Privacy Policy

Last updated: April 24, 2026

This Privacy Policy explains how Polyman (“Polyman”, “we”, “us”) collects, uses, shares, and protects personal information when you use our website, Telegram Mini App, and related services (together, the “Service”). By using the Service you agree to the practices described below.

1. Who we are

Polyman is a trading dashboard that helps users follow and copy top-performing traders on Polymarket, a decentralized prediction market. Polyman is not affiliated with Polymarket. Trading and settlement occur on the Polymarket CLOB on the Polygon network using USDC.e; Polyman does not custody user funds.

2. Information we collect

We collect only what is needed to operate the Service.

a. Account and authentication data

When you sign in with Privy (via Telegram, email, Google, Apple, or phone), we receive a Privy user ID, the public address of your embedded wallet, and the linked identifier that corresponds to your sign-in method (e.g., email address, Telegram username, phone number). We do not receive or store your password, OAuth secrets, or private keys.

b. Wallet and on-chain data

We store your externally-owned account (EOA) address and your deterministic Gnosis Safe address so we can display balances, fetch positions from public Polymarket APIs, route builder-attribution headers, and (for authorized copy trades and the 1% platform fee) request transaction signing through Privy Signers. Transactions themselves are public on the Polygon blockchain.

c. Usage and device data

We automatically collect limited technical information such as IP address, browser and device characteristics, referrer URLs, pages viewed, and product interactions. This information is used to improve performance, detect abuse, and measure aggregate engagement.

d. Product events

We log trading events, referral events, copy-trade subscriptions, fund movements, and similar actions to a first-party database so we can render accurate activity, compute referral commissions, operate fee accounting, and provide customer support.

e. Optional information

You may voluntarily provide additional information when you enable Two-Factor Authentication, contact support, or respond to product communications.

3. How we use information

We use the information we collect to:

• Operate the Service, including authenticating you, showing balances, and executing trades you authorize;
• Run copy trading on your behalf based on allocations and limits you configure;
• Collect the platform fee on executed trades and route referral commissions;
• Communicate with you about account activity, security alerts, and product updates;
• Prevent fraud, abuse, market manipulation, and other activity that violates our Terms of Service;
• Meet legal and regulatory obligations, respond to lawful requests, and enforce our agreements.

4. Third-party services we rely on

Polyman depends on the following third-party providers. Their own privacy policies govern how they process information they receive about you.

• Privy — authentication and embedded wallet infrastructure. Private keys are generated and held in Trusted Execution Environments operated by Privy; Polyman never has direct access.
• Polymarket (Gamma, Data, CLOB APIs) — market metadata, public trading activity, and order execution on the Polygon network.
• Bridge API (Polymarket) — generates per-chain deposit addresses that automatically bridge funds to USDC.e on Polygon.
• Telegram — if you access Polyman inside a Telegram Mini App, Telegram provides signed initData used to authenticate the session.
• Google Analytics — aggregate usage analytics. We use anonymized identifiers where available.
• Microsoft Clarity — session heatmaps to debug UX issues. Clarity may record interactions (clicks, scrolls, page navigation) on a sampled basis.
• Cloud infrastructure (Vercel, AWS, Supabase, Redis Cloud) — hosting, database, and caching for the Service.

5. Cookies and similar technologies

We use first-party cookies and local storage to remember your session, brand preferences, last-used filters, and onboarding state. Third-party analytics tools set their own cookies to measure usage. You can disable cookies in your browser, but some features of the Service may not function correctly without them.

6. How we share information

We do not sell personal information. We share information only:

• With the third-party processors listed above, strictly to operate the Service;
• With a successor entity in connection with a merger, acquisition, or sale of assets;
• In response to lawful requests from government authorities or legal process, where we believe disclosure is legally required;
• To protect the rights, property, or safety of Polyman, our users, or others.

7. Security

We use industry-standard safeguards, including TLS for all network traffic, encrypted database storage, strict role-based access to production systems, and TEE-backed key management through Privy. No system is perfectly secure; you are responsible for protecting your authentication credentials, seed phrases (if exported), and Two-Factor Authentication codes.

8. Data retention

We retain personal data only as long as necessary to provide the Service, meet legal obligations (including financial recordkeeping), resolve disputes, and enforce our agreements. Blockchain data is public and cannot be deleted.

9. Your rights

Depending on your jurisdiction, you may have rights under the European Union's General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), or similar laws, including the right to access, correct, port, or delete your personal information, and to object to or restrict certain processing. To exercise these rights, email us at business@polyman.fun. We will respond within the timeframes required by applicable law.

10. Children

The Service is not directed to individuals under the age of 18, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can delete it.

11. International transfers

Our infrastructure operates globally. By using the Service, you acknowledge that your information may be processed in countries other than your own, including the United States, which may have different data-protection rules.

12. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. Material changes will be announced in the Service or by email. Continued use of the Service after a change constitutes acceptance of the revised policy.

13. Contact us

Questions about this Privacy Policy or our data practices can be sent to business@polyman.fun.