Privacy Policy — Konseki

Overview

Konseki provides historical market context as a data product, delivered via API and publicly accessible web pages. This policy explains what information we collect, how we use it, who we share it with, and the choices available to you.

We collect only what is necessary to operate the service, process payments, deliver API keys, manage access tiers, and respond when you contact us. We do not sell personal information.

What we collect

Information you provide directly:

Email address — collected when you sign up for a free API key or subscribe to Pro
Payment details — handled entirely by Stripe; Konseki never sees or stores card numbers
Messages — content of any emails you send to hello@konseki.io

Information collected automatically:

API usage logs — request timestamps, symbols queried, parameters used (including lookback period and any historical date requested), response codes, and request counts for rate limiting purposes
Website usage — pages viewed, symbols opened, filters used, approximate device and browser details, referring pages
IP addresses — collected by Cloudflare as part of CDN and API delivery infrastructure

The public website does not ask for brokerage credentials, trading account numbers, or financial account details of any kind.

Account and API key data

Konseki accounts use passwordless sign-in — you enter your email and receive a one-time sign-in link, with no password to create or store. When you sign up for a free or Pro account, we store the following in our database (Supabase):

Your email address
Your API key — a unique generated token used to authenticate requests
Your subscription tier — Free or Pro
Your daily request count — reset at midnight UTC, used to enforce rate limits
Your Stripe customer ID — if you subscribe to Pro, used to manage billing and cancellations
Account status — active or cancelled
Sign-in session data — used to keep you logged in to your account dashboard

Your account dashboard shows your API key, current tier, and daily usage count. You can log back in at any time using the same email-based sign-in link — there is no password to reset or recover.

API keys are sensitive credentials. Treat your API key like a password. Do not share it, commit it to public repositories, or expose it in client-side code. If your key is compromised, contact us at hello@konseki.io and we will issue a replacement.

API usage logs are retained to enforce rate limits, detect abuse, and provide usage context for support queries. They are not sold or used for advertising purposes.

Payment data

Payments for Pro subscriptions are processed by Stripe. Konseki uses Stripe Checkout — you enter payment details on Stripe's hosted page, not on our website. We never see, receive, or store your card number, CVV, or full payment details.

We store only your Stripe customer ID — a reference token that allows us to manage your subscription status and process cancellations. Stripe's own privacy policy governs how your payment data is handled: stripe.com/privacy.

Analytics and storage

We use PostHog for product analytics to understand how visitors use Konseki and improve the experience. Analytics events may include page views, symbol pages visited, filter interactions, and feature usage. PostHog is configured to respect browser privacy settings where possible.

We may use cookies or session storage for analytics and user experience purposes such as maintaining state between page views. You can limit cookies through your browser settings — some site features may behave differently if storage is disabled.

How we use information

To generate and deliver API keys to registered users
To enforce rate limits and manage API access tiers
To process Pro subscription payments and manage cancellations via Stripe
To send transactional emails — sign-in links, subscription confirmation — via Resend
To operate, maintain, and improve Konseki
To troubleshoot errors and respond to support requests
To detect and prevent API abuse or misuse
To measure feature adoption and understand product usage patterns

We do not use the information we collect to make individualised investment recommendations or guarantee market outcomes. The historical market context Konseki provides is for informational and research purposes only and does not constitute financial advice.

Third party processors

We share information with service providers that help us host, secure, analyse, and operate Konseki. Those providers are expected to use information only to provide services to us and to keep it strictly confidential.

Payments are processed by Stripe. Konseki does not receive or store your card details. Stripe's privacy policy is available at stripe.com/privacy.

Retention

We retain account data — email, API key, tier, and usage logs — for as long as your account is active. If you request deletion of your account, we will remove your personal data within 30 days, subject to any legal obligations that require us to retain certain records.

API usage logs are retained for up to 12 months for rate limiting, abuse detection, and support purposes. Analytics data retained by PostHog is subject to PostHog's own retention settings.

Payment records are retained by Stripe per their own retention policy and applicable financial regulations.

Your rights

You have the right to request access to, correction of, or deletion of the personal information we hold about you. To exercise any of these rights, contact us at hello@konseki.io.

You can cancel your Pro subscription at any time from your account dashboard — your API key will be deactivated at the end of the current billing period.

You can limit cookies and analytics tracking through your browser settings. Some site features may behave differently if storage is disabled.

Jurisdiction

Konseki is operated from Australia. By using Konseki, you acknowledge that your information may be processed and stored in Australia and in other countries where our third party processors operate (including the United States).

Australian users: This policy is consistent with the Australian Privacy Act 1988 and the Australian Privacy Principles.

European users: If you are located in the European Economic Area, you have additional rights under the General Data Protection Regulation (GDPR), including the right to data portability and the right to lodge a complaint with a supervisory authority. Our legal basis for processing your personal data is the performance of a contract (API access and subscription services) and legitimate interests (security and abuse prevention).

California users: If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect and the right to request deletion. We do not sell personal information.

Changes to this policy

We may update this policy as Konseki evolves — particularly as new features, integrations, or data practices are introduced. When we make material changes, we will update the date at the top of this page and, where appropriate, notify registered users by email.

Questions about this policy can be sent to hello@konseki.io.