Introduction

EventTrader ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our prediction markets platform, including our website at cymetica.com, mobile applications, APIs, and related services (collectively, the "Service").

By accessing or using our Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use our Service.

Information We Collect

Information You Provide

• Account Information: When you create an account, we collect your username, email address, and password. You may optionally provide additional profile information.
• Wallet Information: Cryptocurrency wallet addresses you connect to our platform for trading purposes.
• Communications: Messages you send through our support channels, Telegram bot, Discord bot, or email correspondence.
• Feature Requests: Suggestions, feedback, and feature requests you submit through our platform.
• KYC Information: If required for compliance, identity verification documents and related personal information.
• Financial Suitability Data (Composer): If you use the Composer feature, the risk-questionnaire answers you provide (investment time horizon, loss capacity, loss tolerance, investing knowledge, liquidity needs), the resulting risk score, and your detected country. Used to tailor a draft, informational basket recommendation and to maintain a suitability record. Legal basis: performance of a contract under GDPR Article 6(1)(b). Not sold or shared with third parties for profiling; retained for the suitability record-keeping period (5 years); deletable on request subject to that floor.
• AI Assistant & Agent Data: If you use the NEXUS assistant or our support bots, the messages and prompts you submit and the responses returned. If you connect an automated agent through our API, SDK, or MCP interfaces, the API activity of that agent (orders, queries, tool calls) attributed to your account. See "AI Systems & Automated Processing" below for how this data is used and retained.

Information Collected Automatically

• Device Information: Browser type, operating system, device identifiers, and IP address.
• Usage Data: Pages visited, features used, trading activity, time spent on pages, and interaction patterns.
• Log Data: Server logs including access times, error reports, and referring URLs.
• Location Data: General geographic location based on IP address.

Information from Third Parties

• Blockchain Data: Publicly available transaction data from supported blockchain networks.
• Social Login: If you connect via social media accounts, basic profile information as permitted by your privacy settings.
• Analytics Partners: Aggregated usage statistics from our analytics providers.

How We Use Your Information

We use the information we collect for the following purposes:

• Service Delivery: To provide, maintain, and improve our prediction markets platform.
• Account Management: To create and manage your account, process transactions, and verify your identity.
• Communication: To send service updates, security alerts, and respond to your inquiries.
• Personalization: To customize your experience, including market recommendations and notifications.
• Analytics: To understand usage patterns and improve our platform's performance and features.
• Security: To detect, prevent, and address fraud, abuse, and security issues.
• Legal Compliance: To comply with applicable laws, regulations, and legal processes.
• Marketing: With your consent, to send promotional communications about new features and opportunities.

AI Systems & Automated Processing

The platform includes AI components. This section explains what data each processes, why, and for how long.

• NEXUS assistant & support bots: process the messages you send them, together with the minimum account context needed to answer (e.g., your username and, where you ask an account-specific question, the relevant balances or orders). Conversations are used to answer your query, maintain support quality, and diagnose errors. They are not sold, and are not used to build advertising profiles. Retention: 24 months, after which they are deleted or anonymized.
• Composer: processes the suitability data described above solely to generate a draft, informational basket recommendation. Composer output creates no positions and is not tradeable through the Service. Retention: 5 years (suitability record-keeping).
• AI news curation: processes public news content, not personal data, to propose event markets; listings require human administrative approval.
• AI-managed vaults (e.g., CyMetica-42): manage the vault's own portfolio and process no personal data beyond the shareholder records needed to administer your vault shares.
• User-deployed agents: when you connect your own agent via API, SDK, or MCP, we log its activity (authentication, orders, API calls) exactly as we log manual account activity, for security, audit, and regulatory record-keeping. Retention follows the trading-records schedule below.

Information Sharing

We do not sell your personal information. We may share your information in the following circumstances:

• Service Providers: With trusted third parties who assist in operating our platform (hosting, analytics, customer support).
• Legal Requirements: When required by law, regulation, legal process, or governmental request.
• Safety & Security: To protect the rights, property, and safety of EventTrader, our users, and the public.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred.
• With Your Consent: When you explicitly agree to share information with third parties.

