Legal

Privacy Policy

Last updated: 2026-06-27

Who we are

PredictFundr is the controller of your personal data. For privacy questions: [email protected].

What we collect

  • Account data: email, display name, country/region, date of birth.
  • Trading data: simulated trades, positions, P&L, journal entries you create.
  • Payment data: processed by Stripe; we receive a payment-confirmation token, not card details.
  • KYC data (at payout time only): processed by Persona; we receive a verification status, not the underlying documents.
  • Technical data: IP address, browser/device info, page views and feature interactions (via PostHog), error events (via Sentry).
  • Communications: emails you send us, support tickets, transactional email events.

How we use it

  • Operate the Service (authentication, evaluation tracking, payouts).
  • Comply with legal obligations (KYC, tax reporting, sanctions screening, geo-block enforcement).
  • Detect and prevent fraud, abuse, and rule violations.
  • Improve the Service (feature analytics, error monitoring, performance benchmarking).
  • Send transactional emails (account, eval status, payouts) and — if you opt in — marketing emails.

Who we share with

  • Service providers who process data on our behalf: Supabase (database/auth/storage), Vercel (hosting), Fly.io (workers), Stripe (payments), Persona (KYC), Resend (email), PostHog (analytics), Sentry (errors), AWS S3 (audit/cold storage).
  • Affiliates we work with: only attribution data (referral source) and aggregate conversion data, never your personal account information.
  • Legal/regulatory disclosures: when required by law, court order, or regulatory inquiry.
  • Business transfers: in connection with a merger, acquisition, or sale of assets, with notice to you.

We do not sell your personal information.

Cookies and tracking

We use cookies for authentication, security, and analytics. Strictly necessary cookies (session, CSRF) are always set. Analytics cookies (PostHog) require consent in jurisdictions where consent is required. You can manage cookie preferences in your browser.

Your rights

Depending on your jurisdiction, you have rights to: access your personal data, correct inaccuracies, request deletion, restrict processing, port your data, withdraw consent, and object to certain processing. To exercise these rights, email [email protected]. We will respond within the timelines required by your jurisdiction's law (typically 30–45 days).

Data retention

Account data: retained for the life of the account plus 7 years (legal/tax retention). KYC data: retained per the retention requirements of the regulations we comply with. Audit-trail data: retained indefinitely (immutable record). Marketing data: deleted on unsubscribe or 24 months after last interaction, whichever comes first.

International transfers

Our processors are located in the United States and may transfer data internationally. We require processors to maintain security and confidentiality controls equivalent to those required by US, EU, and UK data-protection laws.

Children

The Service is not directed to anyone under 18. We do not knowingly collect data from anyone under 18.

Changes

We will notify you of material changes by email at least 30 days before they take effect, except where shorter notice is required by law.