Privacy Policy

Scope

This Privacy Policy explains how PolySocket.dev collects and uses information for account access, billing, API-key management, WebSocket feed access, security, abuse prevention, and support.

Information we collect

• Account information such as email address, user ID, authentication state, and account status.
• Billing information handled by Stripe, including Stripe customer ID, subscription ID, checkout status, invoices, plan, trial status, cancellation status, and card fingerprint used for trial-abuse prevention. We do not store full card numbers.
• API-key metadata such as key prefix, creation time, revocation time, and status. Raw API keys are shown once and are not stored in plaintext.
• Abuse-prevention signals including hashed email, hashed device identifier, hashed IP/network signal, Stripe card fingerprint, trial attempts, trial locks, and related account markers.
• Operational data such as sync runs, connection/account limits, support messages, and logs needed to operate and protect the service.

How we use information

• Provide account access, API-key management, subscriptions, trials, WebSocket access, support, and service operations.
• Enforce wallet limits, subscription status, cancellation state, and access controls.
• Prevent trial abuse, payment abuse, account abuse, key sharing, chargeback abuse, infrastructure abuse, and policy violations.
• Respond to payment disputes, chargebacks, legal requests, fraud reviews, support requests, and security incidents.
• Improve reliability, diagnose service issues, and maintain internal records.

Third-party processors

• Stripe processes payments, subscriptions, trials, invoices, billing portal access, checkout sessions, card information, disputes, and related billing data.
• Supabase provides authentication and database services.
• Vercel hosts the website and application and provides analytics and infrastructure services.
• Other infrastructure providers may process operational data necessary to run the WebSocket feed and dashboard.

Sharing

• We do not sell personal information.
• We may share information with service providers that help operate PolySocket.dev.
• We may share evidence with Stripe, card networks, issuing banks, processors, advisors, or authorities when responding to disputes, fraud, abuse, legal claims, or policy violations.
• We may disclose information if required by law or to protect PolySocket.dev, customers, infrastructure, payment systems, or others.

Retention

We retain account, billing, access, abuse-prevention, and operational records for as long as needed to provide the service, comply with legal and payment obligations, resolve disputes, prevent abuse, enforce policies, and maintain security.

Security

We use reasonable technical and organizational measures to protect information. No internet service is perfectly secure, and customers are responsible for protecting their login credentials, API keys, wallets, private keys, trading systems, and devices.

Your choices

You may contact hello@polysocket.dev to request account support, access, correction, or deletion where applicable. Some records may be retained where needed for billing, dispute, fraud, legal, security, or abuse-prevention reasons.