PRIVACY POLICY
Privacy Policy
1. Who is responsible
The operator of PolyCerno determines how personal information is processed for the Service. In this Policy, “PolyCerno,” “we,” “us” and “our” refer to that operator. Privacy questions and requests may be sent to contact@polycerno.com.
2. Information from Google sign-in
When you choose Google sign-in, we request the standard openid, email and profile scopes. We may receive your Google account identifier, email address, email-verification status, display name and profile image. We use this information to create and identify your PolyCerno account, authenticate you, show account details and protect access. We do not receive your Google password.
3. Account and security information
We process account identifiers, administrator status, session creation, expiry and last-seen times, anti-forgery information, a hashed session token, a hashed or otherwise protected form of the connecting IP address, browser user agent and security events. This information is used to keep you signed in, prevent abuse, investigate incidents and operate the Service.
4. Orders, payments and subscriptions
We process order IDs, plan and amount, supported token and network, assigned public deposit address, order status and expiry, public transaction hashes, observed sender addresses, block timestamps, confirmation state, subscription start and end dates, and refund status. Blockchain addresses and transaction records are public by design and may remain visible permanently on the relevant blockchain even if our account record is later deleted. PolyCerno does not request or store your wallet seed phrase or trading private key.
5. Product use, diagnostics and support
We may process requested pages, timestamps, client-session identifiers, language, viewport information, feature interactions, error and performance events, IP address, user agent and server logs. Sensitive values such as wallet addresses included accidentally in client telemetry are designed to be redacted where identified. If you contact support, we process your email, message, attachments and the identifiers you provide in order to respond and retain an auditable support record.
6. How we use information
We use personal information to provide authentication and paid access; create, detect and reconcile payment orders; maintain subscriptions and refunds; operate, secure, debug and improve the Service; respond to support and privacy requests; prevent fraud and abuse; keep required financial and security records; and comply with applicable legal obligations. We do not use Google user data for advertising, and we do not sell personal information.
7. Legal bases where required
Where data-protection law requires a legal basis, we rely on performance of our contract to provide accounts, orders and subscriptions; legitimate interests in security, fraud prevention, support, reliability and product improvement; consent where required for optional storage or processing; and compliance with legal obligations for records and lawful requests. You may object to processing based on legitimate interests where applicable.
8. Cookies and local storage
The application uses a secure session cookie, currently named polycerno_session, to keep you authenticated. Its normal maximum lifetime is 30 days, although it may expire or be revoked sooner. We also use anti-forgery state during sign-in and may store a language or interface preference locally, normally for up to one year. Essential authentication and security storage cannot be disabled while using account features. We do not currently use third-party advertising cookies.
9. Google API data
Our use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements. You can revoke PolyCerno’s Google access through your Google Account. Revocation prevents future Google sign-in authorization but does not automatically delete records we must retain for an existing account, payment, security or legal purpose.
10. Sources and public blockchain data
Some records come directly from you or Google; others are created through your use of the Service. Payment observations may be obtained from public blockchain nodes or RPC providers. Market displays use public and third-party sources. A public wallet address or transaction hash is not treated as a secret, but it may be personal information when it can be linked to an identifiable person.
11. Sharing and service providers
We disclose information only as needed to providers that support authentication, infrastructure, hosting, networking, blockchain access, monitoring, email or support; to professional advisers where necessary; to a successor involved in a transfer of the Service; or to authorities and other parties when reasonably necessary to comply with law, protect rights, investigate abuse or address security. Providers may process information under their own terms and locations. We do not share Google user data or account data for targeted advertising.
12. International processing
The Service and its providers may process information in countries other than your own. Where required, we use an available lawful transfer mechanism or rely on another permitted basis. Privacy protections and government-access rules may differ between countries.
13. Retention
We retain information only for as long as reasonably necessary for the purpose collected. Authentication sessions normally expire after 30 days and expired technical records are removed after a limited operational period. Product telemetry and operational observations generally use short retention windows ranging from days to approximately 30 days, subject to security needs. Support, order, subscription, payment, refund and audit records may be kept longer where necessary to provide access, resolve disputes, prevent fraud, maintain accounting records or comply with law. Backups may retain deleted records temporarily until they rotate.
14. Security
We use technical and organizational safeguards appropriate to the nature of the Service, including protected session tokens, access controls, transport encryption and limited handling of secrets. No internet or storage system is completely secure. You should protect your Google account and device and contact us promptly if you suspect unauthorized access. Never send us a seed phrase, private key, password or one-time authentication code.
15. Your privacy rights
Depending on your location, you may have rights to request access, correction, deletion, restriction, portability or an explanation of processing; to object; to withdraw consent; and to complain to a data-protection authority. We may verify your identity before acting and may retain information where an exception or legal obligation applies. To submit a request, email contact@polycerno.com from your account email when possible.
16. California disclosures
Where California privacy law applies, the categories described above may include identifiers, internet or electronic activity, commercial information and inferences associated with product use. We use and disclose them for the business purposes stated in this Policy. We do not sell personal information and do not share it for cross-context behavioral advertising. Applicable access, correction, deletion and non-discrimination rights may be exercised through the contact above.
17. Automated processing
PolyCerno may generate automated market indicators and quality states, but those outputs concern markets and product data. We do not use personal information to make decisions that produce legal or similarly significant effects about you.
18. Children
The Service is not directed to anyone under 18, and we do not knowingly collect personal information from children. Contact us if you believe a child has provided personal information.
19. Changes to this Policy
We may update this Policy as the Service or law changes. The effective date identifies the current version. If a change materially affects how existing account information is used, we will provide notice through the Service or another reasonable channel when required.