Privacy Policy

Summary

PolyMonit is a read-only monitoring and alert tool for public Polymarket activity. We do not custody funds, ask for seed phrases, connect to your wallet, execute trades, or provide financial advice. We collect the limited information needed to run accounts, subscriptions, watchlists, alerts, support, security, and service analytics.

We do not sell your personal information. We do not use your personal information for cross-context behavioral advertising. We may use account, billing, technical, and usage records to protect PolyMonit, investigate abuse, enforce our terms, respond to disputes, and comply with law.

1. Who We Are

PolyMonit is operated by Qoreon Labs Ltd. ("PolyMonit", "we", "us", or "our"). We provide a software service for monitoring publicly available wallet and market activity. This Privacy Policy applies to our website, dashboard, alerts, support channels, and related services (the "Service").

For privacy questions, email privacy@qoreonlabs.com. For product or billing support, email support@qoreonlabs.com.

2. Information We Collect

Account information. When you create an account, we collect your email address, user ID, authentication metadata, plan status, subscription status, account timestamps, and settings. Password authentication is handled by Firebase Authentication; we do not store your raw password.

Payment and subscription information. Payments are processed by Stripe. We do not store your full card number, CVV, bank account, or complete payment credentials. We receive limited billing records such as Stripe customer ID, subscription ID, plan, payment status, payment amount, renewal/cancel status, and webhook events.

Wallet and watchlist information. We store wallet addresses, aliases, selected wallet views, tracked-wallet settings, and alert filters that you choose to save. Wallet addresses and Polymarket activity are public or third-party data; saving them in PolyMonit does not make us the source or owner of that public data.

Alert information. If you enable alerts, we may store alert preferences, email alert settings, Telegram chat ID, Telegram bot selection, alert thresholds, delivery status, alert logs, and related retry or deduplication records.

Support and communications. If you contact us, we collect the information you provide, such as name, email, message content, screenshots, account identifiers, billing context, and support history.

Technical and usage information. We may collect IP address, browser/device information, approximate location inferred from IP, pages visited, feature usage, timestamps, request metadata, error events, latency, logs, and security events. We use this to run, secure, debug, improve, and protect the Service.

Analytics information. We may use privacy-conscious analytics tools, including Google Analytics, to understand aggregate usage patterns. Analytics may involve cookies, device identifiers, IP processing, or similar technologies depending on your browser and region.

Information we do not ask for. PolyMonit does not ask for seed phrases, private keys, wallet passwords, identity documents, exchange credentials, or custody of funds. If anyone claims to need those details for PolyMonit, treat it as a scam and contact support.

3. How We Use Your Information

• To create, authenticate, maintain, and secure your account.
• To provide watchlists, dashboards, wallet tracking, alert rules, Telegram alerts, email alerts, and related features.
• To process subscriptions, verify payment status, prevent billing abuse, manage renewals, cancellations, chargebacks, and refunds.
• To provide support, respond to requests, troubleshoot issues, and communicate service updates.
• To monitor reliability, debug errors, measure performance, improve features, and plan infrastructure capacity.
• To detect, investigate, prevent, and respond to fraud, scraping, account sharing, free-trial abuse, payment abuse, unauthorized automation, security incidents, spam, harassment, and other misuse.
• To enforce our terms, protect our users, protect our rights, resolve disputes, and preserve evidence where reasonably necessary.
• To comply with legal, tax, accounting, regulatory, law-enforcement, or court obligations.

4. Legal Bases for Processing

Where UK GDPR, EU GDPR, or similar laws apply, we rely on the following legal bases:

• Contract. To provide the Service, manage your account, process subscriptions, and deliver alerts you request.
• Legitimate interests. To secure the Service, prevent abuse, debug issues, improve reliability, understand usage, enforce terms, and protect PolyMonit and users.
• Consent. For optional alert channels or analytics choices where consent is required by applicable law. You can withdraw optional consent by disabling the feature or contacting us.
• Legal obligation. To comply with tax, accounting, payment, regulatory, law-enforcement, or court requirements.

5. Sharing and Service Providers

We do not sell your personal information. We may share limited information with service providers and counterparties where necessary to operate, secure, bill, support, or legally protect the Service.

• Google Firebase / Google Cloud. Authentication, database, hosting-related infrastructure, and operational storage.
• Stripe. Checkout, subscriptions, tax/payment records, refunds, chargebacks, fraud prevention, and billing support.
• Netlify. Hosting, serverless functions, deployment, traffic routing, and logs.
• Telegram. Delivery of Telegram alerts when you opt in and provide a chat ID.
• Google Analytics. Aggregate analytics and usage measurement.
• Sentry. Error monitoring, debugging, and reliability reporting.
• Polymarket and public data sources. Read-only public market and wallet activity used to power the Service.
• Professional advisers and authorities. Lawyers, accountants, auditors, banks, payment networks, regulators, law enforcement, or courts where reasonably necessary.
• Business transfers. If PolyMonit or Qoreon Labs Ltd. is involved in a merger, acquisition, financing, restructuring, or sale of assets, information may be transferred as part of that transaction subject to appropriate protections.

Third-party services have their own privacy practices. We are not responsible for privacy practices, outages, errors, or policies of third-party platforms outside our control.

6. Public Wallet Data and Third-Party Market Data

PolyMonit displays and processes public activity from Polymarket and related public endpoints. Public wallet addresses, public trades, public market activity, and third-party platform data may remain available from their original sources even if you delete your PolyMonit account.

