Privacy Policy

This policy describes how Xerpex collects and uses information when you use xerpex.pages.dev and related services.

1. Information we collect

• Account: email and password hash when you register.
• Usage: trades on demo balance, subscription status, connection state (Kalshi/Polymarket linked or not).
• Connections: encrypted Kalshi read API credentials and Polymarket wallet addresses stored if you connect. Kalshi write keys and Polymarket CLOB secrets from Magic login stay in your browser unless you paste them manually.
• Payments: processed by Lemon Squeezy; we receive order webhooks (email, product, amount)—not your full card number.
• Waitlist: email if you join the waitlist.
• Technical: standard server logs (IP, user agent, timestamps) via Cloudflare.

2. How we use data

To operate the Service, authenticate you, sync subscriptions, display portfolio data from connected venues, prevent abuse, and improve reliability.

3. Third parties

We use Cloudflare (hosting), Lemon Squeezy (payments), and you may authenticate via Magic Link (email wallet). Connected trading data comes from Kalshi and Polymarket APIs subject to their policies.

4. Retention & security

Secrets at rest are encrypted on our servers. You may disconnect integrations or delete your account by contacting us. We retain data as needed for legal and operational purposes.

5. Your rights

Depending on your location you may request access, correction, or deletion of personal data. Contact support@xerpex.com.

6. Cookies

We use session cookies for login. Lemon Squeezy and affiliate tracking may set cookies during checkout or referral flows.

7. Children

The Service is not directed at anyone under 18.

8. Changes

We may update this policy. The “Last updated” date will change when we do.