MetaKai Privacy Policy

Effective date: July 30, 2026

This Privacy Policy explains how MetaKai, Inc. (“MetaKai,” “we,” “us,” or “our”) collects, uses, discloses, and protects personal information when you use our websites, applications, research tools, alerts, analytics, artificial-intelligence features, subscriptions, and related services (collectively, the “Services”).

MetaKai, Inc., a Delaware corporation, is the controller of personal information described in this Policy unless another notice says otherwise.

1. Scope

This Policy applies to personal information MetaKai processes through the Services and through related support, account, billing, and business communications.

It does not govern a third party’s independent handling of information, including an identity provider, payment processor, linked website, market-data source, or other service that provides its own privacy notice.

2. Personal information we collect

The information we collect depends on how you use the Services.

Information you provide

• Account and profile information: name, email address, username, profile image, company, preferences, and other information you add to your account.
• Research and User Content: watchlist names, selected securities, notes, prompts, queries, saved settings, feedback, and other content you submit or create.
• Subscription and transaction information: plan, billing status, transaction amount and date, payment method type, billing contact details, and related records. When paid subscriptions are offered, a payment processor may collect full payment-card or bank information directly; MetaKai does not need to store full card numbers.
• Communications: messages, attachments, survey responses, support requests, and other information you provide when you contact us.

Information collected automatically

• Device and network information: IP address, approximate location derived from IP address, browser and device type, operating system, language, and similar technical information.
• Usage and activity information: pages or features viewed, links and buttons selected, referral source, dates and times, session and authentication events, watchlist and feature activity, errors, performance information, and interactions with the Services.
• Cookies and similar storage: session cookies, security tokens, consent choices, local storage, and analytics identifiers as described in our Cookie Notice.
• Security and diagnostic information: request identifiers, logs, suspected fraud or abuse signals, crash data, and information needed to protect and troubleshoot the Services.

Information from other sources

• Identity and social-login providers: if you sign in with Google, X, or another provider, we and our authentication provider may receive an account identifier, name, username, email address, profile image, and other information you authorize that provider to share.
• Service providers: hosting, authentication, payment, analytics, communications, security, and support providers may return transaction, delivery, authentication, fraud, or diagnostic information.
• Public and licensed sources: company filings, market data, news, issuer materials, and other financial or business information may be associated with a watchlist or request. We do not treat public market information as personal information unless it identifies or is linked to an individual.

Inferences and personalization

We may infer likely interests, preferred securities, research topics, or feature preferences from your watchlists, inputs, and activity. We use these inferences to organize, rank, personalize, or improve the Services.

Sensitive information

MetaKai does not intentionally request sensitive personal information such as government identification numbers, brokerage credentials, financial account numbers, precise geolocation, biometric templates, health information, or information about race, religion, sexual orientation, or political beliefs. Please do not include sensitive personal information in notes, prompts, support messages, or other free-text fields.

3. How we use personal information

We use personal information to:

• create, authenticate, secure, and administer accounts;
• provide research, watchlists, analytics, alerts, subscriptions, support, and other requested features;
• personalize and prioritize information based on your settings, watchlists, activity, and inputs;
• process payments, maintain transaction records, and manage subscriptions when paid plans are offered;
• send account, transaction, security, support, and policy communications;
• understand usage, diagnose errors, monitor performance, and improve the Services;
• develop and test features, including AI and algorithmic features;
• detect, investigate, prevent, and respond to fraud, abuse, security incidents, unlawful conduct, or violations of our Terms;
• comply with law, enforce agreements, establish or defend legal claims, and protect users, MetaKai, and others; and
• carry out another purpose described when information is collected, with your consent where required.

We may aggregate or de-identify information so it can no longer reasonably be linked to you. We may use and disclose that information for lawful purposes and will not attempt to re-identify it except to test whether our de-identification measures work or as permitted by law.

4. AI, algorithms, and automated processing

Some features may use artificial intelligence, machine learning, or rules-based systems to summarize, classify, rank, filter, or generate research and other output. Depending on the feature, information such as prompts, watchlists, selected securities, preferences, and relevant account context may be processed by MetaKai and by service providers that host or operate models for us.

Personalization is based on the information available to the feature. It does not mean MetaKai has assessed your complete financial circumstances or determined that an investment is suitable for you.

