1. Who We Are
KormaDesk is operated by Summitstone Enterprises LLC, a Maryland limited liability company. Our website is kormadesk.com. Contact:
support@kormadesk.com
2. What We Collect
Account data: Name, email address, username, password (hashed), and membership status when you register.
Payment data: Billing information is processed by Stripe. We do not store your credit card number — Stripe handles all payment processing under their own privacy policy.
Trade journal data: When you use My Edge, we store trade ideas, option contracts, AI verdicts, KD scores, and resolved option P&L data you explicitly save. This data is tied to your account.
Usage data: Pages visited, tickers searched, features used, and timestamps. We use this to improve the product.
Technical data: IP address, browser type, device type, and cookies necessary for authentication and security.
3. How We Use Your Data
· To provide and operate the KormaDesk terminal
· To process payments and manage your membership
· To resolve option P&L on trades you've saved (via Polygon Markets API)
· To generate AI analysis using GPT-4o (OpenAI), Claude (Anthropic), Gemini (Google), and Grok (xAI)
· To send transactional emails (billing confirmations, cancellations, account notices)
· To improve our scoring models and product features
We do not sell your personal data. We do not use your data for advertising.
4. AI Model Data Usage
When you request AI analysis, your ticker, trade details, and market data are sent to third-party AI providers (OpenAI, Anthropic, Google, xAI) to generate responses. We do not send your name, email, or account information to these providers. Their data handling is governed by their respective privacy policies.
5. Third-Party Services
· Stripe — payment processing
· Polygon Markets — real-time and historical market data
· Unusual Whales — options flow data
· Finnhub — analyst and earnings data
· Benzinga — news data
· OpenAI, Anthropic, Google, xAI — AI analysis
· FRED (Federal Reserve) — macro economic data
6. Cookies
We use cookies for authentication (keeping you logged in), security (nonce verification), and session management. We do not use tracking or advertising cookies. You can disable cookies in your browser but this will prevent you from logging in.
7. Data Retention
We retain your account and trade journal data for as long as your account is active. If you delete your account, we permanently delete your trade history, outcomes, and personal information within 30 days. Payment records may be retained for up to 7 years for legal and tax compliance.
9. Data Security
We use HTTPS encryption, hashed passwords, authenticated API endpoints, and rate limiting to protect your data. Payment data is handled exclusively by Stripe and never touches our servers.
10. Children
KormaDesk is not intended for users under 18. We do not knowingly collect data from minors.
11. Changes
We may update this policy as the product evolves. We will notify you by email if material changes are made.