Effective date: May 20, 2026 This Privacy Policy explains how CRISP and its affiliates, if any, (“CRISP,” “we,” “us,” or “our”) collect, use, disclose, store, and otherwise process personal data when you access or use our websites, web applications, Telegram bot, APIs, analytics tools, execution-support tools, customer support channels, and related products and services (collectively, the “Services”). CRISP provides an intelligence and execution layer for prediction markets. Our Services may help users discover markets, analyze liquidity and order books, track public wallets, view trader profiles, receive alerts, evaluate market opportunities, and interact with third-party prediction-market infrastructure.Documentation Index
Fetch the complete documentation index at: https://docs.crisp.trade/llms.txt
Use this file to discover all available pages before exploring further.
CRISP is designed to operate on a non-custodial basis. We do not collect or store your private keys or seed phrases, and we do not custody your digital assets.
1. Who We Are
The controller or business responsible for your personal data is: CRISP Email: privacy@crisp.bot Support: support@crisp.bot2. Personal Data We Collect
The personal data we collect depends on how you use the Services. We may collect the following categories of personal data:| Category | Examples | Source |
|---|---|---|
| Account and authentication data | Telegram username, Telegram user ID, display name, profile information, account identifiers, login/session identifiers, authentication records | You, Telegram, authentication providers |
| Contact and communications data | Email address, Telegram handle, support messages, feedback, attachments, survey responses, community or support communications | You |
| Wallet and blockchain-related data | Wallet addresses, transaction hashes, smart-contract interactions, public blockchain activity, connected wallet metadata, wallet labels, execution-related records | You, public blockchains, wallet providers, RPC providers, market venues |
| Market, trading, and execution-related data | Markets viewed, alerts configured, orders or trades routed through supported third-party venues, execution metadata, copy-trading or automation preferences where available, portfolio or position-related data visible to CRISP | You, third-party venues, public blockchains, infrastructure providers |
| Product usage and analytics data | Pages viewed, features used, clicks, sessions, referral sources, performance metrics, feature interactions, error events, diagnostic data | Automatically through the Services |
| Device, browser, and log data | IP address, approximate location derived from IP address, browser type, device type, operating system, access times, server logs, security logs, crash logs, fraud and abuse signals | Automatically through the Services |
| Subscription, billing, and payment-related data | Billing email, subscription plan, payment status, invoice records, transaction identifiers, payment provider references. Payment card or banking details are generally processed by third-party payment providers and not stored by CRISP. | You, payment processors, subscription providers |
| API and integration data | API keys issued by CRISP, integration settings, request logs, rate-limit events, webhook configuration, usage metadata | You, automatically through the Services |
| Publicly available data | Public wallet activity, public market activity, public trader profiles, public leaderboard data, public social or protocol information relevant to CRISP analytics | Public sources, blockchains, market venues, third-party data providers |
| Compliance, safety, and anti-abuse data | Risk signals, sanctions or fraud-screening signals, restricted jurisdiction checks, abuse reports, investigation records, records needed to enforce our terms | You, service providers, public sources, internal systems |
3. How We Collect Personal Data
We collect personal data in the following ways:- Directly from you, such as when you create or connect an account, interact with the Telegram bot, contact support, configure alerts, use execution-support features, or subscribe to paid Services.
- Automatically through the Services, such as through logs, cookies, local storage, analytics tools, security tools, and product telemetry.
- From public sources, such as public blockchain networks, public smart contracts, public market venues, public wallet activity, and publicly available market or trader information.
- From third parties, such as wallet infrastructure providers, authentication providers, hosting providers, analytics providers, payment processors, communication tools, compliance tools, RPC providers, and market infrastructure partners.
4. How We Use Personal Data
We may use personal data for the following purposes:| Purpose | Examples |
|---|---|
| Provide and operate the Services | Authenticate users, maintain sessions, display dashboards, provide market discovery, wallet tracking, trader analytics, alerts, APIs, and execution-support workflows |
| Facilitate user-requested actions | Connect wallets, route supported transactions or orders, support execution workflows, process subscription activity, and provide requested product functions |
| Improve and develop the Services | Debug errors, measure reliability, analyze feature usage, improve user experience, develop new analytics, and enhance product performance |
| Provide support and communicate with you | Respond to support requests, send service notices, security alerts, legal notices, account updates, and administrative messages |
| Security, fraud prevention, and abuse detection | Detect malicious activity, unauthorized access, spam, fraud, market abuse, sanctions risks, restricted jurisdiction access, security incidents, and technical issues |
| Analytics and market intelligence | Create aggregated, de-identified, or anonymized reports; analyze public blockchain and market activity; generate wallet labels, trader profiles, rankings, signals, and market insights |
| Legal and compliance | Comply with applicable laws, regulations, court orders, lawful requests, sanctions obligations, tax or accounting obligations, and regulatory requirements |
| Enforce rights and policies | Enforce our Terms of Service and other policies, investigate violations, protect users, protect CRISP, and defend legal claims |
| Marketing and product updates | Send product updates, launch announcements, educational content, or marketing communications where permitted by law and subject to any required consent or opt-out rights |
5. Legal Bases for Processing
Where applicable law requires a legal basis for processing, such as in the European Economic Area, the United Kingdom, or similar jurisdictions, we rely on one or more of the following legal bases:| Legal basis | When we rely on it |
|---|---|
| Performance of a contract | To provide the Services you request, authenticate you, operate your account, provide support, process subscriptions, and perform user-requested actions |
| Legitimate interests | To operate, secure, improve, and promote the Services; prevent fraud and abuse; analyze product performance; maintain business records; enforce our terms; and protect our rights, users, and systems, where those interests are not overridden by your rights and freedoms |
| Consent | Where we ask for your consent, such as for certain non-essential cookies, optional analytics, marketing communications, or other activities that require consent under applicable law |
| Legal obligation | To comply with applicable laws, regulations, lawful requests, court orders, sanctions obligations, tax, accounting, or regulatory requirements |
| Vital interests or public interest | In limited cases where processing is necessary to protect someone’s vital interests or to perform a task carried out in the public interest, where recognized by applicable law |
6. Blockchain Transparency and Public Data
Blockchain networks, prediction-market venues, and certain decentralized protocols are public or semi-public by design. This means wallet addresses, transaction hashes, smart-contract interactions, market positions, order activity, and other on-chain or market-related records may be visible to anyone and may remain accessible indefinitely. CRISP may process public blockchain and public market data to provide analytics, trader profiles, wallet tracking, rankings, alerts, market insights, execution-support tools, and other product features. Public blockchain records are generally not controlled by CRISP and may not be capable of being deleted, modified, or fully dissociated from a wallet address once published.CRISP does not custody your assets and does not control third-party wallets, blockchains, smart contracts, protocols, or prediction-market venues. Your use of any third-party wallet, venue, protocol, or blockchain is subject to its own terms, privacy policy, risks, and technical rules.
7. Trader Profiles, Wallet Labels, Signals, and Automated Analysis
The Services may generate or display analytics derived from public blockchain data, public market data, user activity, and third-party data. This may include trader profiles, wallet labels, rankings, alerts, opportunity signals, risk indicators, behavioral summaries, performance metrics, and similar analytics. These analytics are intended to provide product functionality and informational insights. They should not be treated as financial, legal, tax, investment, or professional advice. Unless we clearly state otherwise, CRISP does not use automated analysis to make legally binding decisions about you or decisions that produce similarly significant legal effects. If applicable law gives you rights relating to automated decision-making or profiling, you may contact us using the details in this Privacy Policy.8. How We Share Personal Data
We may disclose personal data to the following categories of recipients:- Service providers and processors, such as hosting providers, cloud infrastructure providers, database providers, analytics providers, wallet or authentication infrastructure providers, support tools, payment processors, communications providers, security vendors, compliance vendors, and professional service providers.
