Privacy Notice

KODA Capital is designed to be compliant with the General Data Protection Regulation (GDPR, European Union), the California Consumer Privacy Act (CCPA), and the Lei Geral de Proteção de Dados (LGPD, Brazil).

Data we collect

• Tickers entered by the user during sessions (cached locally for navigation history).
• Locale preference (stored in a cookie or local storage, used to render in the chosen language).
• Anonymous request metadata (IP, user agent) via the hosting provider for security and abuse prevention.

Data we do NOT collect

• Names, email addresses, phone numbers, or other personally identifying information beyond what a user voluntarily provides.
• Broker account credentials, banking information, or any execution-related data.
• Government-issued identifiers (CPF, CNPJ, SSN) in any form.
• Information about user portfolio holdings, positions, or trading history.

Third-party services

• Hosting and analytics: Vercel (anonymised aggregate metrics).
• Public market data: Yahoo Finance, Brapi.dev, BCB SGS, ANBIMA — no user data is sent to these providers.
• Persistence: Supabase (EU/Tokyo region) for the platform’s prediction ledger only; no user-identifying data stored.

User rights (GDPR Articles 15–22)

Users have the right to access, rectify, erase, port, or object to processing of personal data — even though we collect almost none. Requests can be sent to privacy@trabal-group.com.

Children

KODA Capital is not directed to individuals under the age of 18. We do not knowingly collect data from minors.

Retention

Local-storage data persists until the user clears it via browser settings. Server-side request logs are retained for 30 days for security and operational diagnostics, after which they are deleted.

Last updated: 2026-04-26 · Trabal Futures · ADGM