Politique de confidentialité

1. Introduction

Predite (“we”, “us”, “our”) operates the prediction market intelligence platform at predite.io. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our services.

2. Information We Collect

Account information: Name, email address, password (managed by Clerk), profile photo, timezone, and language preference.

Financial information: Subscription plan, payment history, and Stripe customer ID. We do not store credit card numbers — all payment processing is handled by Stripe (PCI-DSS Level 1 certified).

Platform connections: Public wallet addresses (e.g., Polygon addresses for Polymarket) for read-only portfolio display. If you opt in to automated live trading, we also store the credentials needed to sign orders on your behalf — for Polymarket, your wallet's private key and CLOB API secrets; for Kalshi, your API key id and RSA private key. These are encrypted at rest (AES-256-GCM), are used only to sign orders you configured, and can be removed at any time by disconnecting the platform. Automated trading is optional: the product works read-only without it.

Usage data: Pages visited, features used, scan frequency, signals viewed, bot configurations, paper trading activity.

Device and technical data: IP address (hashed after 30 days), browser type, operating system, referring URL, and access timestamps.

Campaign attribution: If you arrive through an ad or a tracked link, we keep that link's campaign parameters (utm_*, gclid, fbclid) and the date in a first-party cookie for 30 days, and save them with your account when you sign up, so we know which campaign brought you.

3. How We Use Your Information

We use your information to provide and maintain our platform, process payments and manage subscriptions, deliver signals and alerts via your preferred channels, improve our AI probability models, prevent fraud and abuse, comply with legal obligations, and communicate product updates and security notices.

4. Data Sharing

We do not sell your personal information. We share data only with trusted service providers who help us operate our platform:

Clerk: Authentication and user management. Stripe: Payment processing. Supabase: Database hosting. Vercel: Application hosting and analytics. Upstash: Rate limiting and caching. OpenRouter and Anthropic: AI models that process market data and the messages you send to the AI assistant. Resend, Twilio and Telegram: Delivery of emails, verification codes and the alerts you turn on.

Only with your consent — Meta and Google: If you accept Analytics cookies, Google Analytics 4 measures how the site is used. If you accept Marketing cookies, the Meta Pixel and Google ad measurement record whether our ads brought you; and if you then subscribe, our server sends Meta the purchase value, the currency and a SHA-256 hash of your email (Meta Conversions API) so the sale can be credited to the ad. Without that consent, none of this is loaded or sent. See section 8.

We may also disclose information if required by law, to protect our rights, or in connection with a merger or acquisition.

5. Data Security

We implement industry-standard security measures including TLS 1.3 encryption for all data in transit, AES-256-GCM encryption for sensitive data at rest, row-level security (RLS) in our database, regular security audits following OWASP Top 10 guidelines, rate limiting on all API endpoints, and comprehensive audit trails for all user actions.

6. Data Retention

We retain your data for as long as your account exists. Deleting your account erases it immediately — the only exception is the audit trail, which is unlinked from you at once and kept under a pseudonym for 30 days for fraud prevention, after which its IP address, device and details are erased too (the bare event record is deleted after 1 year). Financial records are retained for 7 years as required by law. IP addresses are hashed after 30 days. You can request deletion at any time in Settings, or by contacting privacy@predite.io.

7. Your Rights

You have the right to access your personal data, correct inaccurate data, delete your account and data, export your data in machine-readable format, object to certain processing activities, and withdraw consent for optional processing. Exercise these rights via your dashboard Settings or by contacting privacy@predite.io.

8. Cookies

Essential cookies keep you signed in and remember your language. Analytics (Google Analytics 4) and Marketing (Meta Pixel, Google ad measurement) cookies are optional and load only after you accept them in the cookie banner; you can withdraw that choice at any time. Tracking tags are not loaded in the dashboard. See our Cookie Policy for the full list.

9. International Transfers

Your data may be processed in the United States and European Union. All transfers are protected by Standard Contractual Clauses (SCCs). See our GDPR Compliance page for details.

10. Children's Privacy

Predite is not intended for users under 18 years of age. We do not knowingly collect personal information from children.

11. Changes to This Policy

We will notify you of material changes at least 30 days in advance via email. Continued use after notification constitutes acceptance.

12. Contact

For privacy inquiries, contact us at privacy@predite.io. For GDPR-specific requests, contact our Data Protection Officer at dpo@predite.io.