Ketelos Trading
Privacy policy
This policy covers ketelos.com, the customer portal at app.ketelos.com, and the cloud account behind them. It will be reviewed by counsel before Ketelos is offered to customers; any change will be published here with a new date.
Who we are
Ketelos Trading is a product of Kerythos AI, established in Brazil, which decides how the data described here is used (the controller, under Brazil's data protection law, the LGPD).
For anything about your data, including the requests listed under Your rights, write to privacy@ketelos.com. That address also reaches the person responsible for data protection (the encarregado).
The short version
- We collect as little as the product needs, and we say what each piece is for.
- The website uses no cookies, no analytics and no advertising tracker.
- Your trading happens on your own computer. Your trading account stays between you and your broker, and your trading history stays on your machine.
- You can download a copy of your account data, or delete your account, from the portal at any time, without asking anyone.
What we collect, and why
| What | Why | Legal basis |
|---|---|---|
| Launch list: email; optionally your name, country, trading experience, the platform you use and the capital range you plan to use; your language and the moment you agreed | To send you one message when Ketelos opens, and to plan the launch (which languages, platforms and account sizes to prepare for) | Your consent (LGPD art. 7, I), which you can withdraw at any time |
| Account: email, the record of your authenticator, your name and language, your answers to the risk profile questionnaire, and the strategy settings you save | To give you an account, protect it, and keep your settings | Performance of the contract with you (art. 7, V) |
| Machine reports: each machine's name and number, its Ketelos version and operating system, and for each robot the broker name, account number, market, candle size, whether it is running and whether a position is open | To show you, in the portal, whether your machines are alive and up to date | Performance of the contract with you (art. 7, V) |
| Emails we send: sign in codes and security notices, and the delivery records our email provider keeps | To let you in and warn you of changes to your account | Performance of the contract (art. 7, V) and our legitimate interest in keeping accounts safe (art. 7, IX) |
| Website and portal requests: the standard information any web server receives, such as your IP address, the page and the time | To run the site and protect it from abuse | Legitimate interest (art. 7, IX) |
Machine reports never contain your balance, your profit or loss, or your trades. We never ask for or receive access to your trading account.
Who handles it for us
We use a small number of providers, each for one job, under agreements that bind them to process the data only on our instructions:
| Provider | What it does | Where |
|---|---|---|
| Kethosbase (Kerythos AI's own platform) | Database and sign in for accounts and the launch list | Oracle Cloud Infrastructure, United States |
| Amazon Web Services (Amazon SES) | Delivers the emails we send | United States (Oregon) |
| Cloudflare | Answers for the ketelos.com domain and forwards email sent to ketelos.com addresses | Global network |
| Vercel | Hosts the website and the portal | Global network |
These providers are outside Brazil, so your data is transferred internationally. We rely on the safeguards the LGPD allows for this (article 33), and counsel will confirm the instrument for each provider before launch.
We do not sell your data, and we do not share it with anyone for advertising.
Cookies and similar technologies
Website: none. ketelos.com sets no cookie, runs no analytics, and loads nothing from any other company. The only script it runs is the one that sends the launch list form.
Portal: while you are signed in, the portal keeps your session in your browser tab's own storage, which the browser erases when the tab closes. It remembers the language you chose in your browser's local storage. Both are needed for the portal to work, and neither is used to track you.
Email: our email provider adds a small invisible image to the messages we send, which records when a message is opened. We do not use it to profile you.
How long we keep it
- Launch list: until we send the launch message and 90 days after, and never more than 24 months. Ask and we delete it sooner.
- Account data: for as long as you keep the account. Deleting the account in the portal removes it from our live database at once.
- Machine reports: only the latest report of each machine is kept, and it goes when you forget the machine or delete the account.
- Email delivery and hosting logs: kept by the providers for the short periods their own policies set, for security and to prove delivery.
Your rights
Under the LGPD (article 18) you may confirm whether we hold your data, see it, correct it, have it made anonymous, blocked or deleted, take it with you, learn who we share it with, and withdraw consent you gave.
In the portal you can do the two most common ones yourself: download a copy of your data and delete your account. For everything else, and for the launch list, write to privacy@ketelos.com. We answer within 15 days.
You can also complain to Brazil's data protection authority, the ANPD.
Security
Signing in to the portal always needs a second factor. The database itself refuses to show account data to a session that has not passed it. Each customer can only reach their own data. The website and the portal accept only encrypted connections and load nothing from other companies, and the domain is signed against forgery. No system is perfectly safe; if something goes wrong that affects your data, we will tell you and the ANPD, as the law requires.
To report a security problem, see ketelos.com/.well-known/security.txt.
Children
Ketelos is not meant for anyone under 18, and we do not knowingly collect data from them.
Changes
When this policy changes, the new version is published here with a new date. If a change affects how we use data you already gave us, we will tell you before it applies.