Privacy Policy

The service is operated by [legal entity name], [registered address] (“Tradante”, “we”, “us”). We are the data controller for the personal data described in this policy.

This policy covers the public website at tradante.com, the documentation site at docs.tradante.com, the logged-in platform (the “App”), the beta registration flow, and the emails and text messages we send you. It does not cover third-party websites we link to, or the prediction-market venues, blockchain networks or wallet apps you may use alongside us. Each of those has its own policy.

Capitalised product terms (levels, passes, challenges, Social Order Book, prize pools) have the meaning given in the Rulebook.

We group the data into the categories below. “You give it” means you type it in or upload it. “Collected automatically” means your browser or device sends it as part of using the site. “From others” means a third party passes it to us.

We do not deliberately collect special-category data (health, religion, political opinions and similar). Do not include it in free-text fields or support messages.

Where the law requires a legal basis (for example under the GDPR or UK GDPR), the basis for each purpose is shown in the right-hand column.

On your first visit a card in the bottom-right corner asks which optional categories you allow. Necessary items cannot be switched off because the site does not work without them. Your choice is saved for one year and can be changed at any time via Cookie settings in the footer of every page. Optional items are not set, and the related scripts are not loaded, until you allow them.

Set by us

Set by third parties

The Marketing category in the consent card is reserved for future campaign-attribution tags. Nothing is set under it today; if that changes we will update this table and ask for consent again.

You can also block or delete cookies in your browser settings. If you block the necessary ones you will not be able to sign in.

We use specialised companies to run parts of the service. They act on our instructions under written contracts and may only use the data to provide their service to us. The table lists every provider that receives personal data today.

Prediction-market venues. When an order you place is executed on an external venue such as Kalshi or Polymarket, the venue receives the order details (market, side, size, price). Orders are routed through accounts held by us, so the venue does not receive your name or account identity. If you choose to connect your own venue account, that venue collects data under its own policy.

Base blockchain. Deposits, withdrawals and prize payouts are settled in USDC on the Base network. The wallet addresses, amounts and timestamps of those transactions are written to a public ledger that we do not operate and cannot edit or erase. Anyone can read them. Do not connect a wallet whose history you want to keep private.

• Leaderboards and rankings show your username, level, badges and score to everyone on the platform.
• Your profile shows what you allow it to show. In the App you can switch personal information, trading experience, social profile and follower lists between public, followers-only and private.
• The Social Order Book shows positions and signals you choose to publish, under the visibility you set. Anything you post there can be seen by the audience you selected and may be copied by them.
• Blockchain transactions are public and permanent, as described in section 6.

Your email address, phone number, identity documents, IP address and wallet-to-account link are never shown to other users.

We share personal data only in these cases:

• With the processors in section 6, to run the service.
• With partners who referred you: they see that a referred user registered and the earnings the referral generates in aggregate. They do not receive your name, email or trading detail.
• When the law requires it: to courts, regulators, tax authorities or law enforcement acting under a valid legal process, and to sanctions or anti-money-laundering authorities where we are obliged to report.
• To protect the platform and its users: to investigate fraud, cheating or security incidents, and to enforce the Rulebook.
• In a corporate transaction: if we merge, are acquired or sell assets, the data transfers with the business under this policy, and we will tell you before it does.

We do not sell personal data, we do not share it with data brokers, and we do not place advertising trackers on our pages.

Our systems run on Microsoft Azure in [region]. Some providers in section 6 are based in the United States or elsewhere. Where data about people in the European Economic Area, the United Kingdom or Switzerland leaves those areas, we rely on [the European Commission’s Standard Contractual Clauses and the UK Addendum / the EU-US Data Privacy Framework where the provider is certified], plus the provider’s own security commitments. You can ask us for a copy of the safeguards that apply to a given provider.

When a period ends we delete the data or strip everything that identifies you. We may keep data longer if it is needed for an ongoing investigation, dispute or legal hold.

• All traffic between your browser and our servers is encrypted (HTTPS). Data is encrypted at rest on Azure.
• Passwords are stored only as salted one-way hashes. We cannot see your password and will never ask for it.
• New devices must be confirmed with a one-time code sent to your email or phone.
• Identity documents never touch our servers; they go directly to the verification provider.
• Secrets and API keys are held in Azure Key Vault with role-based access; staff access to production data is limited to named administrators and logged.
• Customer funds are held in audited vault contracts on Base, not in a company bank account, and every movement is visible on-chain.

No system is perfectly secure. If a breach affects your data in a way that puts you at risk, we will notify you and the relevant authority as the law requires.

Depending on where you live you may have some or all of the following rights. We apply them to everyone regardless of location, within the limits of the retention duties in section 10.

• Access: ask for a copy of the personal data we hold about you.
• Correction: fix inaccurate or incomplete data. Most profile fields you can edit yourself in the App.
• Deletion: ask us to close your account and erase your data. Identity-verification results and financial records are kept for the periods in section 10 because the law requires it; everything else is deleted or anonymised.
• Portability: receive your account and trading data in a machine-readable file.
• Objection and restriction: object to processing based on legitimate interest, or ask us to pause processing while a dispute is resolved.
• Withdraw consent: change cookie choices at any time via Cookie settings; unsubscribe from marketing through the link in any message. Withdrawing consent does not affect processing that already happened.
• Complain: you can lodge a complaint with your local data-protection authority. We would appreciate the chance to resolve it first.

To exercise a right, email info@tradante.com from the address on your account. We may ask you to confirm your identity before acting. We answer within [30 days]; if a request is complex we will tell you why and when to expect the answer.

California residents: we do not sell or share personal information for cross-context behavioural advertising, and we do not use or disclose sensitive personal information other than to provide the service. You may exercise the rights above without discrimination.

Two processes run automatically and can affect what you may do on the platform:

• Identity and sanctions screening by our verification provider. A rejection blocks deposits and withdrawals. You can ask for a human review by contacting us; a member of our team looks at the file and the provider’s reasons.
• Fair-play checks flag patterns such as duplicate accounts, mirrored positions between accounts, or scripted order flow. A flag never disqualifies you on its own: a person reviews it before any competition result, payout or account is affected, and you are told the reason and can respond.

The platform is for adults. You must be at least 18 years old, or the age of majority where you live if that is higher, to create an account. We do not knowingly collect data from anyone younger. If you believe a minor has registered, tell us and we will remove the account and its data.

We will update this page when what we collect or who processes it changes. The version number and effective date at the top move with each change. For a material change, such as a new category of data or a new purpose, we will tell you by email or by a notice in the App before it takes effect, and where consent is required we will ask for it again.

Privacy questions and requests: info@tradante.com

Postal address: [legal entity name, registered address]

Data protection contact: [name or role, if one is appointed]