Privacy Policy

Last updated: April 12, 2026

What We Collect

• Application data: name, email, Discord username, bot interest, budget range. Used to evaluate applications.
• Account credentials: password (hashed via apr1), Polymarket private key (stored as a mode-600 file mounted into your container as a Docker secret, never logged).
• Trade data: timestamps, market IDs, sizes, outcomes for each trade your bot executes. Used to display your dashboard and compute stats.
• Server logs: IP address, timestamps, access paths (no bodies). Retained 30 days for security monitoring.
• Payment data: processed by Stripe. We do not see or store your card details.

What We Don't Collect

• We don't track you across websites.
• We don't use advertising cookies.
• We don't sell your data.
• We don't share data with third parties except as listed below.

Third Parties

• Stripe: processes payments. See Stripe's privacy policy.
• Cloudflare: CDN and DDoS protection. Traffic passes through their network.
• Polymarket: the exchange your bot trades on. We do not share your account details with Polymarket beyond what's required for trading.
• Google Sheets: stores your application form data.

Your Rights

• Access: request a copy of your data by emailing [email protected].
• Deletion: cancel your account and we'll delete all trade history, private key, and credentials. Application data in Google Sheets may be retained.
• Correction: update your Discord username or email via Discord DM.

Data Security

Private keys are stored as mode-600 files on the host (root-only) mounted as Docker secrets read-only into your isolated per-user container. Containers run with `cap_drop: ALL` and `no-new-privileges` on a private Docker network. All data transit uses TLS. Trade history and configuration are stored as JSON files on volume-mounted disk inside your container.

Data Retention

• Active accounts: data retained while subscription is active.
• Cancelled accounts: trade history archived for 90 days then deleted.
• Rejected applications: deleted within 30 days.
• Server logs: 30 days.

Contact

Questions or requests: [email protected]