Privacy Policy

DRAFT — pending legal review before Gate B real-money launch.

1. Introduction

This Privacy Policy describes how Granbay ("we", "us") collects, uses, and shares information about you when you use our services. We comply with applicable data-protection laws in the jurisdictions where we operate.

2. Information We Collect

We collect the following categories of information:

• Account information — email address, username, display name, avatar.
• Identity verification — date of birth and country of residence (Tier 1 KYC). Government-issued ID and selfie when you initiate fiat withdrawal (Tier 2 KYC).
• Trading activity — every order, fill, position, and resolution outcome.
• Device and usage data — IP address, browser type, operating system, pages visited, referral URL.
• Optional content — profile bio, posts, comments, tips, copy-trader subscriptions.

3. How We Use Information

We use your information to:

• Operate the prediction-market platform (route orders, settle trades, fan out resolution events to your positions).
• Verify your identity to the extent required by applicable financial-services regulation in your jurisdiction.
• Detect and prevent fraud, abuse, and market manipulation.
• Improve the product, debug issues, and tune performance.
• Send transactional emails (email verification, password reset, withdrawal confirmation, market resolution).

4. Information Sharing

We do not sell your personal information. We share information only in these cases:

• Service providers — payment processors, identity-verification vendors, cloud-infrastructure providers, transactional-email providers. Each is bound by a data-processing agreement.
• Legal compliance — when required by valid legal process in a jurisdiction where we operate.
• Safety — to prevent imminent harm to users or to the platform itself.

5. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate information.
• Request deletion of your account and associated personal information (subject to financial-records retention laws — see Section 7).
• Withdraw consent for optional processing.

The /settings/account page exposes self-service data export and account-deletion flows. For other rights requests, contact privacy@granbay.com.

6. Data Retention

• Active account data — retained for the life of the account.
• Trading records and audit events — retained for the period required by applicable financial-services regulation (typically 5–7 years post-account closure).
• Marketing communications opt-outs — retained indefinitely so we honour your preference.

7. Account Deletion

You may request account deletion at any time via /settings/account. Deletion executes after a 30-day grace period during which you may cancel. After execution, identifying fields are anonymized; trading records are retained per Section 6 for accounting and regulatory compliance.

8. International Transfers

Granbay's infrastructure runs on cloud providers with regional presence. Your data may be processed in jurisdictions outside your country of residence. Where required, we rely on standard contractual clauses or equivalent mechanisms.

9. Children

The service is not directed at users under 18. We do not knowingly collect information from minors.

10. Changes to This Policy

We post material changes to this page and notify active users via email. Continued use after the effective date of a change constitutes acceptance.

11. Contact

privacy@granbay.com