docs/privacy
Trust

Privacy Policy

Last updated: August 18, 2026

1. What we collect

When you use Hexio, we may collect:

  • Account data — email address and name from Google OAuth
  • Wallet data — public addresses and encrypted private keys (for custodial/imported wallets)
  • Trading data — orders, positions, and trade history
  • Session data — JWT tokens, session identifiers
  • Technical data — IP address, browser type, device info
  • Usage analytics — pages viewed, features used and actions taken (for example placing an order), with timestamps
  • Analytics identifiers — a random anonymous ID and a session ID, stored in your browser's local storage. These are not linked to your name or email unless you are signed in
  • Referral data — the site or campaign that sent you (referrer URL and any UTM parameters)
  • Approximate country — inferred from your browser's time zone, not from GPS

2. What we don't collect

  • Linked wallet private keys (never leave your browser)
  • Payment information (all transactions are on-chain)
  • Tracking cookies for advertising
  • Biometric data

3. How we use your data

  • Execute and manage your trades
  • Secure your account and detect abuse
  • Display your positions, history, and balances
  • Enforce rate limits and detect abuse
  • Understand which features are used, so we can improve the Platform
  • Measure which channels bring people to Hexio

4. Encryption

Private keys are encrypted with AES-256-GCM before storage. Database connections use TLS. All traffic is served over HTTPS with HSTS enforced.

5. Data sharing

We do not sell your data. We may share data with:

  • Polymarket — order and trade data required for execution
  • Polygon network — on-chain transaction data (public by nature)
  • Google — authentication via OAuth (limited to sign-in)
  • Law enforcement — only when required by valid legal process

Usage analytics are not shared with anyone. They are stored on our own infrastructure and are not sent to any third-party analytics provider.

6. Data retention

Account and trade data is retained while your account is active. You may request deletion at any time. Blockchain transactions are permanent and cannot be deleted.

7. Your rights

  • Access your data at any time through the Platform
  • Export your wallet keys
  • Request account deletion
  • Revoke Google OAuth access through your Google account settings

8. Cookies & local storage

We use essential cookies for authentication and session management. We also store an anonymous ID and a session ID in your browser's local storage to power our own product analytics — this tells us that someone used a feature, and lets us tell one visit from another.

No advertising cookies, no third-party tracking, no data sold or shared with ad networks. The analytics are first-party: the events go to our own database and nowhere else. Clearing your browser storage resets these identifiers.

9. Children

Hexio is not intended for anyone under 18. We do not knowingly collect data from minors.

10. Changes

We may update this policy. Material changes will be posted on the Platform. Continued use after changes constitutes acceptance.

11. Contact

Privacy questions? Reach out via the contact methods listed on the Platform.