How Khepri handles your information.

Khepri is operated by Khepri LLC. This policy explains what we collect when you use kheprifund.com, why we collect it, and the choices you have. It covers the Khepri website and the paper-trading sandbox reached through it.

Information you give us

To create an account we ask for your first and last name, your email address, and your date of birth, which we use to confirm you are old enough to hold an account. We also store a cryptographic hash of your password. We never store the password itself and cannot recover it for you.

During registration you are asked to open and accept the brokerage agreements our provider requires. We record that you opened and accepted them, and when.

Information created as you use Khepri

Using the sandbox creates records tied to your account: simulated orders you place, the positions and portfolio activity that result, watchlists you build, settings you choose, and whether you take part in research features.

Technical information

Our servers record the IP address and browser user-agent string attached to sign-in and account activity, and assign each request a random correlation identifier used to trace faults in our own logs. This information helps us keep accounts secure and diagnose problems.

We count visits to our pages to understand how many people use Khepri and, roughly, from which country or U.S. state. We do not store your IP address for this: each visit is reduced to the region it comes from and a one-way code that changes every day, so a visit cannot be linked to you or to your visits on other days. We skip this count if your browser sends a Global Privacy Control or Do Not Track signal. Location estimates use IP Geolocation by DB-IP.

Cookies

Khepri sets only the cookies the site needs to work. A session cookie keeps you signed in. A security token cookie protects forms against cross-site request forgery. Short-lived cookies record that you opened a required agreement during registration. We do not use advertising cookies and we do not track you across other websites.

Information from our brokerage provider

Khepri uses Alpaca to provide brokerage functionality. When your account is connected we receive account status, balances, positions, activity, and any documents the provider issues for your account. Alpaca handles that information under its own agreements and privacy policy, which you accept during registration.

How we use your information

• To create, secure, and operate your account.
• To provide the sandbox, research, and portfolio features you use.
• To send messages the service requires, such as email verification and password recovery.
• To investigate faults, abuse, and security incidents.
• To meet legal and regulatory obligations that apply to us.

We do not sell your personal information, and we do not share it for advertising.

Who we share it with

We share information only with providers that deliver part of the service: our brokerage provider, our email delivery provider, and the infrastructure that hosts the application. Each receives only what its function requires. We may also disclose information where the law requires it, or to protect the rights and safety of our users.

Storage, security, and backups

Account records are held in an access-controlled database. Credentials for our own systems are kept in a dedicated secret store and are not written to application servers.

We keep encrypted backups so your records survive the loss of a single machine. Backups are encrypted before they leave our infrastructure, and a copy is stored off-site with a cloud storage provider. That provider holds only encrypted archives; the key needed to read them is held separately and is never placed on the backup system or given to the storage provider.

No system is perfectly secure, and we cannot guarantee absolute security. We ask you to use a strong, unique password and to tell us promptly if you believe your account has been accessed without your permission.

How long we keep it

We keep account records while your account is open. If you close your account we delete or anonymize your personal information, except where we must retain records to meet a legal, regulatory, or accounting obligation, or to resolve a dispute. Encrypted backups age out on a fixed schedule, so deleted records persist in backups only until those backups expire.

Your choices

You may ask us for a copy of the personal information we hold about you, ask us to correct it if it is wrong, or ask us to delete your account and the information attached to it. Write to admin@kheprifund.com and we will respond. Depending on where you live you may have additional rights under local law, and we will honor them where they apply.

Children

Khepri is not intended for anyone under 18, and we do not knowingly collect information from children. If you believe a child has given us personal information, contact us and we will remove it.

Changes to this policy

If we change this policy we will update the date at the top of this page. If a change materially affects how we handle your information, we will tell account holders directly.

Contact

Questions about this policy, or about your information, go to admin@kheprifund.com.