Blockchain & Public Data

When you interact with our smart contracts or make on-chain transactions:

• Your wallet address and transaction history are publicly visible on the blockchain.
• This data cannot be deleted or modified due to the immutable nature of blockchain technology.
• We cannot control or restrict access to publicly available blockchain data.
• Your trading positions and market interactions may be visible to other users through blockchain explorers.

We recommend using separate wallet addresses if you wish to maintain privacy for certain transactions.

Cookies & Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience:

• Essential Cookies: Required for the platform to function, including authentication and security.
• Analytics Cookies: Help us understand how users interact with our platform to improve performance.
• Preference Cookies: Remember your settings and preferences for a personalized experience.
• Marketing Cookies: Used with your consent to deliver relevant advertisements.

You can manage cookie preferences through your browser settings. Note that disabling certain cookies may affect platform functionality.

Data Security

We implement industry-standard security measures to protect your information:

• Encryption of data in transit (TLS/SSL) and at rest
• Secure password hashing algorithms
• Regular security audits and penetration testing
• Access controls and authentication requirements for staff
• Monitoring systems for suspicious activity
• Regular backups with secure storage

While we strive to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

Data Retention

We retain personal information only as long as necessary for the purpose it was collected, then delete or anonymize it. Our standard retention schedule, aligned with industry practice and financial record-keeping requirements:

• Account & profile data: for the life of your account; deleted or anonymized within 90 days of account deletion, except where a longer period below applies.
• Identity verification (KYC) & anti-money-laundering records: 5 years after account closure or the relevant transaction, consistent with FATF recommendations and applicable AML law (e.g., EU AMLD, U.S. BSA).
• Transaction, order & trading records (including activity of user-deployed agents): 5 years, for financial record-keeping, dispute resolution, and regulatory audit.
• Financial Suitability Data (Composer): 5 years as a suitability record (consistent with MiFID II Article 25 record-keeping); deletion requests honored subject to this floor.
• AI assistant & support conversations (NEXUS, support bots, email/Telegram/Discord support): 24 months, then deleted or anonymized.
• Server, security & access logs: 12 months, unless preserved longer for an active security investigation or legal hold.
• Marketing preferences: until you withdraw consent; suppression entries are kept so we honor your opt-out.
• On-chain data: blockchain transactions are public and immutable and cannot be deleted by us (see "Blockchain & Public Data").

Where a legal hold, active dispute, or regulatory obligation requires longer retention, we retain the minimum data necessary for its duration and then delete it.

Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request correction of inaccurate or incomplete information.
• Deletion: Request deletion of your personal information, subject to legal requirements.
• Portability: Request a copy of your data in a portable format.
• Objection: Object to certain processing of your personal information.
• Restriction: Request restriction of processing in certain circumstances.
• Withdraw Consent: Withdraw consent for processing based on consent at any time.

To exercise these rights, please contact us at privacy@cymetica.com. We will respond to your request within 30 days.

Children's Privacy

Our Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately. If we discover that a child under 18 has provided us with personal information, we will delete such information from our systems.

International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. When we transfer your information internationally, we take steps to ensure appropriate safeguards are in place, including:

• Standard contractual clauses approved by relevant authorities
• Data processing agreements with service providers
• Compliance with applicable data transfer regulations

Third-Party Services

Our platform may contain links to or integrate with third-party services. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party services you access through our platform, including:

• Blockchain networks and explorers
• Wallet providers
• Payment processors
• Social media platforms
• Analytics services

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of material changes by:

• Posting the updated policy on our website with a new "Last Updated" date
• Sending an email notification for significant changes
• Displaying a prominent notice on our platform

Your continued use of the Service after any changes indicates your acceptance of the updated Privacy Policy.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: privacy@cymetica.com
• Contact Form: cymetica.com/contact

We will respond to all inquiries within 30 days.