Privacy Policy
This policy explains what personal data Polysetter collects when you use our website and platform, why we collect it, who we share it with and what rights you have. For data protection questions write to support@polysetter.com.
01Data we collect
We collect:
- Account data — your email address, name if you provide one, password hash, or the identifier and basic profile returned by Google or Apple if you sign in with them.
- Evaluation and trading data — the accounts you open, your orders and simulated trades, balances, equity, drawdown and evaluation status.
- Purchase data — the challenges you buy, order status and amounts. Card details are entered on our payment provider's side and never reach our servers.
- Payout data — payout requests and the details needed to pay them, plus any identity or tax documents we are required to collect.
- Technical and usage data — IP address, device and browser information, pages viewed and actions taken, collected through cookies and analytics.
- Support data — the messages you send us and our replies.
02How we use your data
We use your data to:
- create and administer your account and give you access to the platform
- create trading accounts, run evaluations and calculate results
- process purchases and payout requests, and keep the records we need for accounting and tax
- keep the service secure — detecting multi-accounting, fraud, abuse of the simulated environment and unauthorised access
- support you, and send service messages about your accounts
- measure and improve the product, and — where you have consented or the law otherwise allows — send marketing and measure our campaigns
03Legal bases
Where the GDPR applies we rely on: performance of our contract with you (running your accounts, evaluations and payouts); our legitimate interests (security, fraud prevention, product analytics, direct marketing to existing users); your consent (non-essential cookies and marketing where consent is required); and legal obligations (accounting, tax, anti-money-laundering).
04Cookies and analytics
We use cookies and similar technologies that are necessary to run the site (session and authentication), and analytics and marketing technologies that tell us how the site is used and how people arrive at it — currently Google Tag Manager, Google Analytics, Yandex.Metrika, our own analytics pipeline and the Meta pixel. Yandex.Metrika also records browsing sessions on the site (pages, clicks, mouse movement and scrolling) so we can see where the interface confuses people.
You can control non-essential cookies through your browser settings or any consent controls we display. Blocking necessary cookies will break sign-in.
05Who we share data with
We do not sell your personal data. We share it only with service providers that process it on our behalf, and only as needed:
- Google (Firebase authentication, Analytics and Tag Manager) — sign-in, product analytics and tag delivery
- Yandex — Yandex.Metrika site analytics and session recording
- our payment provider — to take payments and process refunds
- our simulated-trading provider — to create trading accounts and retrieve their activity
- Meta — advertising measurement, where you have accepted marketing cookies
- hosting and infrastructure providers that run our servers and databases in the EU
- professional advisers, auditors, and authorities where we are legally required to disclose
06International transfers
Some of these providers are outside your country. Where data leaves the EEA or UK we rely on an adequacy decision or on standard contractual clauses together with additional safeguards.
07How long we keep data
We keep account, trading and evaluation data for as long as your account exists, and after closure only for as long as we need it to defend claims and meet our legal obligations. Purchase, payout and tax records are kept for the period the law requires. Analytics data is kept in aggregated or pseudonymised form.
08Your rights
Depending on where you live you may ask us to give you a copy of your data, correct it, delete it, restrict or object to certain processing, or receive it in a portable format. You can withdraw consent at any time, and unsubscribe from marketing via the link in any marketing email.
Write to support@polysetter.com to exercise a right; we may need to verify your identity first. If you are in the EEA or UK you can also complain to your local data protection authority.
09Automated decisions
Evaluation results are produced automatically: our engine reads the trading data of your account and applies the published objectives — profit target, drawdown limits, minimum trading days — to set the status to active, passed or failed. Payout requests are not decided automatically; a person reviews them.
If you believe an automated result is wrong, write to support@polysetter.com and we will review it manually.
10Marketing messages
We send marketing email only where you have agreed to it or where the law otherwise allows us to contact existing users. Every marketing email carries an unsubscribe link, and unsubscribing never affects the service messages you receive about your own accounts.
11Security
We protect data with encryption in transit, hashed credentials, access controls and separation of environments, and we limit access to the people who need it. No system is perfectly secure; if a breach affects your data we will notify you and the relevant authority where the law requires it.
12Children
The platform is not for anyone under 18. We do not knowingly collect data from children and will delete it if we discover it.
13Changes to this policy
We will post updates here with a new "last updated" date, and give notice of material changes by email or in the platform.
14Contact
Privacy questions and requests: support@polysetter.com.