01. Data Controller & Scope
KlevAi Quantitative Systems Ltd ("KlevAi", "we", "us", or "our") acts as the Data Controller in respect of personal data collected through www.klevai.co.uk, waitlist application forms, direct desk communications, and remote terminal telemetry.
We take a privacy-by-design approach: we collect only the minimal data points necessary to verify waitlist eligibility, prevent abuse, provision trial credentials under the 1,000 seat capacity, and operate our autonomous quant systems.
02. Categories of Personal Data We Collect
| Data Category | Specific Fields | Purpose |
|---|---|---|
| Waitlist Applications | Full Name, Email Address, Account Intent (Prop Firm / Personal / Both), Timestamp | Sequencing applicants (#1 to #1,000), verifying uniqueness, issuing 3-month review keys. |
| Desk Inquiries | Name, Email, Message Content, Topic Selector | Addressing private API, partnership, and institutional inquiries. |
| Technical Telemetry | IP address (anonymized for analytics), User-Agent, referrers, request latency | Rate limiting, DoS protection, and network latency monitoring. |
| Cookie Preferences | Consent timestamp, category toggles (Necessary, Analytics) | Honoring your cookie preferences under UK PECR / GDPR. |
Special Note on Broker Credentials: KlevAi runs as a localized or private VPS instance. We do not store or transmit your MT5 master trading passwords to any central database. Your broker passwords remain on your local machine.
03. Lawful Bases for Processing (UK GDPR Art. 6)
We process your personal data solely under recognized lawful bases:
- Consent (Art. 6(1)(a)): You provide explicit affirmative consent when entering your email into our VIP waitlist or contacting our desk. You can revoke consent at any time.
- Steps Prior to Contract (Art. 6(1)(b)): Processing is necessary to review your application, verify your allocation within the 1,000 seat cap, and generate your 3-month review license.
- Legitimate Interests (Art. 6(1)(f)): Defending our systems against bot attacks, credential stuffing, and duplicate submissions that would compromise seat integrity.
- Legal Obligations (Art. 6(1)(c)): Fulfilling our statutory record-keeping and audit obligations in the United Kingdom.
04. How We Use Your Information
We use your information exclusively for the following purposes:
- To verify queue positions (#1 to #1,000) and notify you when your 3-month review pass is ready.
- To transmit software release updates, SHA-256 integrity hashes, and execution advisories.
- To measure anonymous aggregate visitor engagement via Google Analytics 4 (with IP masking enabled).
- To prevent fraudulent automated submissions to our waitlist database.
05. Data Storage, Retention & Disposal
Waitlist records and direct messages are stored on encrypted servers within the United Kingdom and the European Economic Area (EEA).
We retain waitlist information for the duration of the 3-Month Free VIP Review cycle and up to 12 months thereafter to handle account renewals or support inquiries. Once an account is closed or an erasure request is received, all associated records are permanently deleted within 30 calendar days.
06. Third-Party Processors & International Transfers
We partner with select institutional infrastructure providers to host and monitor our software:
- Google Analytics 4: Web telemetry with IP anonymization activated and advertising features disabled.
- Cloudflare / Hosting Infrastructure: DDoS mitigation, SSL/TLS termination, and edge caching.
Any transfer of personal data outside the UK or EEA is conducted strictly under UK International Data Transfer Agreements (IDTAs) or standard contractual clauses (SCCs) to ensure equivalent data protection safeguards.
07. Your Individual Rights under UK GDPR
Under the UK Data Protection Act 2018 and UK GDPR, you have the following enforceable rights:
- Right of Access: You may request a complete copy of all personal data we hold about you (Subject Access Request).
- Right to Rectification: You may instruct us to correct inaccurate or incomplete data.
- Right to Erasure ("Right to be Forgotten"): You may request that we delete your waitlist submission and contact history.
- Right to Restrict Processing: You may limit how we process your personal data during dispute resolution.
- Right to Data Portability: You may obtain your data in a structured, machine-readable format (JSON/CSV).
- Right to Object: You may object to processing based on legitimate interests.
- Right to Withdraw Consent: You may withdraw cookie or communication consent at any time without penalty.
To exercise any of these rights, email our data desk at hello@klevai.co.uk. We respond to all formal requests within 30 calendar days free of charge.
08. Technical & Organizational Security
KlevAi deploys defense-in-depth security measures to protect your data against unauthorized access, loss, or alteration:
- All web traffic is enforced over TLS 1.3 encryption with strict HTTP Strict Transport Security (HSTS).
- Our waitlist databases are isolated behind private network firewalls and encrypted at rest using AES-256.
- Administrative consoles are protected by strict token authentication and multi-factor hardware security gates.
09. Right to Lodge a Complaint with the ICO
If you have concerns about our handling of your personal data, we invite you to contact us first so we can promptly address the issue. However, you retain the statutory right to lodge a complaint directly with the UK supervisory authority:
10. Data Protection Officer & Contact
For privacy inquiries, Subject Access Requests, or data deletion instructions: