Privacy Policy

This Policy explains how Potabo processes personal data when you use the website, apps, account, demo mode and trading features (the “Service”). Potabo is the data controller for the Service; you can reach us via the contact at the end of this document.

Privy, Google, Polymarket, blockchain networks and other independent services also process data under their own rules. This Policy describes Potabo’s processing and does not replace their policies.

• Account and identification: email, internal account ID, Privy DID, verification status and the chosen sign-in method. When you sign in with Google, we may receive an identifier, email and basic profile data within the requested scope.
• Wallet and permissions: public signer and Deposit Wallet addresses, Privy wallet ID, creation status, the fact and time of consent, and the status and parameters of the delegated trading permission.
• Trading data: chosen markets and outcomes, mode, strategy, bot parameters, budget and limits, orders, prices, volume, positions, results, errors, public transactions and, if you use the relevant feature, the withdrawal destination address.
• Technical data: IP address, user agent, country and the result of the geo-availability check, session time and state, sign-in and security events, diagnostic information, server errors and actions in the audit log.
• Communication with us: messages and information you voluntarily send via Telegram or another available channel.

Do not send Potabo your seed phrase, private key, recovery codes or any other data the Service does not explicitly request.

Potabo receives data directly from you and your device, from Privy during sign-in and wallet operations, from Polymarket’s public APIs and interfaces, and from the public blockchain network. Market and blockchain data may be public regardless of Potabo.

If you sign in with Google or connect an external wallet, the chosen provider first processes your data under its own policy and passes to Potabo only the information needed for the chosen feature.

Depending on the context and applicable law, Potabo uses data on the following bases:

• performance of a contract: account creation, sign-in, wallet, demo, bot setup, sending commands, history and support;
• consent: granting a trading permission and other cases where the interface asks for separate consent; consent can be withdrawn for the future;
• legitimate interest: protecting accounts, preventing abuse, diagnostics, keeping the Service running and improving it, unless your rights take precedence;
• legal obligation and protection of rights: complying with lawful requests, resolving disputes and recording significant actions.

Potabo does not use your data to promise individual returns or to give personal financial advice.

The Service uses necessary technologies for sign-in, security and saving state. These include a secure session cookie, Privy storage, and localStorage or sessionStorage for interface state, onboarding hints, short-lived caching of public market data and error diagnostics.

For product analytics Potabo uses PostHog (EU cloud). Until you consent, the counter works without cookies: it records views of public pages and clicks on the main buttons, while a temporary visit number, the first page and the referral source are kept only in the tab’s memory (sessionStorage) and erased when the tab is closed, so a visitor is not recognised between visits. On sign-up, the first page and the referral source are sent to the Potabo server and stored with the account. If you allow analytics cookies (the checkbox when creating the wallet or the question in the dashboard), PostHog stores an identifier in the browser and your actions in the dashboard are linked to your account. The Potabo server sends PostHog events about how the Service is used — sign-up, starting and stopping bots, bets, deposits, withdrawals and payments — under the internal account identifier, without email, name or wallet addresses. The legal basis is our legitimate interest in improving the Service.

Potabo does not use advertising trackers. You can refuse analytics cookies by leaving the checkbox empty or choosing “Essential only” in the dashboard; to withdraw consent or object to the processing of events, write to us in the official Potabo Telegram. Privy and other third-party services you open may use their own cookies and storage under their own policies. Blocking necessary technologies may break sign-in and the operation of the Service.

Potabo shares data only to the extent necessary for a specific purpose:

• Privy — for sign-in, wallet infrastructure, permissions and signing within the chosen feature;
• PostHog — for product analytics: events about how the Service is used, under the internal account identifier, without email, name or wallet addresses;
• Polymarket — for receiving markets and data, creating the Deposit Wallet, and sending and executing trading actions;
• the public blockchain network — when an operation must be published; such records are visible to anyone;
• people and infrastructure supporting Potabo — on a need-to-know basis for hosting, storage, security and troubleshooting;
• competent authorities or parties to a dispute — when required by law or necessary to protect rights and safety.

Potabo does not sell personal data. A message in Telegram is also processed by Telegram independently of Potabo.

Data you enter in the Privy, Google, external wallet or Polymarket window may go directly to that provider. Potabo does not necessarily receive all of it. For example, Potabo does not ask for and should never receive your seed phrase or private key.

Public addresses and blockchain transactions are not controlled solely by Potabo: once published, they usually cannot be deleted or changed. A request to delete your account does not remove records from the public ledger or data that an independent provider is required or entitled to keep itself.

The Service and independent providers may process data in different countries. Data may therefore be transferred outside the country where you are located, where data protection rules differ.

Where applicable law requires special safeguards for such transfers, Potabo uses the available lawful mechanisms and limits the amount of data to the purpose of processing. The terms of international processing by Privy, Google and Polymarket are also governed by their own policies.

Potabo keeps data for as long as needed to operate the account and chosen features, for security, dispute resolution and legal obligations. The specific period depends on the category: sessions and one-time tokens are limited by their validity, while the history of consents, operations and security may be kept longer to reconcile state and protect rights.

After deletion or when you stop using the Service, data is deleted or anonymised once the purpose of storage ends, except for audit records, backups, unfinished operations and information that must be kept by law or to defend against claims. Potabo does not delete public blockchain records.

Potabo applies organisational and technical measures proportionate to the nature of the data and the risk: access control, secure sessions, limited permissions, logging of significant actions and error monitoring.

However, absolute security does not exist. Safety also depends on your device, email, Google account, external wallet, Privy, Polymarket and the blockchain infrastructure. Report suspicious activity immediately and revoke compromised access by the available means.

Depending on applicable law, you may request access to, a copy, correction or deletion of your personal data, restriction of processing and portability, and you may object to processing based on legitimate interest. You may withdraw consent for the future; this does not make processing already carried out unlawful.

Some requests are limited by the need to verify identity, complete an operation, keep audit evidence, comply with the law or respect the public nature of the blockchain. You also have the right to contact a competent data protection authority. To make a request, write via the official Potabo Telegram and state which account and right it concerns.

The Service is not intended for persons under 18, and Potabo does not knowingly collect their data. If you believe a minor has provided data, let us know via the official contact so that Potabo can check the situation and take the necessary steps.

Potabo may update this Policy when the Service, processing methods or the law change. A new version applies from the date shown; material changes may also be highlighted in the Service.

Send questions and data requests via the official Potabo Telegram. For the general rules of use, see the Terms of Service, and for trading risks, the Disclaimer.