Last updated: February 18, 2026
This Privacy Policy describes how Prevayo ("we," "us," or "our") collects, uses, and protects your personal information when you use the Prevayo platform ("Service"). By using the Service, you agree to the practices described in this policy.
Account Information: When you register, we collect your username, email address, and a hashed version of your password. We never store passwords in plain text.
Payment Information: Payment processing is handled entirely by Stripe, Inc. We do not store your credit card number, bank account details, or other payment credentials on our servers. We may store your Stripe customer ID and subscription status to manage your access.
Usage Data: We may collect information about how you use the Service, including pages viewed, features used, and interaction patterns. This data is used to improve the Service.
Kalshi API Credentials: If you choose to connect your Kalshi account, your API credentials are used in real-time to execute your requested actions and are not permanently stored on our servers.
Two-Factor Authentication: We temporarily store one-time verification codes sent to your email. These codes expire after 10 minutes and are deleted after use.
We use your information to:
We do not sell, rent, or trade your personal information to third parties for marketing purposes.
We use the following third-party services that may process your data:
Your account data is stored using Vercel KV (Redis-based key-value storage). We implement reasonable security measures to protect your information, including password hashing, HTTPS encryption in transit, and limited access controls. However, no method of electronic storage is 100% secure, and we cannot guarantee absolute security.
We retain your account information for as long as your account is active or as needed to provide the Service. If you request account deletion, we will remove your personal data within 30 days, except where retention is required by law or for legitimate business purposes (such as fraud prevention or financial recordkeeping).
Depending on your jurisdiction, you may have the right to:
To exercise any of these rights, contact us at support@prevayo.com. We will respond within 30 days.
The Service uses minimal cookies strictly necessary for authentication (session management via localStorage). We do not use third-party tracking cookies, advertising cookies, or analytics services that track individual users across websites. If we add analytics in the future, this policy will be updated accordingly.
The Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from minors. If we become aware that we have collected information from a minor, we will delete it promptly.
The Service is hosted in the United States. If you access the Service from outside the United States, your information may be transferred to, stored, and processed in the United States. By using the Service, you consent to this transfer.
We may update this Privacy Policy from time to time. Material changes will be communicated via email or a notice on the Service. Your continued use after changes constitutes acceptance of the updated policy.
For questions about this Privacy Policy or to exercise your data rights, contact us at support@prevayo.com.