MetaKai does not use automated processing to make decisions that produce legal or similarly significant effects concerning access to employment, housing, credit, insurance, education, essential services, or other comparable opportunities. If we introduce such processing, we will provide any notice, assessment, consent, opt-out, or human-review mechanism required by law before using it.

Do not submit confidential trading credentials, account numbers, material nonpublic information, or sensitive personal information to an AI feature. AI output and related data handling are also subject to the Financial and AI Disclaimer.

5. Legal bases for processing

If the laws where you live require a legal basis, we rely on the following:

• Contract: to create and administer your account, provide requested Services, manage a subscription, process a transaction, and respond to support requests.
• Legitimate interests: to secure, maintain, personalize, analyze, and improve the Services; prevent fraud and abuse; communicate about the Services; and establish or defend legal claims. We consider the impact on your rights before relying on these interests.
• Consent: for consent-based analytics, certain cookies or local storage, marketing communications where required, and other processing for which we ask permission. You may withdraw consent at any time without affecting earlier lawful processing.
• Legal obligation: to maintain required records, respond to lawful process, comply with sanctions and other laws, and protect legal rights.
• Vital interests: in rare circumstances, to protect someone’s life or physical safety.

Where we ask for information needed to provide an account, paid plan, or requested feature, failure to provide it may mean we cannot provide that item.

6. How we disclose personal information

We may disclose personal information to:

• Infrastructure and service providers that provide authentication, hosting, databases, security, analytics, communications, customer support, payments, or AI/model services. Current core providers include Clerk for identity and account management; Vercel and Render for application hosting and performance; Supabase for database services; and Mixpanel for consent-based product analytics.
• Identity providers such as Google or X when you choose their sign-in service.
• Payment processors identified at checkout when you purchase a paid plan.
• Market-data, content, and AI providers when necessary to fulfill a request or operate a feature, subject to contractual and technical safeguards appropriate to the information involved.
• Professional advisers and auditors who need information to provide legal, accounting, insurance, compliance, financing, or security services and are subject to confidentiality obligations.
• Authorities and other parties for legal or safety reasons if we reasonably believe disclosure is necessary to comply with law or legal process; enforce our agreements; collect amounts owed; prevent fraud, abuse, or security incidents; or protect the rights, property, or safety of MetaKai, users, or others.
• Transaction participants in connection with a proposed or completed merger, financing, acquisition, reorganization, bankruptcy, or sale of all or part of our business or assets, subject to appropriate confidentiality and legal safeguards.
• Other parties at your direction or with your consent.

Providers that process personal information for MetaKai are permitted to use it only for contracted purposes or as otherwise allowed by law.

7. No sale or targeted advertising

MetaKai does not sell personal information for money. MetaKai also does not currently share personal information for cross-context behavioral advertising or process personal information for targeted advertising as those terms are defined by applicable U.S. state privacy laws.

Because we do not currently engage in those activities, there is no sale or targeted-advertising opt-out to exercise. If our practices change, we will update this Policy and provide legally required notice and choices before the change applies.

8. Analytics, cookies, and choices

MetaKai uses:

• essential storage and technologies needed for sign-in, security, account functions, consent preferences, and service delivery;
• Vercel Web Analytics and Speed Insights to understand aggregated traffic and performance; and
• Mixpanel product analytics and first-touch attribution only after you accept analytics.

You can accept or decline consent-based analytics and reopen the choice through the “Cookie settings” control in the Services. You can also manage cookies and local storage in your browser. Blocking essential storage may prevent sign-in or other features from working.

Vercel Web Analytics is designed to provide aggregated, cookieless measurements rather than cross-site identification. MetaKai does not send email addresses or other direct identifiers in Vercel analytics events. More detail appears in our Cookie Notice.

Browser “Do Not Track” signals do not have a uniform legal standard. Because MetaKai does not currently sell personal information or use it for targeted advertising, a Do Not Track or Global Privacy Control signal does not change those practices. We will recognize legally required opt-out signals if our practices later make them applicable.

