docs/privacy
Trust

Privacy Policy

Last updated: March 14, 2026

1. What we collect

When you use Hexio, we may collect:

  • Account data — email address and name from Google OAuth
  • Wallet data — public addresses and encrypted private keys (for custodial/imported wallets)
  • Trading data — orders, positions, and trade history
  • Session data — JWT tokens, session identifiers
  • Technical data — IP address, browser type, device info for rate limiting and security

2. What we don't collect

  • Linked wallet private keys (never leave your browser)
  • Payment information (all transactions are on-chain)
  • Tracking cookies for advertising
  • Biometric data

3. How we use your data

  • Execute and manage your trades
  • Secure your account and detect abuse
  • Display your positions, history, and balances
  • Enforce rate limits
  • Improve the Platform

4. Encryption

Private keys are encrypted with AES-256-GCM before storage. Database connections use TLS. All traffic is served over HTTPS with HSTS enforced.

5. Data sharing

We do not sell your data. We may share data with:

  • Polymarket — order and trade data required for execution
  • Polygon network — on-chain transaction data (public by nature)
  • Google — authentication via OAuth (limited to sign-in)
  • Law enforcement — only when required by valid legal process

6. Data retention

Account and trade data is retained while your account is active. You may request deletion at any time. Blockchain transactions are permanent and cannot be deleted.

7. Your rights

  • Access your data at any time through the Platform
  • Export your wallet keys
  • Request account deletion
  • Revoke Google OAuth access through your Google account settings

8. Cookies

We use essential cookies for authentication and session management only. No analytics cookies. No advertising cookies. No third-party tracking.

9. Children

Hexio is not intended for anyone under 18. We do not knowingly collect data from minors.

10. Changes

We may update this policy. Material changes will be posted on the Platform. Continued use after changes constitutes acceptance.

11. Contact

Privacy questions? Reach out via the contact methods listed on the Platform.