Back to Home

Privacy Policy

Effective Date: April 23, 2026

Company: Bucko Labs LLC

support@bucko.ai

1. Introduction

Bucko Labs LLC ("Bucko," "we," "us," or "our") respects your privacy and is committed to protecting the information you share with us. This Privacy Policy explains how we collect, use, store, and share your information through the Bucko web application (the "App"), and any related services.

2. What Information We Collect

a) Information You Provide

  • Email address or Google account (if used to register)
  • Optional profile name or preferences

b) Banking & Transaction Data (via Plaid)

When you connect a financial institution, we use Plaid Inc. to securely access:

  • Account balances
  • Transaction history
  • Merchant names
  • Spending categories

We never store or see your banking credentials. All credentials are securely transmitted to Plaid.

c) Broker & Trading Data (Tradovate, Prop Firms)

When you connect a brokerage or prop-firm account (Tradovate and the firms that use it, including AlphaFutures, Apex, Lucid, Traidify, and others), we receive an OAuth access token and use it to read and, if you enable it, place orders on the accounts you authorize.

  • Account identifiers, names, and environment (live or demo)
  • Balances (net liquidation, cash, daily P&L, weekly P&L)
  • Positions, fills, orders, and working orders
  • Distance-to-bust, auto-liq counters, and prop-firm risk signals
  • Trade events generated by Monko (placed, filled, cancelled, blocked, stand-down), including the rationale and signal IDs the model used

OAuth access tokens are encrypted at rest. We never see your broker password. You can disconnect at any time from the station UI; revoking the token stops all further reads and trade activity from Bucko.

d) Trading Signal & Behavioral Telemetry

  • Bucko Indicator signal events you receive (symbol, grade, timeframe, direction, TP/SL)
  • AI briefings produced by Scout, Warden, Coach, Oracle, the Guide, Herald, and Monko
  • Your in-app preferences (risk caps, grade filter, trailing-stop config, consistency rule mode)
  • Disclaimer acknowledgments, including timestamps and the version of the disclaimer signed

e) Automatically Collected Data

  • Device type and OS version
  • App usage patterns and feature interaction
  • Crash reports and performance diagnostics

3. How We Use Your Information

We use the information we collect to:

  • Generate a personalized watchlist of publicly traded companies
  • Help you visualize your spending in relation to investment opportunities
  • Provide a tailored and educational app experience
  • Monitor and improve the App's performance
  • Respond to inquiries and provide customer support

We do not use your data for advertising or sell it to third parties.

4. How We Share Your Information

We may share limited data with:

  • Plaid Inc., to access and process your financial account information
  • Stripe Inc., for handling subscription and payment services
  • Infrastructure providers, such as analytics and crash reporting tools

These parties are bound by confidentiality and security obligations.

5. Use of Plaid

By using Bucko, you grant us and Plaid Inc. the right to access and transmit your financial data for the purpose of generating personalized, educational investment content.

Plaid's handling of your information is governed by Plaid's End User Privacy Policy.

You may disconnect your bank accounts from Bucko at any time.

5a. Cookies, Analytics & Similar Technologies

We and our service providers use cookies, local storage, session storage, web beacons, pixels, and similar technologies to operate the App, remember your preferences, keep you logged in, secure your session, measure performance, detect abuse, and understand feature usage.

We use the following categories:

  • Strictly Necessary — authentication, session, CSRF protection, subscription state. These cannot be disabled.
  • Functional — UI preferences (risk profile, default symbol, dark-mode, dismissed disclaimers, Monko preferences).
  • Analytics & Performance — aggregated usage, error monitoring, crash reporting.
  • Security — bot detection, rate-limit signals, anomaly detection.

You can control cookies through your browser settings. Disabling cookies may break core functionality (for example, logging in or keeping a Monko session active).

5b. Subprocessors & Third-Party Providers

To operate Bucko, we engage subprocessors and third-party providers that process personal or account data on our behalf under contract. Categories and representative providers include:

  • Identity & auth: Firebase Authentication (Google LLC)
  • Application database & storage: Firebase Firestore & Storage (Google LLC)
  • Hosting & edge: Vercel Inc.
  • Payments & subscriptions: Stripe, Inc.
  • Banking data (optional): Plaid, Inc.
  • Market data & brokerage APIs: Polygon, Alpaca Securities LLC, Tradovate LLC, Kalshi, Polymarket, and associated prop-firm partners
  • AI / LLM inference: OpenRouter, and its upstream model providers (including Google, Anthropic, and OpenAI)
  • Non-custodial wallets (Oracle): Turnkey and Safe (Gnosis Safe) infrastructure
  • Email & support: transactional email providers used for receipts and account notices

These providers are bound by contractual confidentiality and security obligations and process data only as needed to deliver the services we request.

