Privacy Policy

This Privacy Policy describes how Shipyard Labs, the commercial name of 3-102-964327 S.R.L., a sociedad de responsabilidad limitada organized under the laws of the Republic of Costa Rica (the “Operator”, “we,” “us,” or “our”) collects, uses, shares, and protects information when you access or use the Hot Take platform, including the website, app, API, and X/Telegram bot integrations (the “Service”). It is incorporated into our Terms of Service. By using the Service, you acknowledge that we process information as described in this Privacy Policy.

1. Information We Collect

Account & Authentication

• Privy (or other authentication provider) user identifiers
• Email address (if provided)
• Connected X/X, Telegram, or Google identifiers and handles
• Profile display name and avatar (if applicable)

Wallet & On-Chain Activity

• Wallet addresses associated with your account
• Public blockchain transaction records relevant to the Service
• Platform balance, deposit, and withdrawal records

Service Activity

• Markets you create, accept, fund, or resolve
• Stakes, outcomes, settlement records, resolver assignments
• Bot interactions, including draft submissions and replies
• Communications you send to us, including support requests

Technical & Device

• IP address and approximate location derived from IP
• Device type, operating system, browser, language, timezone
• Cookies and similar technologies, where used
• Session and login activity

Compliance & Eligibility

• Attestations you provide (such as age, jurisdiction, and Terms acceptance), where collected
• Sanctions and wallet-risk screening results, where applicable
• Additional information or verification materials, only if requested for eligibility, sanctions, fraud-prevention, security, compliance, or withdrawal review

2. How We Use Information

• Operate, secure, and improve the Service, including processing deposits, withdrawals, market funding, resolution, and settlement
• Authenticate users and manage accounts
• Enforce eligibility and conduct compliance, sanctions, fraud-prevention, and wallet-risk screening
• Comply with legal obligations and respond to legal process where required or permitted by law
• Communicate with you (service notices, changes to terms)
• Display public-facing information consistent with operating the Service

3. Legal Bases

Where applicable law requires a legal basis, we process information based on: (a) performance of our contract with you; (b) compliance with legal obligations; (c) our legitimate interests, including fraud prevention, security, market integrity, compliance, and Service operation; (d) your consent, where required; and (e) protection of rights, property or safety.

4. How We Share Information

We may share information with: identity providers; hosting and infrastructure providers; security and network providers; sanctions, fraud-prevention, and wallet-risk screening providers; analytics providers; on-chain settlement providers; legal, compliance, and professional advisors; regulators, law enforcement, and government authorities (where required or permitted by law); third-party resolvers and dispute providers; and counterparties to your markets where necessary to operate the Service.

In connection with a merger, acquisition, reorganization, or sale of assets, your information may be transferred. We may share aggregated or de-identified data. We do not sell your personal information for advertising purposes.

5. Public Information and Blockchain Transparency

Some information is visible to other users or the public, including username or handle, linked X/Telegram username (if connected), markets you create or accept, market terms, status, stake amounts, resolver, outcome, and settlement information.

Wallet addresses, transaction details, and bet records may be recorded on public blockchains and accessible to anyone. We cannot remove information from public blockchains. Do not submit information you do not want made public.

6. AI and Automated Processing

We may use AI, machine learning, or automated classification to parse user-submitted text into market drafts, detect prohibited or controlled categories, identify risk, or improve product functionality. AI outputs may be inaccurate. You are responsible for reviewing market terms before accepting or funding. We may reject or flag markets based on automated review.

7. Cookies and Data Retention

We use cookies, local storage, and similar technologies for authentication, security, fraud detection, attestation flows, analytics, and operational purposes. You may configure your browser to limit cookies, but doing so may affect Service functionality.

We retain personal information for as long as necessary to provide the Service, comply with legal, tax, sanctions, or regulatory obligations, resolve disputes, enforce agreements, or maintain integrity of records. Retention periods vary by category and may extend beyond account termination. On-chain records are not subject to deletion.

8. International Transfers, Children, and Security

We may process and store information in jurisdictions other than your jurisdiction of residence, which may have different data protection laws. Where required, we use appropriate transfer mechanisms or safeguards under applicable law.

The Service is not intended for individuals under 18 (or the age of majority in your jurisdiction, if higher). We do not knowingly collect information from minors. If we learn we have collected such information, we will take steps to delete it.

We implement reasonable technical and organizational measures to protect personal information. No method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for securing your account, devices, wallets, and credentials.

9. Your Rights

Subject to applicable law and our legal and operational requirements, you may have rights to access, correct, delete, restrict processing of, object to processing of, or request a portable copy of your information, and to withdraw consent where processing is based on consent. These rights may be limited by legal retention requirements, security or compliance needs, the immutability of public blockchain records, or our legitimate interests. To exercise these rights, contact notices@shipyardlab.xyz. We may verify your identity before responding.

10. Changes and Contact

We may update this Privacy Policy from time to time. Material changes will be communicated through the Service. Continued use after such changes means you acknowledge the updated Privacy Policy.

For questions, contact notices@shipyardlab.xyz.