Privacy Policy

The short version

• We never hold your funds. Your USDC stays in your own wallet on Base; a revocable trading key places trades on your behalf and cannot withdraw.
• We collect what we need to run the Service: your wallet address, the email or social account you sign in with, your copy settings, and your trading activity on Veranta.
• We use your email to run your account and to tell you about changes to the Service, such as new ways to add funds. You can opt out of non-essential emails at any time.
• We do not sell your personal information.
• Payments by card, Apple Pay or Google Pay are processed by Fun.xyz, which performs its own identity checks. We never see your card number.

1. What we collect

Information you give us

• Sign-in identity. When you sign in through our authentication provider (Privy) we receive the email address, or the Google, Apple or X account identifier, that you chose to sign in with, plus the wallet address Privy created or connected for you.
• Wallet address. Your public Base wallet address. Blockchain addresses and the transactions they make are public by nature.
• Copy settings. Which traders you copy, how much you allocate per trade, your sizing choices, and when you pause or stop.
• Trading key. To place trades for you we generate a delegated trading key that you authorise on-chain. The key is stored encrypted on our servers, can only open and close positions on Veranta, cannot move funds out of your wallet, and can be revoked by you at any time.
• Messages. Anything you send us by email or social media.

Information we collect automatically

• Trading activity. The positions opened and closed in your wallet on Veranta, their size, leverage and realised profit or loss, and your USDC balance and approval. We read this from the public blockchain and from Veranta’s public data.
• Product usage. Which pages you view and which buttons you press (for example opening the copy dialog, starting a deposit), tied to a random identifier stored in your browser and, once signed in, to your wallet address. We use this to see where people get stuck.
• Device and connection data. IP address, browser type, and approximate region. For creator links (verantacopy.com/yourcreator) we store a one-way hash of your IP address and browser so that reloads are not counted twice; the raw IP is not kept.
• Analytics. If enabled, Google Analytics with IP anonymisation turned on.

Information we receive from others

• Payments. When you add funds by card, Apple Pay or Google Pay, the payment is handled by Fun.xyz. We receive confirmation that a payment was started or completed and the amount of USDC delivered to your wallet. Fun.xyz collects your payment details and, where required by law, identity information; that is governed by their privacy policy. We never receive your card number.
• Referrals. If you arrive through a creator’s link we record which creator referred you.

2. How we use it

• To provide the Service: mirror the traders you copy, show your positions and results, and let you manage your account.
• To keep the Service safe: detect abuse, protect trading keys, and enforce our limits.
• To communicate with you about your account: confirmations, security notices, failed trades, and changes to how the Service works.
• To tell you about new features of the Service, such as new ways to add funds or new tools for copying. You can opt out of these messages at any time (see Your choices below); account and security notices are not affected.
• To understand how the Service is used, in aggregate, so we can improve it.
• To show creators how many people joined through their link, in aggregate only. Creators never see who you are.
• To comply with the law and respond to lawful requests.

Where data protection law requires a legal basis, we rely on: performing our agreement with you (running the Service); our legitimate interests (security, improving the Service, and telling existing users about changes to it); your consent where we ask for it; and our legal obligations.

3. Who we share it with

We share personal information only as described here. We do not sell it and have not sold it.

• Service providers who work for us and are bound to protect your data: Privy (sign-in and embedded wallets), Fun.xyz (payments), our hosting and infrastructure providers, blockchain node providers, data warehouses for public Veranta trade data, and email delivery providers.
• The public blockchain. Trades placed from your wallet are recorded on Base and are public. Your wallet address and its activity can be seen by anyone, including on our trader pages if your wallet qualifies for the leaderboard.
• Legal and safety. If we believe in good faith that disclosure is required by law, or necessary to protect the rights, property or safety of the Service, our users, or others.
• Business transfers. If the Service is acquired or merged, your information may be transferred as part of that transaction; this policy will continue to apply to it.
• Aggregated data that does not identify you, such as the number of users or the volume traded through the Service.

4. Your choices

• Emails. Every message about new features includes an unsubscribe link, and you can email [email protected] at any time to opt out. We will stop within 10 business days. Account and security notices continue for as long as you have an account.
• Trading key. You can revoke our trading key at any time from my copies or directly on-chain. Once revoked we cannot place trades for you.
• Copies. You can pause or stop copying a trader at any time. Positions already open stay yours to close.
• Access, correction, deletion. You can ask us for a copy of the personal information we hold about you, to correct it, or to delete it. We will delete everything we are not legally required to keep. Information on the public blockchain cannot be deleted by us.
• Analytics. You can block analytics scripts with standard browser tools. We do not respond to Do Not Track signals.

If you are in the European Economic Area, the United Kingdom, Brazil, or a jurisdiction with similar rights, you may also object to or restrict certain processing, ask for your data in a portable format, withdraw consent you have given, and complain to your local data protection authority. To exercise any right, email [email protected]; we may ask you to prove control of the wallet or email in question.

5. How long we keep it

We keep your account information for as long as you have an account and for a reasonable period afterwards to resolve disputes and meet legal obligations. Trading records are kept so that you can see your own history. Product-usage events are kept for up to 24 months. When you ask us to delete your data, we delete everything not required by law, and we revoke any trading key we hold.

6. Security

Trading keys are encrypted at rest and can only be used by our trading engine; they cannot withdraw funds by design. Access to our servers is restricted and logged. No system is perfectly secure, so we cannot guarantee the security of information you send us, and you should protect your own sign-in credentials and wallet.

7. International transfers

The Service is operated from the United States and our providers may process data in other countries. Where required, we use appropriate safeguards for such transfers. By using the Service you understand that your information may be processed outside your country.

8. Children

The Service is not for anyone under 18. We do not knowingly collect information from children. If you believe a child has created an account, contact us at [email protected] and we will delete it.

9. Third-party sites

We link to Basescan, Veranta, Fun.xyz, Privy and others. Their privacy practices are their own; please read their policies.

10. Changes

We will post any changes here and update the date at the top. If a change materially affects how we use your personal information, we will notify you by email or a notice in the Service before it takes effect.

11. Contact

Questions or requests: [email protected].