Privacy Policy

Last updated: 2026-04-28

Whale ("we", "us", "our") operates w-bot.app, an automated trading platform for Polymarket. This Privacy Policy explains how we collect, use, and protect your information.

Information we collect

Account information

Email address (required for registration) Password (stored as bcrypt hash, never in plaintext) Display name (optional) Timezone, language preferences (optional)

Trading data

Bot configurations you create Trade history (yours and from public Polymarket data) Wallet addresses you choose to connect

Wallet keys (only if you choose real-money trading)

Private keys are encrypted with AES-256-GCM using your password as derivation source. Encrypted keys are stored in our database. We never have direct access to unencrypted keys. Keys are decrypted only in-memory during your active trading session (4-hour window).

Technical data

IP address (for security and rate limiting) Browser type and version Pages visited and actions taken (anonymized analytics)

How we use your information

  • ·To provide the trading bot service you requested
  • ·To process subscription payments via NOWPayments
  • ·To send transactional emails (verification, alerts, receipts)
  • ·To improve our service and identify issues
  • ·To comply with legal obligations

What we DON'T do

  • ·We don't sell your data to third parties
  • ·We don't share your private keys with anyone, including authorities (we don't have access)
  • ·We don't use your data for advertising
  • ·We don't track you across other websites

Third-party services we use

  • ·NOWPayments (payment processing)
  • ·Resend (transactional emails)
  • ·Anthropic (AI assistant — anonymized prompts only)
  • ·Polymarket (public market data only — we never share your identity with them)
  • ·Hetzner Cloud (server hosting in EU)

Your rights (GDPR/CCPA)

You have the right to access your data (download via /profile), delete your account and all associated data, export your data, object to processing, and data portability. To exercise rights, email support@w-bot.app

Data retention

  • ·Account data: until you delete your account
  • ·Trade history: 2 years for tax/audit purposes
  • ·Logs: 30 days

Cookies

We use essential cookies only (session, preferences). See Cookie Policy for details.

Children

Our service is not intended for users under 18 years of age.

Changes to this policy

We'll notify you via email of significant changes. Continued use after changes constitutes acceptance.

Questions? support@w-bot.app