Privacy Policy

Last updated: 2026-04-08

1. What we collect

To operate PolyBot we collect and store the following:

• Your Telegram user ID and (optionally) username
• Your Polymarket proxy wallet address and the encrypted private key you provide during onboarding
• Your trade history (entry/exit prices, sizes, PnL)
• Your subscription state and payment intent records (transaction IDs, amounts, timestamps)
• Audit logs of administrative actions on your account
• Server logs containing IP addresses for security purposes (rotated after 30 days)

2. What we do NOT collect

We do not collect: your real name, email, phone number, government ID, browsing history, device fingerprints, biometrics, or any data unrelated to operating the Service.

3. How we use your data

Your data is used solely to: operate the trading bot, process subscription payments, provide customer support when you request it, and send Service notifications via Telegram. We do not use your data for advertising, profiling, or sale to third parties.

4. Third parties

We share data only with the minimum necessary third parties: Stripe and NowPayments (for payment processing — they receive your payment amount and a transaction reference but not your trading data), and Polymarket itself (for executing trades — Polymarket sees your wallet address and trade actions, the same as if you traded manually).

5. Your private key

The Service requires your Polymarket proxy wallet private key to execute trades on your behalf. This key is stored encrypted at rest on our server. We never display, log, or share your private key. If you suspect compromise, withdraw your funds immediately and rotate your wallet — you can do this without our involvement at any time.

6. Data retention and deletion

Your account data is retained while your subscription is active and for 90 days after cancellation, after which it is permanently deleted unless you request earlier deletion. To request immediate deletion, send /delete to the Telegram bot.

7. Security

We use industry-standard practices to protect your data, including HTTPS for all web traffic, encrypted private key storage, secure session cookies, rate-limited API endpoints, and a hardened Linux server. No system is perfectly secure, however, and you use the Service at your own risk.

8. Your rights

You can request a copy of your data, request corrections, or request deletion at any time via the Telegram bot. We will respond within 30 days.

9. Changes to this Policy

We may update this Policy as the Service evolves. Material changes will be announced via Telegram before taking effect.

10. Cookies

We use exactly one cookie: polybot_dashboard, an HTTPS-only, HttpOnly, SameSite=Strict session cookie that keeps you logged in to the dashboard after you exchange a Telegram magic link. We do not use tracking cookies, analytics cookies, advertising cookies, or any third-party cookies. The session cookie is deleted when you log out or when its 7-day TTL expires.

11. Telegram and third-party data

PolyBot interacts with you through the Telegram messaging platform. Telegram itself has access to all messages you exchange with the bot, subject to Telegram's own privacy policy at telegram.org/privacy. We are not responsible for Telegram's data handling practices. Similarly, when you make payments through Stripe or NowPayments, those providers have their own privacy policies that govern how they handle your payment data.

12. Contact

For privacy questions or data requests, message the Telegram bot using /help or contact @Poly_sergio_bot directly.