Privacy Notice

1. Who is responsible for this site?

Koval is the operator of this website and determines why the personal data described in this notice is used. The site markets the Koval strategy-testing platform and collects pre-launch waitlist requests.

For privacy questions, requests, or withdrawal of waitlist consent, contactprivacy@koval.finance. If a legal entity replaces the Koval project as operator, this notice will be updated before that entity processes new data.

2. What this notice covers

This notice covers koval.finance, its legal pages, its educational guides, and the waitlist form embedded on the landing page. It does not cover the open-source repository, third-party exchange sandbox services, or the future hosted application; those services may publish their own notices before use.

3. Data Koval processes

Waitlist information

When you choose to join the waitlist, the form can collect:

• your email address, which is required to send the launch message;
• your optional answer about how you trade today;
• your optional preferred exchange;
• the fixed source label identifying the landing-page waitlist.

The form is submitted directly from your browser to Google Forms and stored in the Google account connected to that form. Google may also process technical request data needed to deliver and protect the form service.

Optional analytics information

If you accept optional analytics, Koval loads Google Analytics 4. It may process a pseudonymous browser identifier, approximate location derived by Google, device and browser characteristics, viewed pages, and the limited events listed in the Cookie Policy.

Koval does not send your email address, form answers, free text, financial account information, order information, or strategy content to Google Analytics. Advertising storage, ad-user-data consent, advertising personalisation, Google signals, and ad-personalisation signals remain disabled in the site configuration.

Hosting and security data

The site is delivered through Firebase Hosting. Like most hosting services, its infrastructure may process request data such as IP address, requested URL, timestamp, browser headers, and security signals to deliver the page, prevent abuse, and maintain service reliability. Koval does not use those delivery logs to profile visitors.

Consent choice stored in your browser

Koval stores your analytics choice and the policy version in your browser’s local storage for up to 180 days. That value stays on your device and tells the site whether to keep analytics blocked or load it on a later visit.

4. Why the data is used

5. Analytics and waitlist consent are separate

Accepting analytics is optional and is not required to browse the site or join the waitlist. Rejecting analytics does not change the site, pricing information, or waitlist form. Joining the waitlist requires a separate acknowledgement for one launch email.

You can withdraw analytics consent at any time using Privacy settings in the footer. You can withdraw waitlist consent before the launch message is sent by emailingprivacy@koval.finance. Withdrawal does not make earlier lawful processing unlawful.

6. Service providers and recipients

Koval uses the following providers for this site:

• Google Firebase Hosting to deliver the static website and protect its infrastructure.
• Google Forms and Google Workspace to receive and store voluntary waitlist submissions.
• Google Analytics 4 only after analytics consent, to produce site-usage reports.

Personal data may be processed in countries outside your own, including the United States. Where required, transfers rely on safeguards made available by the relevant provider, such as adequacy decisions or standard contractual clauses. Provider terms and certifications can change; contact Koval if you need the current transfer basis for a specific request.

Koval does not sell personal data and does not share waitlist records with data brokers or advertisers.

7. Retention

• Waitlist: kept until the requested launch message is sent, then removed within 30 days unless a legal obligation or an active privacy request requires a limited record for longer.
• Google Analytics user-level data: configured for the shortest practical GA4 retention period, two months. Aggregated reports may remain after user-level data expires.
• Analytics cookies: configured with a maximum lifetime of 180 days and only created after consent.
• Local consent choice: expires after 180 days or is replaced when the policy version changes.
• Privacy correspondence: kept only as long as needed to answer the request and meet applicable legal obligations.

8. Your privacy rights

Depending on where you live, you may have rights to access, correct, delete, restrict, or receive a copy of your personal data; object to certain processing; and withdraw consent. You may also complain to your local data-protection authority.

Send a request to privacy@koval.finance. Describe the request and the email address used for the waitlist. Koval may ask for proportionate verification before disclosing or deleting data. There is no fee for an ordinary request, although manifestly unfounded or excessive requests may be handled as permitted by applicable law.

9. Security

Koval limits this site to static content, a direct Google Forms submission, and consent-gated analytics. Access to connected provider accounts should be restricted and protected with strong authentication. No internet service can promise absolute security; if a material incident affects your rights, Koval will provide notice where required by law.

10. Children

This website and waitlist are not directed to children under 16. Do not submit a child’s email address or other personal data. Contact Koval if you believe a child submitted information so it can be removed.

11. Changes to this notice

Koval may update this notice when the site, providers, or legal requirements change. The updated date appears at the top. A material change to optional processing will not silently expand an earlier consent; the site will request a new choice when appropriate.