Privacy Policy

1. Information We Collect

Account information

Your email address and, if you give it, your name. For an email sign-up, your password, stored only as a salted hash. For Google sign-in, the name, email address, profile photo, and account identifier on your Google account.Source: you, or Google sign-in

Billing information

Your free-trial and paid-through dates and, for each payment, the amount, any promo code, the payment processor, and the payment’s reference and status. Card, bank, PayPal, and crypto-wallet details are collected and processed by our payment processors (PayPal and Coinbase Commerce); CoinIQ does not receive or store full card numbers.Source: you, and our payment processors

Exchange API credentials

The Kalshi and/or Polymarket API keys, private keys, and secrets you choose to connect.Source: you

Trading & activity data

Your trading settings (such as bet sizes, limits, the coins traded, and the automated-trading switch), the orders placed for you, fills, positions, exits, profit and loss, and the balances of your connected exchange accounts.Source: generated by your use of the Platform and read from your exchange accounts

Account records

Sign-in times, your account’s approval status, which version of our Terms you agreed to and when, and a log of changes to your account (such as approvals, connected keys, and settings changes).Source: generated by the Platform

Device & usage data

IP address, browser type, and the pages and requests your browser makes, with timestamps, as recorded in our server and network logs.Source: collected automatically

Communications

Support requests, emails, and other correspondence with us.Source: you

2. How We Use Information

We use the information above to:

• Provide, operate, and maintain the Platform, including placing, managing, and exiting trades on your connected Kalshi and Polymarket accounts when you have switched on automated trading;
• Take payments, apply free trials and promo codes, and prevent fraud;
• Authenticate you, review and approve accounts, and secure your account;
• Communicate with you about your account, your payments, and changes to the Platform or to our policies;
• Monitor, debug, and improve the reliability and performance of the Platform, using first-party analytics only: our own logs and records, never third-party analytics or advertising trackers;
• Comply with legal, tax, and regulatory obligations; and
• Detect, investigate, and prevent fraud, abuse, or violations of our Terms of Service.

We do not use your trading data to trade against you, and we do not sell your personal information.

3. How We Protect Your Data

• API keys, private keys, and secrets you provide to connect a Kalshi or Polymarket account are encrypted at rest using industry-standard authenticated symmetric encryption (Fernet, which is AES-based) before they are stored. They are decrypted only in memory, when needed to sign requests to Kalshi or Polymarket on your behalf. The Platform shows you only the last four characters of a saved key.
• Passwords are stored only as salted hashes, never in plain text.
• Data in transit between your browser, our servers, and third-party platforms is encrypted using TLS.
• Access to production systems, credential stores, and account data is limited to the people who operate the Platform, and administrative actions are recorded in an audit log.
• We keep backups to reduce the risk of losing your information.
• No method of transmission or storage is 100% secure. We cannot guarantee absolute security, but we will notify affected users and applicable regulators of any data breach involving personal information as required by applicable law.

4. How We Share Information

We do not sell, rent, or trade your personal information. We share information only with:

• Kalshi and Polymarket, solely as needed to place, manage, and exit trades on your behalf: requests signed with the API keys you connected, and the order instructions;
• PayPal and Coinbase Commerce, our payment processors, for payments and fraud prevention;
• Google, when you choose to sign in with Google, and for the web fonts our pages load from Google Fonts;
• Amazon Web Services (hosting) and Cloudflare (network, security, and content delivery), which run the infrastructure the Platform runs on; and
• Law enforcement or regulators, where required by valid legal process, to protect our rights, or to prevent fraud or harm.

If the Company is involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction, subject to this Privacy Policy or a successor policy of which you will be notified.

5. Data Retention

We retain personal information for as long as your account is active and as needed to provide the Platform, comply with our legal obligations (including tax, accounting, and anti-fraud recordkeeping requirements), resolve disputes, and enforce our agreements. You may request deletion of your account as described in Section 7; some information may be retained where required by law or for legitimate business records (for example, payment history relevant to a billing dispute). Removing a connected API key in Settings deletes it from our active database; it may remain in encrypted backups until those backups are deleted.

6. International Data Transfers

The Platform is operated from, and your information is processed and stored in, the United States. By using the Platform, you acknowledge that your information will be transferred to and processed in the United States, which may have different data protection laws than your country of residence.

7. Your Privacy Rights

7.1 GDPR (EEA / UK Users)

If you are located in the European Economic Area or the United Kingdom, you have the right, subject to certain conditions, to:

• Access the personal data we hold about you;
• Correct inaccurate or incomplete data;
• Request erasure (the “right to be forgotten”);
• Restrict or object to certain processing;
• Receive your data in a portable format; and
• Lodge a complaint with your local data protection authority.

Our legal basis for processing your data includes performance of our contract with you (operating the Platform), our legitimate interests (for example, fraud prevention and service improvement), and compliance with legal obligations.

7.2 CCPA/CPRA (California Residents)

If you are a California resident, you have the right to:

• Know what personal information we collect, use, and disclose;
• Request deletion of your personal information, subject to certain exceptions;
• Correct inaccurate personal information; and
• Not be discriminated against for exercising these rights.

CoinIQ does not sell or share personal information for cross-context behavioral advertising.

7.3 Exercising Your Rights

To exercise any of these rights, contact us at [email protected]. We may need to verify your identity before processing a request.

8. Children’s Privacy

The Platform is not directed to, and is not intended for use by, anyone under the age of 18. We do not knowingly collect personal information from children. If we learn we have collected information from someone under 18, we will delete it.

9. Cookies, Local Storage & Analytics

We use a session cookie to keep you signed in, and your browser’s local storage to remember choices you make in the Platform. Our analytics are first-party: we measure how the Platform is used with our own server logs and records. We do not use third-party analytics, advertising, or cross-site tracking cookies.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or in the Platform. The effective date at the top of this page reflects the most recent revision.

11. Contact Us