Privacy Policy

1. Data Collection

To provide the Omina trading interface, we collect and process the following specific data points:

• Telegram Identification: Your unique Telegram ID and username to associate your account with your trading session.
• Kalshi API Credentials: Your Kalshi API Public Key and Private Key, which are necessary to execute trades on your behalf.
• Trade History: Records of trades executed through the Omina interface for performance tracking and session management.

2. Security and Key Handling

The security of your API keys is our highest priority. [PLACEHOLDER: Keys are encrypted at rest using AES-256 and stored in a secure vault environment. Access is restricted to the execution engine only.] We never have access to your primary Kalshi password or withdrawal capabilities, as API keys should be configured with "Trade Only" permissions.

3. Third-Party Exposure (Telegram)

Omina operates via the Telegram platform. It is critical to understand that all messages, including the submission of API keys and trade commands, travel through Telegram's servers. While Telegram offers encryption, your data is subject to Telegram's own privacy practices and security infrastructure. Omina is not responsible for any data breaches originating from the Telegram platform itself.

4. Data Usage and Non-Disclosure

We adhere to strict data ethics in the fintech space:

• No Sale of Data: We do not sell user data to third parties.
• No Front-Running: We do not trade against our users. Your trade data is never used for our own proprietary trading or market-making.
• Operational Use Only: Data is used exclusively to facilitate the services you explicitly request.

5. Data Deletion and "Right to be Forgotten"

Users maintain full control over their data. You may immediately wipe your API keys and session data from our database at any time by:

• Using the /revoke command within the Telegram bot.
• Deleting your account settings through the Omina web dashboard (if applicable).

Upon execution of a deletion command, all sensitive credentials are purged from our active databases and volatile memory immediately.