Privacy Policy

We collect what we need to run the product, verify who we pay, and meet our legal obligations — and nothing we sell. The controller is [Legal Entity Name], [Registered Address]. Privacy questions go to privacy@fundedpoly.com.

• Account: your email address (via Google sign-in) and a FundedPoly profile.
• Identity verification (KYC): when you verify for a payout — your legal name, date of birth, phone number, residential address, country, and images of a government-issued ID plus a selfie.
• Trading & account activity: the challenges you buy, your simulated orders, fills, positions, settlements, and balances.
• Payout details: the destination wallet address, network, and token you choose.
• Technical: IP-derived country (for geo-restriction), device/browser information, and security logs.
• Marketing attribution: UTM parameters and referrer if you arrive from a campaign.

• To provide the evaluation, funded accounts, and payouts you ask for (contract).
• To verify your identity, screen sanctions, and prevent fraud and money laundering (legal obligation and our legitimate interest in a safe platform).
• To secure the service and enforce our Terms (legitimate interest).
• To measure which channels reach forecasters (legitimate interest).

We don’t sell or rent your data, and we don’t share it with advertisers.

Data is stored in a Postgres database hosted by Supabase in the EU (Frankfurt). Identity documents and selfies are kept in a private storage bucket that is never publicly accessible; only authorized staff can view them, through short-lived signed links, for the purpose of verification. We use TLS in transit and at-rest encryption provided by our hosts.

Service providers that operate the platform — our hosting and database (Supabase), application hosting (Vercel), sign-in (Google), and our payment processor for challenge purchases and payouts. We disclose data to authorities where we are legally required to. We never sell it.

We keep account and trading data while your account is active and for as long as needed for the purposes above. Identity-verification records are retained for as long as required by anti-money-laundering law (typically several years after our relationship ends), even if you close your account. Audit records of trades, settlements, and payouts are retained for accounting and dispute purposes.

You can request access, correction, deletion, or a copy of your data, and you can object to certain processing. Some data — notably KYC records — we must retain to meet legal obligations even after a deletion request. If you’re in the EU or UK you have rights under GDPR / UK-GDPR and may complain to your local data-protection authority. Email privacy@fundedpoly.com to exercise any of these.

Where a provider processes data outside your region, we rely on appropriate safeguards (such as EU Standard Contractual Clauses) to protect it.

We use only the cookies needed to keep you signed in and to keep the service secure. Public marketing pages don’t set tracking cookies.

FundedPoly is for adults (18+). We don’t knowingly collect data from minors.

We’ll update this policy as the product evolves; the date above changes when we do. Privacy questions: privacy@fundedpoly.com. General contact: support@fundedpoly.com.