Privacy notice
Who is responsible
The controller of the data described here is [legal entity name], [registered address] ("Polytrade"). Privacy questions and requests: [privacy contact address].
The short version
Edge has no accounts, names, emails or passwords. It knows you by your wallet address. It keeps what it needs to run your agent and pay out fees, logs what happened so failures can be traced, and uses your IP address only to rate-limit requests. It runs no analytics or advertising trackers.
What we store, and why
- Your wallet address, as the owner of each agent you create, as the creator of each basket you publish, and in the set of wallets that copied each basket. Needed to run agents, return money to you, and show counts such as wallets aped.
- Your agent wallets: their addresses, their private keys (encrypted with AES-256-GCM), the policy you signed, your mandate signature, what you funded and what they hold, and their trade and exit history. Needed to run the agent and to settle fees.
- Baskets you publish: name, tokens and weights, rules, description, the sharing fee you set, and an X handle if you choose to add one (self-declared, not verified). These are public: anyone can see them.
- Referrals and payouts: which wallet referred which, and the balances owed and paid to creators and referrers.
- Signature nonces for the actions you sign, so a signature cannot be replayed.
- Event logs: what an action did and whether it worked, with the wallet involved, transaction hashes, error messages and the page you were on. The log keeps the most recent entries only (about 5,000 server events and 2,000 browser events) and older ones drop off as new ones arrive.
- Support messages you send through the help button: the first 800 characters of your message, your wallet address if connected, and the screen you were on.
- Your IP address, held for about a minute in a counter that limits how many requests one address can make. It is not stored with your wallet or logs.
Public blockchains record your wallet's and your agent wallets' transactions permanently. That is a property of the chains, not something Polytrade can change or delete.
Cookies and browser storage
- edge_owner: a signed session cookie set after you prove you own a wallet, so you are not asked to sign again for a while. It lasts up to 7 days and is cleared when you disconnect.
- cs_bypass: only for the team, to preview the site before launch.
- Browser storage on your device holds your theme, a referral code from a link you opened, which help sections you collapsed, your sort order, and local copies of your activity and settings. It stays in your browser; clear it there.
Who else receives data
Edge runs on, or calls, these services. Each receives what it needs for its job:
- Vercel (hosting) and Upstash (the database): everything stored above.
- Blockchain RPC providers (public endpoints for Base, Robinhood Chain and Solana) and block explorers (Blockscout, Basescan, Solscan): wallet addresses whose balances and transactions are read.
- Trading and bridging: LI.FI, the Uniswap Trade API and Jupiter receive the agent wallet address and the trade or bridge being quoted.
- Market data: DexScreener, GeckoTerminal and CoinGecko receive token addresses, not your wallet.
- xAI: when a basket is built from X accounts, the X handles chosen are sent to xAI's search.
- Anthropic: when you ask the AI to suggest a basket, the description you typed is sent to Anthropic's API.
- WalletConnect, if you connect a wallet through it: your connection and wallet address.
We do not sell personal data. [international transfer basis, per counsel]
How long we keep it
Agent, basket, referral and payout records are kept while Edge operates, because they are the record of money moved. Logs roll over as described above. [retention periods, per counsel]
Your choices and rights
You can disconnect your wallet, clear your browser storage, and exit and stop using your agents at any time. Depending on where you live you may have rights to access, correct or delete personal data and to complain to a regulator. Data that is on a public blockchain, and records we must keep, cannot be deleted. [rights and regulator details for the applicable jurisdictions]
Changes
We will update this notice when what we collect changes, and change the date above.