Privacy policy

What we collect

Account and profile. You can sign in with email and password, Google, or Apple. Depending on the method you choose, we receive an email address, name, account identifier, and profile picture. Apple may provide a private relay address when you hide your email. We store the display name, searchable handle, profile photo, and the time you acknowledge that you are at least 18. We never receive your Google or Apple password. Supabase handles Asta passwords and does not store them in plaintext.

Wallet and financial activity. Privy creates a non-custodial wallet for your account. We and our providers process its public wallet, deposit, and withdrawal addresses; balances; orders; positions; stakes; deposits; withdrawals; and transaction identifiers. We do not receive a card number or bank-account number, and we never hold or see your private keys.

Social activity and user content. We store the people you follow, who follows you, trade theses or other text you submit, and optional notes you include when reporting a mismatched clip and market. Some profile and social information is visible to other Asta users.

Photos. If you set a profile picture, the image you choose is resized and uploaded to our storage. Asta does not upload other photos or videos from your library.

Search and product activity. We process searches for people and record interactions such as impressions, video watch time, completions, skips, market and trade-ticket opens, order attempts and failures, trades, sales, redemptions, shares, and follows. These records can include the clip or market involved, list position, session identifier, duration, and trade-session measurements.

Approximate location and device information. We and our hosting or wallet providers process IP-derived country or region, IP address, app and operating-system details, device type or identifiers, and standard request logs. We use approximate location to determine whether trading is available where you are; we do not request precise GPS location.

Communications. We store records of transactional emails sent about your account and support requests you send us.

How we use information

• Provide the app: authenticate accounts, maintain profiles and social features, show people you follow, create and secure wallets, display balances and positions, execute and record trades, and provide support.
• Personalize and improve the feed using follows, viewed clips, watch and skip activity, and trading interactions.
• Measure product use, diagnose reliability or security problems, prevent fraud and abuse, and understand which features and takes are useful.
• Apply geographic trading restrictions and meet legal obligations.
• Send transactional communications you request or that are necessary to operate your account.

Advertising and tracking

We don't sell personal information, run third-party ads, share personal information with data brokers, or use your name, email, identifiers, financial activity, location, content, searches, or app activity for cross-app advertising or advertising measurement.

Who processes data for us

Asta runs on a small set of service providers, each seeing only what their job requires:

• Apple and Google, when you choose one of them for sign-in.
• Supabase, for authentication, database, and file storage.
• Privy, for creating and securing your embedded wallet.
• Polymarket and its wallet, exchange, blockchain, and bridge infrastructure, for market data, order execution, deposits, withdrawals, settlement, and redemption.
• Vercel, for hosting, network delivery, request logs, security, and IP-derived approximate location.
• Resend, for transactional account emails.

These providers may process information in countries other than yours. We may also disclose information when required by law, to protect users or the service, or as part of a business transfer subject to appropriate protections.

Public blockchain data

Wallet addresses and blockchain transactions are public by design. They can be viewed, copied, and retained by anyone and cannot be changed or deleted by Asta, Privy, Polymarket, or any other party.

Retention, choices, and deletion

We retain account information while your account is active and keep other records only as long as needed for the purposes above, security, dispute resolution, and legal obligations. Service providers may keep records under their own retention requirements.

You can edit your name, handle, and profile picture and change who you follow from the app. You can permanently delete your account from Profile → Settings → Delete account, or contact us for help.

Account deletion removes the account data we control. Product events may remain only after their user identifier is removed so aggregate clip statistics remain accurate. Records that must be retained for security or legal reasons may be kept for the required period. Public blockchain transactions cannot be deleted.

Security

We use access controls, encrypted connections, restricted database permissions, and service providers designed to protect account and wallet data. No system is completely secure, so we cannot guarantee that information will never be accessed, disclosed, altered, or lost.

Age requirement

Asta is for adults who are legally permitted to use prediction markets. It is not directed to children, and we do not knowingly collect personal information from children.

Changes

If this policy changes in a way that matters, we'll note it here with a new effective date.

Contact

Questions or deletion requests: victor@useasta.app.