Privacy Policy

1. Overview

This Privacy Policy explains what information Rebeti collects, why, and how it is protected. By using the Service you consent to the practices described here.

2. Information We Collect

Account data: your email address and authentication identifiers, used to sign you in and secure your account.

Configuration data: the strategies, parameters, risk limits, and preferences you create.

Venue credentials: if you enable live trading, the API keys or wallet credentials you provide for a venue (such as Polymarket or Kalshi). These are stored encrypted and are never logged or displayed after entry.

Trading activity: orders, positions, fills, balances, and run logs generated by your strategies, needed to operate and display the Service.

Technical data: standard operational logs (timestamps, errors, request metadata) used for reliability and debugging.

3. How We Use Information

We use your information solely to operate the Service: authenticating you, executing and recording your configured strategies, enforcing your risk limits, displaying your dashboard, and diagnosing errors.

We do not sell your personal information. We do not use your venue credentials for any purpose other than placing and managing the orders your strategies direct.

4. Credential Security

Live-trading credentials are encrypted at rest before storage. Decryption happens only transiently, server-side, at the moment an order or account request is made on your behalf.

No system can guarantee absolute security; you acknowledge and accept the residual risk of storing credentials with any online service. You can disconnect a venue at any time, which deletes the stored credential.

5. Third-Party Services

The Service interacts with third-party prediction-market venues and infrastructure providers to fetch market data and execute orders. Your use of those venues is governed by their own terms and privacy policies, which we do not control.

6. Data Retention and Deletion

We retain your data for as long as your account is active or as needed to operate the Service. Historical trade and run records may be retained for integrity, auditing, and backtesting continuity.

You may request deletion of your account and associated personal data at any time; venue credentials are deleted immediately upon disconnection.

7. Your Responsibilities

You are responsible for the accuracy of the information you provide and for maintaining the security of your own devices and venue accounts. Do not share your account access with others.

8. Changes

We may update this Policy from time to time. Continued use of the Service after a change constitutes acceptance. Material changes will be reflected by an updated date above.