Privacy Policy

Who is responsible for your data

Edgoro is operated by KIBŌ (EI), an individual enterprise (entreprise individuelle) under French law, registered under SIREN 988 981 700, whose registered office is at 335 Chemin de la Guiramande, B304, 13080 Aix-en-Provence, France. KIBŌ (EI) is the controller of the personal data described in this policy, under the EU General Data Protection Regulation (GDPR) and the French Data Protection Act (loi Informatique et Libertés).

For any question or request about your data, contact us at support@edgoro.com.

What we collect

• Account data. Your email address. If you sign in with Google, the name, email address and profile picture Google shares with us. The one-time sign-in codes we email you (valid for 10 minutes). Your plan, remaining free generations and the answers you give during onboarding (such as your goal, markets, trading style, experience and platform).
• Content you submit and receive. Strategy descriptions, chat messages, the chart screenshots you upload, and the code and analyses generated for you, with their versions.
• Payment data. Stripe collects your card details directly; we never receive or store your full card number. From Stripe we receive a customer identifier, subscription and payment status, amounts, currency, dates and renewal information.
• Support data. Messages you send through the contact form, by email or to the support assistant, with the page you were on and, if you're signed in, your account.
• Technical data. IP address, browser and device information and request logs, recorded by our hosting and backend providers; usage counters (for example, generations used) and rate-limit counters that protect the Service from abuse.

We don't ask for sensitive data (such as health, political opinions or religion). Please don't put it — or anyone else's personal data — in prompts or screenshots.

Why we use it, and our legal bases

We don't sell your personal data, we don't use it for targeted advertising, and we don't make decisions about you based solely on automated processing that have legal or similarly significant effects.

How AI processing works

When you generate code, refine a creation, analyse a chart or ask the support assistant a question, the relevant text — your prompt and the conversation context needed to answer it — and any screenshot you uploaded are sent to the Google Gemini API, which processes them and returns the answer, under Google's terms for the Gemini API.

Edgoro currently uses the free tier of the Gemini API. Under Google's terms for that tier, Google may use the prompts and screenshots you submit, and the answers it generates, to provide, improve and develop its products and services, and human reviewers may read them. For that reason, don't include personal or confidential information in prompts or screenshots — crop out account numbers, balances, names and anything else the task doesn't need before uploading.

We may move to a paid tier of the Gemini API, under which Google doesn't use submitted content to improve its products. If we do, we'll update this policy.

Service providers we share data with

We share personal data only with providers that help us run Edgoro, and only what each needs:

Stripe also acts as an independent controller for some data it processes to prevent fraud and meet its own legal obligations. Google does so for your Google account and, while we use the free tier of the Gemini API, for its own use of submitted content to improve its products. Their privacy policies apply to that processing.

We may also disclose data when the law requires it (for example, to a court or authority), to protect our rights or users' safety, or to a successor if the Service is transferred — in which case we'll tell you beforehand.

International transfers

Some of our providers process data outside the European Economic Area, mainly in the United States. When they do, the transfer is protected by an adequacy decision of the European Commission — such as the EU–US Data Privacy Framework, for certified providers — or by the Standard Contractual Clauses adopted by the European Commission, with additional safeguards where appropriate. You can ask us for more information about these safeguards at support@edgoro.com.

How long we keep data

When you delete your account, your data is removed from our active systems. Residual copies in our providers' backups are erased as those backups rotate. Records we must keep by law, such as invoices, are archived with restricted access until the legal period ends.

Your rights

Under the GDPR and French law, you have the right to:

• access your personal data and get a copy of it;
• have inaccurate data corrected;
• have your data erased;
• restrict how we use it in certain cases;
• object to processing based on our legitimate interests, and to direct marketing at any time;
• receive the data you gave us in a portable format;
• withdraw your consent at any time, where processing relies on it;
• give instructions about what should happen to your data after your death.

To exercise a right, contact us at support@edgoro.com. We may need to confirm your identity — usually by replying from your account's email address. We answer within one month; for complex requests, this can be extended by two more months, and we'll tell you if so.

Export and delete your data yourself

• Export: in Settings, download a copy of your account data and creations as a JSON file.
• Delete: in Settings, delete your account. This permanently removes your account and its content from our active systems and can't be undone, so download any code you want to keep first. Please cancel an active subscription before deleting your account.

Cookies and local storage

We only use cookies that are strictly necessary to sign you in and keep your session secure, and we store your display preferences (such as light or dark theme) in your browser's local storage. We don't use advertising cookies. We don't currently use analytics cookies; if we add audience measurement that requires consent, we'll ask for it first. Details are in our Cookie Policy.

Children

Edgoro is only for adults aged 18 or over. It isn't directed at children, and we don't knowingly collect data from anyone under 18. If you believe a minor has given us personal data, contact us and we'll delete it.

Security

Connections to Edgoro are encrypted (HTTPS). Sign-in is passwordless, so there's no password to steal or reuse, and sessions are kept in secure, HTTP-only cookies. Payments are handled entirely by Stripe, a PCI DSS–certified provider. Access to personal data is limited to what is needed to run the Service. No system is perfectly secure; if a breach is likely to put your rights at risk, we'll notify you and the CNIL as the law requires.

Changes to this policy

We'll update this policy when our practices or the law change. For significant changes, we'll let you know by email or in the app before they apply. The date at the top shows the current version.

Contact and complaints

For any privacy question or request, contact us at support@edgoro.com.

Service

Edgoro — edgoro.com

Operator

KIBŌ (EI), an individual enterprise (entreprise individuelle) under French law

Registration

SIREN 988 981 700

Registered office

335 Chemin de la Guiramande, B304, 13080 Aix-en-Provence, France

Contact

support@edgoro.com

If you think we haven't handled your data properly, you can lodge a complaint with the French data protection authority, the CNIL (Commission Nationale de l'Informatique et des Libertés), 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France — www.cnil.fr — or with the supervisory authority of the EU country where you live.