Privacy Policy

1. Introduction

PolyGoat (“we”, “us”, “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform at polygoat.io.

2. Information We Collect

Information you provide:

• Email address (used for account creation and login)
• Display name (optional, used to personalize your experience)
• Payment information (processed securely by Stripe — we never store card details)
• Market screenshots you upload for AI analysis

Information collected automatically:

• Usage analytics (pages visited, features used) via PostHog
• Session recordings (inputs masked except non-sensitive fields)
• IP address and browser/device information
• Cookies and local storage for authentication state

3. How We Use Your Information

• To authenticate you and maintain your account
• To process subscription payments via Stripe
• To provide AI analysis on uploaded market screenshots
• To send transactional emails (login codes, billing receipts)
• To improve our product through anonymized usage analytics
• To detect and prevent fraud or abuse

4. Sharing Your Information

We do not sell your personal information. We share data only with:

• Stripe — payment processing
• Resend — transactional email delivery
• PostHog — product analytics (data is pseudonymized)
• OpenAI — AI analysis of uploaded market images (no PII included in prompts)
• Neon / PostgreSQL — secure cloud database hosting

We may also disclose information if required by law or to protect the rights, property, or safety of PolyGoat or its users.

5. Data Retention

We retain your account data for as long as your account is active. Uploaded market screenshots used for AI analysis are stored temporarily and not used to train AI models. OTP login codes expire within 10 minutes.

You may request deletion of your account and associated data at any time by contacting us at support@polygoat.io.

6. Cookies and Local Storage

We use browser local storage to maintain your authentication session. We use analytics cookies via PostHog to understand how users interact with our platform. You may opt out of analytics tracking by using an ad blocker or adjusting your browser settings, though this may affect functionality.

7. Security

We implement industry-standard security measures including HTTPS encryption, hashed authentication tokens, and secure database connections. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

8. Your Rights

Depending on your location, you may have rights to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data
• Object to or restrict processing of your data
• Data portability

To exercise any of these rights, contact us at support@polygoat.io.

9. Children's Privacy

PolyGoat is not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal information, we will delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or via a notice on our platform. Your continued use of the Service after the changes take effect constitutes your acceptance of the revised policy.

11. Contact Us

If you have questions or concerns about this Privacy Policy, please contact us at support@polygoat.io.