Privacy Policy

1. Introduction

PolyZig ("we", "us", "our") is operated by AIEngine LTD. This Privacy Policy explains what information we collect when you use polyzig.com, our APIs, and related services ("Services"), why we collect it, and what choices you have about it. By using the Services you agree to the practices described below.

PolyZig is a non-custodial copy-trading platform for Polymarket prediction markets. We do not take custody of your funds or private keys. Some data is still required to operate the platform, authenticate you, and comply with legal obligations — this policy covers that data.

2. Data We Collect

• Email address — used by Magic.link to issue a passwordless login and to deliver transactional emails (account notices, security alerts, receipts).
• Wallet address — the public Polygon address associated with your PolyZig account. Wallet addresses are public on-chain and we store them to map your account to on-chain activity.
• On-chain transaction metadata — hashes, block numbers, order IDs, fills, positions, and realized P&L relating to copy trades placed through PolyZig.
• IP address and user agent — collected automatically by our servers and CDN for abuse prevention, rate limiting, and geographic restriction enforcement.
• Optional social handles — if you voluntarily connect a Telegram or X handle for notifications or support, we store that handle until you disconnect it.
• Device & usage telemetry — browser, OS, locale, referrer, pages visited, and feature-usage events.

We do not see or store your Magic.link private key. Keys are held client-side by Magic.link's infrastructure. We do not knowingly collect data from children under 18.

3. Third Parties

We rely on the following processors. Each operates under its own privacy policy; by using PolyZig you accept data processing by these parties as necessary to provide the Services.

• Polymarket — order placement and market data. On-chain trades are public by nature.
• Magic.link — passwordless auth and non-custodial wallet issuance.
• Resend — transactional email delivery (login links, receipts, security alerts).
• Google Analytics — anonymized aggregate traffic analytics. You may opt out (see Your Rights).
• Vercel — frontend hosting, CDN, and access logs.
• Alchemy — Polygon RPC provider used for on-chain reads and transaction broadcasts.

4. Cookies & Tracking

We use a small set of first-party cookies:

• Auth session — short-lived, HttpOnly cookie used to keep you signed in.
• Analytics — Google Analytics uses cookies to distinguish unique visitors. IPs are anonymized.
• UTM / attribution — 30-day first-party cookie to credit the referral source that brought you to the site. No cross-site tracking.

Most browsers let you block or delete cookies. Disabling the session cookie will sign you out.

5. Your Rights

If you are in the EEA, UK, or California you have rights under the GDPR and CCPA respectively. These include:

• Access — request a copy of the data we hold about you.
• Deletion — request we delete your account and associated personal data (on-chain records remain public and cannot be deleted).
• Portability / export — receive your data in a machine-readable format.
• Opt-out — opt out of analytics and non-essential processing. We do not sell personal information.
• Correction — ask us to fix inaccurate data.

To exercise any right, email privacy@polyzig.com. We respond within 30 days.

6. Data Retention

Account data (email, wallet address, configs) is retained for the life of your account and for 90 days after you request deletion (to finalize accounting and resolve any open trades). Server and access logs are retained for 30 days, then rotated out. On-chain data is permanent and outside our control.

7. Contact

For any privacy question or request, email privacy@polyzig.com. For all other inquiries see our contact page.

8. Changes

We may update this policy as the Services evolve. Material changes will be announced in-app and by email to your registered address at least 14 days before they take effect. The "Last updated" date at the top of this page always reflects the current version.