Privacy Policy

Last updated: April 3, 2026

Overview

PolyAI is a Chrome extension that provides AI-powered BTC price predictions and trading tools for Polymarket. We are committed to protecting your privacy and being transparent about what data we collect and how we use it.

Data We Collect

When you create a PolyAI account, we collect:

• Email address — used as your login identifier
• Password — stored as a bcrypt hash (we never store or see your plaintext password)
• IP address — logged at registration for rate limiting and abuse prevention

Data Stored Locally on Your Device

The extension stores the following in Chrome's local storage (never sent to our servers):

• Session token (for staying logged in)
• UI preferences (theme, widget visibility, chart settings)
• Free tier usage counters

Data We Do NOT Collect

• We do not collect your Polymarket wallet address
• We do not collect your trading history or positions
• We do not collect your browsing activity outside of Polymarket
• We do not use cookies for tracking or advertising
• We do not collect any personal information beyond your email

How We Use Your Data

• Email — to authenticate your account and manage your subscription
• IP address — to prevent abuse (rate limiting login attempts)
• Usage data — to enforce free tier limits (tracked server-side by account ID, not personally identifiable)

Data Sharing

We do not sell, rent, or share your personal data with any third parties. Your data is used solely for operating the PolyAI service.

Data Security

• Passwords are hashed using bcrypt with a cost factor of 12
• Session tokens are signed with HMAC-SHA256 and expire after 7 days
• Login attempts are rate-limited (5 per 15 minutes per IP)
• The WebSocket server requires authentication before sending any data
• All connections use SSL/TLS encryption

Data Retention

Your account data is retained as long as your account is active. You may request deletion of your account and all associated data by contacting us at [email protected].

Third-Party Services

PolyAI connects to the following external services to provide its functionality:

• Polymarket (polymarket.com) — the extension injects UI elements into the Polymarket trading page
• Chainlink Data Streams (via Polymarket's WebSocket) — for real-time BTC price data used in charts

No user data is sent to these services by the extension.

Children's Privacy

PolyAI is not intended for use by anyone under the age of 18. We do not knowingly collect data from minors.

Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated date.

Contact

If you have questions about this privacy policy or your data, contact us at [email protected].