Privacy Policy
Last updated: March 2026 | Operator: Bunelius & Co Ltd | polysignal@proton.me
1. Introduction
PolySignal ("we", "us", "our") is operated by Bunelius & Co Ltd. This Privacy Policy explains how we collect, use, and protect your personal data when you use polysignal.pro (the "Service"). By using the Service, you agree to the terms of this policy.
2. Data We Collect
Payment data: Card, Apple Pay and Google Pay payments are processed by Stripe; we never see or store your full card details — Stripe handles them under PCI-DSS and shares only a payment confirmation, your email, and a subscription identifier with us. If you instead pay with crypto, payment is made on-chain using USDC on the Base network and we receive only the transaction hash and your wallet address. We do not store raw card numbers in either case.
Access token: A subscription access token is stored in your browser's localStorage to maintain your session. This token does not contain personal information beyond your subscription tier.
Usage data: We do not use cookies or device fingerprinting for tracking, and we do not store IP addresses or browsing history. Netlify (our hosting provider) may log standard request data at infrastructure level.
Visit statistics: We count page views with our own cookieless counter, based on our legitimate interest in understanding how the Service is used (Art. 6(1)(f) GDPR). For each page view we record the page, the domain of the referring website, the device type (mobile, tablet or desktop) and the country derived by our host from the connection. To count unique visitors per day, your IP address and browser user agent are combined with a random value that changes every day and is then deleted, producing a short one-way code; the IP address itself is not stored. Individual page-view records are deleted after the day's totals are computed; only anonymous daily totals are kept. Page views are not counted if your browser sends a Global Privacy Control or Do Not Track signal.
Communications: If you contact us by email, we retain that correspondence to respond to your query.
3. How We Use Your Data
Your email address (if provided) is used solely to: (a) deliver your access code after on-chain payment confirmation, (b) send service-related communications such as access expiry reminders or policy updates, and (c) respond to support requests. We do not use your data for advertising, profiling, or any automated decision-making that affects your rights.
4. Third-Party Services
The Service integrates with the following third parties for market data and payment processing:
Stripe — card, Apple Pay and Google Pay payment processing and subscription billing. Stripe's terms and privacy policy apply: stripe.com.
Base / Coinbase — optional on-chain payment infrastructure for USDC transactions. Base's terms apply to on-chain transactions: base.org.
Binance API / CoinGecko / Chainlink — real-time BTC, ETH, and SOL price data. No personal data is transmitted to these services.
Polymarket API — public prediction market odds. No personal data is transmitted.
Alternative.me — Fear & Greed index data. No personal data is transmitted.
Netlify — website hosting. Netlify may collect standard server logs including IP addresses as part of infrastructure operation.
5. Data Retention
We retain your email address for as long as your subscription is active and for up to 12 months thereafter for accounting and legal purposes. You may request earlier deletion at any time.
6. Your Rights (GDPR)
If you are located in the European Economic Area, you have the following rights under the General Data Protection Regulation (GDPR):
Right of access — you may request a copy of the personal data we hold about you.
Right to rectification — you may ask us to correct inaccurate data.
Right to erasure — you may ask us to delete your personal data ("right to be forgotten").
Right to restriction — you may ask us to restrict processing of your data.
Right to data portability — you may request your data in a machine-readable format.
Right to object — you may object to processing based on our legitimate interests.
To exercise any of these rights, contact us at polysignal@proton.me. We will respond within 30 days.
7. Data Security
We implement appropriate technical and organisational measures to protect your data. Payment is processed entirely on-chain via the Base network — we never see or store payment credentials of any kind. All transactions are publicly verifiable on the Base blockchain.
8. International Transfers
Our service is hosted via Netlify (USA). On-chain payment processing is decentralised on the Base network. Netlify maintains EU-US Data Privacy Framework compliance. By using the Service, you acknowledge that your data may be processed outside the EEA under appropriate safeguards.
9. Children's Privacy
The Service is not directed at persons under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us immediately.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised "Last updated" date. Continued use of the Service after changes constitutes acceptance.
11. Contact
For any privacy-related queries or to exercise your rights, contact us at: polysignal@proton.me. We aim to respond to all requests within 30 days.