6. How We Protect Your Data

We implement industry-standard safeguards, including:

  • End-to-end encryption
  • HTTPS-secured connections
  • Minimal data retention practices
  • Access control and internal policy enforcement

No security system is completely impenetrable, but we work hard to protect your information.

6a. Data Retention

We retain personal information only for as long as needed to provide the App, comply with legal obligations, resolve disputes, and enforce our agreements:

  • Account & profile data: retained while your account is active and for a reasonable period after closure.
  • Subscription & billing records: retained as required by applicable tax, accounting, and anti-fraud rules (typically 7 years).
  • Disclaimer acknowledgments & Monko session logs: retained indefinitely as compliance records.
  • Broker tokens & derived balances: deleted shortly after you disconnect the linked account.
  • Support correspondence: retained for a reasonable period after resolution.
  • Aggregated / de-identified analytics: may be retained indefinitely.

You can request earlier deletion at any time (see Section 7).

6b. International Data Transfers

Bucko is operated from the United States, and our subprocessors may process data in the United States and other countries. If you access the App from outside the United States, you understand and consent to the transfer, storage, and processing of your information in the United States and other jurisdictions whose data-protection laws may differ from those of your country. Where required, we rely on appropriate legal mechanisms (such as Standard Contractual Clauses) for international transfers.

6c. Data Breach Notification

In the event of a confirmed security incident that materially affects your personal information, we will notify affected users without undue delay and in accordance with applicable law, describe the nature of the incident and the categories of data involved, and outline the steps we are taking and recommendations for protecting yourself.

7. Your Rights

You have the right to:

  • Request to view or delete any personal information stored by us
  • Disconnect linked accounts from Plaid
  • Cancel your subscription at any time via your profile settings

To make any request, email: support@bucko.ai

7a. California Privacy Rights (CCPA / CPRA)

If you are a California resident, you have the right to:

  • Know what categories of personal information we collect, use, disclose, and (if applicable) sell or share.
  • Access the specific pieces of personal information we hold about you.
  • Delete personal information we hold about you, subject to legal exceptions.
  • Correct inaccurate personal information.
  • Limit the use and disclosure of sensitive personal information.
  • Opt out of the "sale" or "sharing" of personal information. Bucko does not sell personal information and does not share personal information for cross-context behavioral advertising.
  • Non-discrimination for exercising any of the above rights.

To exercise any of these rights, email support@bucko.ai. We may need to verify your identity before fulfilling a request.

7b. GDPR / UK GDPR / Other International Rights

If you are located in the European Economic Area, the United Kingdom, or another jurisdiction with comparable data-protection law, you have the rights of access, rectification, erasure, restriction of processing, objection to processing, data portability, and withdrawal of consent where processing is based on consent. You also have the right to lodge a complaint with your local supervisory authority.

Our legal bases for processing include: performing the contract with you (running your account and subscription), our legitimate interests (securing the App, improving features, preventing abuse), complying with legal obligations (tax, anti-fraud), and, where applicable, your consent (for optional data categories such as Plaid-linked bank data).

7c. Do Not Track

Some browsers transmit "Do Not Track" signals. Because there is no common industry standard for interpreting these signals, Bucko does not currently respond to them. As described elsewhere in this Policy, we do not sell personal information or use it for third-party advertising.

8. Payment Processing

Bucko subscriptions are billed through Stripe. We do not store or access your payment details. All billing and cancellations are managed through Stripe's secure payment infrastructure.

To manage your subscription, visit your profile settings within the app.

9. Children's Privacy

Bucko is not intended for children under the age of 13. We do not knowingly collect personal information from children. If you believe we have unintentionally collected such data, please contact us immediately.

10. Educational Use Only

Bucko is designed for educational and informational purposes only. We do not provide financial, legal, or investment advice. Any insights or content provided by the app should not be interpreted as a recommendation to buy, sell, or hold securities.

Always conduct your own research or consult a licensed financial advisor before making investment decisions.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted within the App and on our website with the revised effective date.

12. Contact Us

For any questions or privacy-related requests, contact:

Bucko Labs LLC

Email: support@bucko.ai