Privacy Policy

Last Updated: April 2026

1. Introduction

PolyArbitrage ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our Chrome extension and related services.

2. Information We Collect

We collect minimal information necessary to provide our service:

2.1 Information You Provide

  • Email Address: When you purchase a Pro subscription, we collect your email address to deliver your access token and provide customer support.
  • Payment Information: Card data is collected and processed entirely by Stripe on Stripe-hosted checkout pages. We never see, handle, or store your credit card details.
  • Subscription Record: After a successful purchase we store a record of your transaction in our Cloudflare D1 database, containing: your email, the Pro access token we issued you, your plan type (Monthly / Annual / Lifetime), the Stripe subscription or payment intent ID, and your subscription expiration date. This is used to validate your Pro status and provide customer support.

2.2 Information Collected Automatically

  • Token Verification: When the extension verifies your Pro status, it sends your access token over HTTPS to our verification endpoint (arbitrage.winner3.workers.dev). The token is stored both locally in your browser (chrome.storage.local) and on our server alongside the subscription record described above.
  • Local Settings: Your scan thresholds, filter preferences, and matched-event cache are stored locally in your browser only. They are never transmitted to our servers.

3. How We Use Your Information

We use the collected information for:

  • Processing and managing your premium subscription
  • Delivering your premium access token
  • Providing customer support
  • Improving our service and developing new features
  • Communicating important updates about the service

4. Data Processed by the Extension

The PolyArbitrage extension is a real-time arbitrage scanner that compares prediction-market odds between Polymarket and Kalshi. The following data is processed:

  • Public market data fetched directly from the Polymarket Gamma API and the Kalshi public API (event titles, market questions, bid/ask prices, volume)
  • The Polymarket event slug from the URL of the page you are currently viewing on polymarket.com — used only to look up the corresponding event via the public Polymarket API
  • Computed price spreads and bankroll allocations — calculated locally in your browser
  • Extension settings, matched-event cache, and Pro status — stored locally in your browser

This market and browsing data:

  • Is processed entirely within your browser
  • Is stored locally on your device using Chrome's storage API
  • Is never transmitted to our servers — we do not collect your browsing history, the URLs you visit, or the contents of any web page
  • The only data sent to our servers is the Pro access token during verification, as described in Section 2

5. Data Storage and Security

We implement appropriate security measures to protect your information:

  • Extension Data: All market data, settings, and the matched-event cache are stored locally in your browser. We never access this data.
  • Pro Tokens & Subscription Records: Your email, Pro access token, plan type, Stripe subscription or payment intent ID, and expiration date are stored in our Cloudflare D1 database, hosted on Cloudflare's infrastructure. All communication between the extension and our verification endpoint uses HTTPS.
  • Payment Data: All credit card processing is handled by Stripe, which maintains PCI DSS Level 1 compliance. Card numbers never touch our servers.

6. Third-Party Services

We use the following third-party services:

7. Data Sharing

We do not sell, trade, or rent your personal information to third parties. We may share information only:

  • With service providers necessary to operate the service (e.g., Stripe for payments)
  • To comply with legal obligations or valid legal requests
  • To protect our rights, privacy, safety, or property

8. Your Rights

You have the right to:

  • Access: Request a copy of the personal information we hold about you
  • Correction: Request correction of inaccurate personal information
  • Deletion: Request deletion of your personal information
  • Data Portability: Receive your data in a structured, commonly used format

To exercise these rights, contact us at support@aikc.net.

9. Cookies and Tracking

The PolyArbitrage extension does not use cookies for tracking. Our payment pages may use essential cookies for security and session management.

10. Children's Privacy

Our service is not intended for users under 13 years of age. We do not knowingly collect personal information from children under 13.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the "Last Updated" date.

12. Contact Us

If you have questions about this Privacy Policy, please contact us:

Email: support@aikc.net