Privacy Policy for Kalendoscope
Last Updated: September 27th, 2026 | Effective date: September 27th, 2026
Kalendoscope, operated by an independent sole proprietorship under the laws of Japan with operating office in Okayama, Japan, acts as the Data Controller (or Business Operator Handling Personal Information under the APPI) for the personal data processed under this Policy. At Kalendoscope, we prioritize the confidentiality and security of your trading data. This Privacy Policy outlines our commitment to data protection.
Local Data Processing
Kalendoscope is designed to prioritize user privacy. We aim to process analytical calculations and market data locally on your device or within your secured workspace whenever technically feasible. We do not store your proprietary trade data, Excel configurations, or private market strategies on our external servers.
Data We Collect
- Account information: name, email address, billing and contact details provided when you register or manage your subscription.
- Usage logs: anonymized, high-level technical metadata (feature usage, error logs, session length) used to keep the platform stable and to improve it.
- Communications: anything you send us when requesting support or talking to your Technical Success Manager.
- Device and connection data: IP address, browser type, and similar technical identifiers, collected automatically for security and fraud prevention.
- Payment data: processed by our payment provider on our behalf; we do not store full card numbers.
What We Do NOT Collect
- We do not monitor your specific trading activity, your open positions, or your P&L.
- We do not store the OHLC values, Excel links, or pivot configurations you enter unless you explicitly opt into server-side backup of that data.
- We do not sell or share your usage patterns with third-party financial entities or brokers.
Artificial intelligence and automated processing
- Kalendoscope’s pivot, backtest, and rollover calculations are deterministic financial formulas, not AI/machine-learning models, and they run on the data you provide without profiling you as a person.
- If we introduce AI-assisted features (for example, natural-language help or anomaly flagging), we will describe them here before or when we launch them, consistent with the transparency obligations of Article 50 of the EU AI Act: you will be told when you are interacting with an AI system, and any AI-generated content that could otherwise be mistaken for human output will be labeled.
- We do not use your proprietary trade data, Excel configurations, or strategies to train any AI or machine-learning model, ours or a third party’s, without your explicit, separate consent.
- We do not make decisions producing legal or similarly significant effects about you based solely on automated processing, without the possibility of human review (GDPR Art. 22).
Cookies and similar technologies
We use strictly necessary cookies to keep you signed in and to remember your panel preferences, and, only with your consent where required by law, analytics cookies to understand aggregate usage. You can manage cookie preferences through your browser settings.
Who we share information with
- Service providers who process data on our behalf under contract (hosting, email delivery, payment processing, customer support tooling), bound by confidentiality and data-processing agreements.
- Legal and safety reasons: to comply with a legal obligation, or to protect the rights, property, or safety of Kalendoscope, our users, or others.
- Business transfers: in a merger, acquisition, or asset sale, subject to the same protections described here.
- We do not sell personal information, and we do not share it with brokers or other financial entities for their own marketing purposes.
International data transfers
Where information is transferred outside the country where it was collected (for example, to hosting providers in another region), we rely on one of the following safeguards:
- An adequacy decision recognizing the destination country’s data protection as equivalent (e.g., transfers between the EU/UK and Japan, both subject to mutual adequacy findings);
- Standard Contractual Clauses (SCCs) approved by the European Commission, or the equivalent mechanism under UK GDPR;
- Your explicit, informed consent to the specific transfer, including the destination country and the protections in place there, where required under Japan’s Act on the Protection of Personal Information (APPI); or
- A contractually verified system providing protection equivalent to APPI standards, monitored periodically.
Data retention
We retain personal information only for as long as necessary to fulfill the purposes set out in this Policy:
Account and profile details: retained for the active duration of your subscription plus 12 months following account closure.
- Transactional and billing records: retained for up to 7 years to comply with statutory accounting and tax recordkeeping requirements under Japanese and international law.
- Technical logs and support correspondence: retained for up to 6 months for security auditing and customer support resolution.
Retained personal data may be corrected, restricted, or deleted upon verified request as described below.
Your privacy rights
If you are in the European Economic Area or the United Kingdom (GDPR / UK GDPR): You have the right to access, rectify, or erase your personal data; to restrict or object to processing; to data portability; to withdraw consent at any time without affecting prior processing; and to lodge a complaint with your local data protection supervisory authority. To exercise any of these, contact us at the address in Section 1.
If you are a California resident (CCPA/CPRA): You have the right to know what personal information we collect and how it is used; to request deletion or correction; to opt out of the sale or sharing of personal information (we do not currently sell or share personal information as those terms are defined by the CCPA); to limit the use of sensitive personal information; and to be free from discrimination for exercising these rights. We honor recognized opt-out preference signals, including the Global Privacy Control (GPC). You may also designate an authorized agent to submit requests on your behalf.
If you are in Japan (APPI): You may request disclosure of the personal information we hold about you, request correction of inaccurate data, and request suspension of use or deletion where data has been used beyond its stated purpose or obtained improperly. You may also file a complaint with the Personal Information Protection Commission (個人情報保護委員会, PPC). We disclose the purpose of use of your personal information at or before collection and will not use it for a different purpose without your consent.
Everywhere else: even where local law does not require it, we will make reasonable efforts to honor equivalent requests for access, correction, or deletion.
Security
We use industry-standard encryption in transit and at rest for account and billing data, role-based access controls, and regular review of our security practices. Because your analytical work stays local wherever feasible, your strategies and benchmarks remain under your own control.
Children's privacy
The Service is intended for professional use and is not directed at children. We do not knowingly collect personal information from anyone under 16.
Changes to this policy
We will update the «Last updated» date above whenever we make material changes to this policy, and, for significant changes, notify subscribers by email or through an in-app notice before the changes take effect.
Contact
For any privacy-related inquiries, please contact our support team at [info@kalendoscope.com].