request deletion of your account and associated data, subject to records we must keep by law.

We use reasonable technical and organizational measures to protect your data. No system is perfectly secure; you are responsible for keeping your login and exchange authorizations safe and for revoking authorizations you no longer use.

Depending on your jurisdiction, you may have rights to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise these rights, contact us at the address below.

We operate from Malaysia and use providers that may process data in other countries. Where required, we rely on appropriate safeguards for such transfers.

The Service is not directed to anyone under 18, and we do not knowingly collect data from children.

We may update this policy; material changes will be reflected by the “Last updated” date above. Continued use after a change constitutes acceptance.

Kupia — Kuala Lumpur, Malaysia.
Privacy questions or requests: admin@kupia.io.