You are responsible for the wallet addresses, aliases, notes, filters, or other information you add to your account. Do not submit confidential information, private keys, seed phrases, passwords, personal financial account credentials, or information you are not authorized to use.

PolyMonit is not affiliated with Polymarket. We do not control Polymarket, public blockchain records, third-party APIs, Telegram, Stripe, Google, Netlify, or any other third-party service.

7. Cookies, Local Storage, and Similar Technologies

We use cookies, local storage, and similar technologies for:

• Authentication and session security. Keeping you signed in and protecting account access.
• Preferences and local app state. Remembering selected wallets, plan hints, interface settings, and dashboard state.
• Analytics and performance. Measuring usage, page performance, and product reliability.
• Security and abuse prevention. Detecting suspicious requests, automation, fraud, and misuse.

We do not use advertising cookies for targeted ads. If you disable cookies or local storage, some features may not work correctly.

8. Data Storage, International Transfers, and Retention

Your data may be stored and processed in the United States, the United Kingdom, the European Economic Area, or other locations where we or our service providers operate. By using the Service, you understand that your data may be transferred outside your country of residence.

We keep information only as long as reasonably necessary for the purposes described in this policy, including providing the Service, maintaining business records, complying with law, preventing abuse, resolving disputes, enforcing agreements, and protecting security.

• Account data. Kept while your account is active and for a reasonable period after deletion where needed for backups, audit, security, legal, tax, accounting, or dispute purposes.
• Billing records. Kept as required by Stripe, payment networks, tax/accounting rules, chargeback processes, and applicable law.
• Alert logs and operational logs. Kept as needed for deduplication, delivery verification, abuse prevention, debugging, reliability, and security.
• Support records. Kept as needed to resolve support requests, document account decisions, investigate abuse, and protect against false or fraudulent claims.
• Backups. Deleted or overwritten on normal backup cycles. Immediate deletion from all backups may not be technically possible.

If you delete your account from the Profile page, we will remove or disable the active account record from our production systems within a reasonable period. We may retain limited records where necessary for legitimate business, security, fraud prevention, payment, tax, legal, or dispute reasons. Account deletion is final and may not be reversible.

9. Telegram Alerts

Telegram alerts are optional. If you enable them, we store the Telegram chat ID and alert settings needed to send alerts. We do not read your private Telegram messages, access your contacts, or control Telegram's app, infrastructure, outages, notification settings, or delivery behavior.

Alerts may be delayed, duplicated, missed, filtered, rate limited, or interrupted because of third-party outages, network conditions, device settings, Telegram limits, payment status, abuse prevention, system maintenance, or technical issues. We may suspend, limit, or disable alerts if we detect abuse, failed payment, excessive load, automation, account sharing, or security risk.

10. Security

We use reasonable technical and organizational safeguards, including HTTPS, token-based authentication, server-side verification for sensitive operations, database access controls, logging, monitoring, rate limiting, and operational review. No internet service can be guaranteed 100% secure.

You are responsible for keeping your account login, email account, device, browser, and Telegram account secure. PolyMonit will never ask for your private keys, seed phrase, wallet password, or remote access to your device. We are not responsible for losses caused by your disclosure of credentials, device compromise, phishing, fake support accounts, third-party malware, or unauthorized account access outside our reasonable control.

11. Abuse, Fraud, and Safety

To protect PolyMonit and legitimate users, we may collect, review, preserve, and disclose relevant records when we reasonably believe it is necessary to investigate or prevent abuse, fraud, scraping, automation, account sharing, payment disputes, chargebacks, harassment, platform attacks, attempts to bypass limits, false claims, or illegal activity.

These records may include account IDs, email addresses, IP addresses, device/browser metadata, timestamps, plan and payment status, Stripe records, Telegram alert configuration, wallet counts, support messages, operational logs, and security events. We may share relevant information with Stripe, banks, payment networks, hosting providers, security providers, professional advisers, regulators, courts, or law enforcement where reasonably necessary.

12. Your Privacy Rights

Depending on your location, you may have rights to access, correct, delete, restrict, object to, or receive a copy of your personal information. You may also have the right to withdraw consent for optional processing and to lodge a complaint with a data protection authority.

California residents may have rights to know, delete, correct, opt out of sale/share, limit use of sensitive personal information, and not be discriminated against for exercising privacy rights. We do not knowingly sell personal information or share it for cross-context behavioral advertising. We do not intentionally collect sensitive personal information for the purpose of inferring characteristics about you.

To make a request, email privacy@qoreonlabs.com. We may need to verify your identity before responding. We may decline or limit requests where permitted by law, including where records must be retained for security, fraud prevention, legal, tax, accounting, billing, dispute, or operational reasons.

13. Children's Privacy and Eligibility

The Service is not directed to children or minors. You must be at least 18 years old, or the age of legal majority in your jurisdiction if higher, to use PolyMonit. We do not knowingly collect personal information from children. If you believe a minor has provided personal information, contact us and we will take appropriate action.

14. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. If changes are material, we may provide additional notice, such as by email or in-app notice. Continued use of the Service after an updated policy becomes effective means you accept the updated policy.

15. Contact

Qoreon Labs Ltd.
Email: privacy@qoreonlabs.com
Support: support@qoreonlabs.com
Website: qoreonlabs.com