Privacy Policy

PoolDefy ("we", "us", "the Platform") respects your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data. By using the Platform, you consent to the practices described in this policy.

Account Information

When you create an account, we collect your email address, display name, and password (stored as a cryptographic hash, never in plain text). If you sign in with Google, we receive your name, email, and profile picture from Google.

Financial Information

We record your deposit addresses, transaction history, entry fees, payouts, and withdrawal addresses. We do not store private keys for your external wallets. On-chain transaction data is inherently public on the Polygon blockchain.

Usage Data

We collect information about how you use the Platform, including pages visited, pools joined, picks made, and features used. This helps us improve the Platform and detect issues.

Device and Network Data

We collect IP addresses, browser type, device type, and operating system for security purposes, fraud detection, and to provide a better user experience.

• Provide and operate the Platform, including processing entries, settlements, and payouts
• Verify your identity and prevent fraud, duplicate accounts, and abuse
• Process deposits and withdrawals on the Polygon network
• Send transactional emails (account verification, password resets, deposit confirmations, withdrawal updates)
• Improve the Platform through analytics and usage patterns
• Enforce our Terms of Service and protect the rights of users
• Comply with legal obligations and respond to lawful requests
• Send product updates and promotional communications (with your consent, which you can withdraw at any time)

We do not sell your personal information. We may share data in the following limited circumstances:

• Public profile data: Your display name, username, avatar, achievements, pool history, and performance stats are visible to other users based on your privacy settings.
• Service providers: We use third-party services for email delivery, blockchain RPC access, and sports data. These providers process data on our behalf under contractual obligations.
• Legal requirements: We may disclose information in response to valid legal processes, court orders, or to protect the safety of users.
• Blockchain data: Deposit and withdrawal transactions are recorded on the public Polygon blockchain and are visible to anyone.

We implement industry-standard security measures to protect your data:

• Passwords are hashed using scrypt (never stored in plain text)
• All communications use HTTPS/TLS encryption
• Two-factor authentication (TOTP) is available for additional account security
• Private keys for platform wallets are stored securely and rotated periodically
• Access to user data is restricted to authorised personnel
• Automated fraud detection systems monitor for suspicious activity

While we take reasonable measures to protect your information, no system is completely secure. You are responsible for maintaining the security of your account credentials.

We retain your account information and transaction history for as long as your account is active and for a reasonable period thereafter for legal, regulatory, and dispute resolution purposes.

Transaction records on the Polygon blockchain are permanent and cannot be deleted due to the nature of blockchain technology.

Depending on your jurisdiction, you may have the following rights:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate personal data
• Deletion: Request deletion of your personal data (subject to legal retention requirements)
• Portability: Request your data in a structured, machine-readable format
• Objection: Object to processing of your personal data for certain purposes
• Profile privacy: Control the visibility of your profile through privacy settings (public, limited, or private)

To exercise any of these rights, contact us at support@pooldefy.com.

We use essential cookies and local storage to maintain your session, remember your preferences (theme, sound settings), and track onboarding completion. We do not use third-party advertising trackers.

The Platform integrates with the following third-party services:

• Google OAuth: For account sign-in (if you choose Google sign-in)
• Polygon Network (via Alchemy): For processing USDC deposits and withdrawals
• Sportmonks: For live sports fixture data and match results
• Google Workspace (SMTP): For sending transactional emails

Each of these services has its own privacy policy. We encourage you to review them.

The Platform is not intended for use by anyone under 18 years of age. We do not knowingly collect personal information from children. If we learn that we have collected data from a child, we will delete it promptly.

Your data may be processed in jurisdictions outside your country of residence. By using the Platform, you consent to the transfer of your information to these jurisdictions, which may have different data protection laws.

We may update this Privacy Policy from time to time. Material changes will be communicated via the Platform or email. Continued use of the Platform after changes constitutes acceptance. The "Last updated" date at the top reflects the most recent revision.

For questions or concerns about this Privacy Policy or your personal data, contact us at support@pooldefy.com.