9. Data retention

We retain personal information only as long as reasonably necessary for the purposes described in this Policy. The period depends on the type of information and context:

• account information and User Content are generally kept while the account is active or until you delete them;
• authentication, security, and fraud records are kept as needed to protect the Services and users;
• transaction and subscription records may be kept after account closure to meet tax, accounting, chargeback, and legal obligations;
• support and legal communications are kept as needed to resolve the matter, maintain appropriate business records, and establish or defend claims;
• consent-based analytics are retained according to our provider settings and then deleted or de-identified; and
• information in routine backups remains until the backups are overwritten under the applicable backup schedule.

We may retain information longer when required by law, a legal hold, an unresolved dispute, or a security investigation. When retention is no longer justified, we delete or de-identify the information.

10. International transfers

MetaKai is based in the United States, and we and our providers may process information in the United States and other countries. Those countries may have privacy laws different from the laws where you live.

Where required, we use recognized transfer mechanisms and contractual safeguards, such as adequacy decisions, the European Commission’s Standard Contractual Clauses, the UK International Data Transfer Addendum, or another lawful mechanism. You may contact us for information about the safeguard relevant to your information.

11. Your privacy rights

Depending on where you live and subject to legal exceptions, you may have the right to:

• confirm whether we process your personal information;
• access or receive a copy of it;
• correct inaccurate information;
• delete information;
• receive certain information in a portable format;
• restrict or object to certain processing;
• withdraw consent;
• opt out of the sale of personal information, targeted advertising, or qualifying profiling;
• appeal our refusal of a privacy request; and
• receive equal service without unlawful discrimination for exercising a privacy right.

MetaKai does not currently sell personal information, use it for targeted advertising, or conduct qualifying profiling that produces legal or similarly significant effects.

How to make a request

Email support@metakai.ai with the subject “Privacy Request” and describe the right you want to exercise. Because MetaKai operates online and has a direct relationship with account holders, email is our primary request method.

We may ask for information reasonably necessary to verify your identity and authority. We will use verification information only for that purpose. An authorized agent may submit a request where law permits, but we may require proof of authority and, where allowed, direct identity confirmation from the account holder.

We will respond within the period required by applicable law—generally within 45 days under many U.S. state laws and within one month where the GDPR or UK GDPR applies. We may extend the response period when law permits and will explain the reason.

If we deny a request, you may appeal by emailing support@metakai.ai with the subject “Privacy Appeal.” Explain why you believe the decision should be reconsidered. We will respond within the period required by applicable law and provide any required information about contacting a regulator.

You may also lodge a complaint with the privacy or data-protection authority where you live. We encourage you to contact us first so we can try to resolve the concern.

12. Security

We use administrative, technical, and organizational safeguards designed to protect personal information, including access controls, authentication, encryption in transit, provider security controls, logging, and restricted server-side handling of secret credentials.

No system is perfectly secure. You are responsible for protecting your account and devices and for notifying us promptly of suspected unauthorized access.

13. Children

Publicly accessible portions of the Services may be viewed by a general audience without creating an account. Account features are not directed to children under 13 or under any higher minimum age that applies to online services where the user lives.

To create an account, a user must be at least 13 and at least the minimum age at which the user may lawfully use an online service without parental authorization where the user lives. A user who has not reached the age of legal majority must have permission from a parent or legal guardian. MetaKai does not currently provide parent-managed accounts for users below the applicable minimum account age unless a feature expressly says otherwise.

We do not knowingly collect personal information through an account from a child below the applicable minimum account age. If we learn that such a child created an account or provided personal information, we will suspend the account and delete the information as required, unless we have implemented and completed a legally valid parental-authorization process. If you believe this has occurred, contact support@metakai.ai.

14. Communications

We may send service, security, billing, support, and legal communications that are necessary to administer your account. You cannot opt out of essential communications while maintaining an account.

You may unsubscribe from promotional email using the link in the message or by contacting us. Unsubscribing from marketing does not affect essential communications.

15. Third-party links and services

The Services may link to third-party sites or allow you to connect third-party accounts. MetaKai does not control those parties’ privacy or security practices. Review their notices before providing information.

16. Changes to this Policy

We may update this Policy as our practices, Services, or legal obligations change. We will post the updated Policy and change the effective date. If a change materially affects how we use personal information, we will provide additional notice or obtain consent when required before the change applies.

17. Contact

For privacy questions, requests, or complaints:

MetaKai, Inc.
Attn: Privacy
3723 Greenville Avenue, Suite 31460
Dallas, Texas 75206
United States
support@metakai.ai