This Policy explains how Up or Down, ul. Bolesława Limanowskiego 11/55, 02-943 Warszawa, Poland, handles personal data when you use upordown.pl and UpDown Terminal.
1. Data we process
- Account identifiers such as Firebase user ID, email address, and login-provider information.
- Subscription status, expiry, checkout requests, payment addresses, and public blockchain transaction data.
- Technical and security data such as IP address, browser information, logs, timestamps, and error events.
- Support communications and setup information you choose to provide.
2. Private keys
The Chrome trading panel is designed so that a user enters their Polymarket private key locally in the extension. That trading key must not be transmitted to or stored by our website or support team. Separately, our payment system generates a payment-receiving address for each account. Its corresponding key is encrypted at rest and used only for payment administration.
3. Why we process data
We process data to provide accounts and paid access, detect and reconcile payments, secure and operate the Service, assist users, meet legal duties, prevent abuse, and improve reliability. Depending on the context, the legal basis may be performance of our contract, legitimate interests, legal obligation, or consent.
4. Providers and recipients
We use service providers including Firebase authentication, hosting and VPS infrastructure, blockchain networks, RPC providers, and operational tooling. Public blockchain transactions are inherently visible to anyone. We disclose data where legally required or necessary to protect rights and security.
5. Retention
Account, subscription, and payment records may be retained while the account exists and afterward where needed for security, accounting, disputes, and legal compliance. Encrypted payment wallet keys and blockchain audit records may be retained long-term. Operational logs are retained only as reasonably necessary.
6. Security
We use access controls, encrypted transport, authenticated encryption for payment wallet keys, and service separation. No internet service can guarantee absolute security. You are responsible for protecting your account, device, browser extension, and trading keys.
7. Your rights
Subject to applicable law, you may request access, correction, deletion, restriction, portability, or objection, and may complain to a competent data-protection authority. Some payment and security records cannot be deleted immediately where retention is legally or operationally required.
8. Contact
Privacy requests may be sent to support@upordown.pl. We may need to verify your identity before acting on a request.