Legal
Privacy Policy
Last updated October 25, 2026
This policy explains what personal information POLYRA (“we”, “us”) collects when you use the website and app, why we collect it, who we share it with, and the choices and rights you have. We do not sell your personal information.
1. Information we collect
- Account information: your email address and, if you sign in with Google, your name and profile picture. Passwords are handled by our sign-in provider; we never see them.
- What you submit: market links, screenshots you upload, and the analyses we produce for you.
- Activity in the app: your Watch list and notifications, Scout searches, paper trading portfolios and positions, plan and usage counts.
- Reviews: if you write one, the text and the name, role and country you choose to show.
- Technical information: sign-in session cookies, IP address, device and browser information, and logs needed to run, secure and debug the Service.
We do not ask for, and you should not upload, wallet private keys, passwords, bank details or government ID. POLYRA does not connect to your wallet.
2. How we use it
- to provide the Service: run analyses, Scout, Watch updates and paper trading, and keep your history;
- to manage your account, plan and usage limits;
- to keep the Service secure, prevent abuse and fix problems;
- to improve our research rules and product, mainly using aggregated or de-identified information;
- to contact you about your account and important changes to the Service;
- to comply with legal obligations and enforce our Terms of Service.
Where the GDPR or similar laws apply, we rely on performing our contract with you, our legitimate interests in running and securing the Service, your consent (for example, for publishing a review), and legal obligations.
3. Service providers we share it with
We share information only with providers that help us run the Service, under contracts that limit their use of it:
- Google Firebase: sign-in and database.
- Railway: hosting of the website and research engine.
- AI model providers (Anthropic and Google): the market details, links and screenshots you submit are sent to them to produce research. We do not send your name or email with these requests.
- Data sources: we request public market, price and news data (for example from Polymarket, crypto exchanges and news services). These requests contain market details, not your personal information.
We may also disclose information if required by law, to protect rights and safety, or as part of a merger, acquisition or sale of the Service, in which case this policy will continue to apply to your information.
4. What other users can see
Your analyses, Watch list and paper trading are private to your account. Only reviews you choose to submit, and that we approve, are shown publicly, with the name and details you chose.
5. Cookies
We use essential cookies to keep you signed in and to secure the Service, and your browser’s local storage for app preferences. We do not use advertising cookies or sell data to advertisers.
6. International transfers
Our providers may process information in the United States, the European Union and other countries. Where required, we rely on appropriate safeguards such as standard contractual clauses.
7. Retention
We keep your information while your account is active. When you ask us to delete your account, we delete or de-identify your personal information within a reasonable period, except where we must keep some of it for legal, security or dispute purposes. Backups and logs are deleted on their regular cycle.
8. Your rights
Depending on where you live (including under the Israeli Privacy Protection Law and the GDPR), you may have the right to access, correct, delete or export your personal information, to object to or restrict certain processing, and to withdraw consent. To make a request, use the details on the Contact page. We may need to verify your identity. You may also complain to your local data protection authority.
9. Security
We use reasonable technical and organizational measures, including encrypted connections, access controls and restricted administrative access. No system is completely secure, so we cannot guarantee absolute security.
10. Children
The Service is for people aged 18 and over. We do not knowingly collect information from anyone under 18. If you believe a minor has given us information, contact us and we will delete it.
11. Changes
We may update this policy as the Service changes. If a change is material, we will give notice on the website or by email. The date at the top shows when it was last updated.
12. Contact
For any privacy question or request, use the details on the Contact page.