- Wallet, blockchain, market, and execution infrastructure providers, where sharing is necessary to provide, route, support, or troubleshoot user-requested actions or product features.
- Payment and subscription providers, where needed to process subscriptions, payments, billing, invoicing, refunds, fraud checks, and related records.
- Professional advisers, such as lawyers, auditors, accountants, insurers, consultants, and compliance advisers.
- Authorities, regulators, law enforcement, courts, or counterparties, where required by law, legal process, sanctions obligations, court order, regulatory request, or where necessary to protect rights, safety, property, users, CRISP, or system integrity.
- Corporate transaction parties, such as counterparties and advisers involved in a merger, acquisition, financing, restructuring, sale of assets, bankruptcy, or similar transaction, subject to appropriate safeguards where required.
- Other users or the public, where information is part of public product features, public wallet analytics, trader profiles, leaderboards, or public blockchain and market data.
- Other parties with your direction or consent.
9. Cookies, Local Storage, and Similar Technologies
If you use a CRISP website or web application, we may use cookies, local storage, pixels, SDKs, tags, and similar technologies for the following purposes:- Strictly necessary technologies, such as authentication, session management, security, load balancing, fraud prevention, and core product functionality.
- Preferences, such as remembering your settings, display preferences, or user choices.
- Performance and analytics, such as understanding usage, improving reliability, identifying errors, and measuring product performance.
- Marketing or communications, where enabled and permitted by law, such as measuring campaign performance or sending relevant product updates.
10. International Data Transfers
We may process and store personal data in countries other than the country where you live, including countries that may have data protection laws different from those in your jurisdiction. Where required by applicable law, we use appropriate safeguards for international transfers, such as standard contractual clauses, data processing agreements, equivalent contractual protections, adequacy decisions, or other lawful transfer mechanisms recognized by applicable law.11. Data Retention
We retain personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. Our retention periods depend on the type of data, the purpose of processing, the nature of the Services, legal requirements, security needs, and whether retention is necessary to resolve disputes or enforce agreements.| Data category | Typical retention approach |
|---|---|
| Account and authentication data | Retained while your account is active and for a reasonable period after account closure where needed for security, support, legal, or business purposes |
| Support and communications data | Retained for as long as needed to respond to your request, maintain support records, resolve disputes, and improve support quality |
| Wallet, blockchain, and transaction-related data controlled by CRISP | Retained as needed to provide the Services, maintain operational records, support audits, investigate abuse, comply with law, or resolve disputes |
| Public blockchain and public market data | May remain publicly accessible indefinitely and may be outside CRISP’s control |
| Security, fraud, and log data | Retained for a reasonable period needed for security monitoring, fraud prevention, incident investigation, and legal compliance |
| Billing and payment-related records | Retained as needed for accounting, tax, compliance, fraud prevention, chargeback handling, and legal requirements |
| Analytics and product usage data | Retained for product improvement, reporting, and analytics, and may be aggregated, de-identified, or anonymized where appropriate |
12. Security
We use administrative, technical, and organizational measures designed to protect personal data against unauthorized access, disclosure, loss, misuse, alteration, or destruction. These measures may include access controls, encryption in transit, environment separation, logging and monitoring, vendor due diligence, least-privilege access, incident response processes, and internal security controls.13. Your Rights and Choices
Depending on your location and applicable law, you may have the right to:- Access or obtain a copy of personal data we hold about you.
- Correct inaccurate or incomplete personal data.
- Request deletion of personal data we control.
- Object to or restrict certain processing.
- Withdraw consent where processing is based on consent.
- Request portability of certain personal data.
- Opt out of marketing communications.
- Opt out of certain sales, sharing, targeted advertising, or profiling where applicable.
- Lodge a complaint with a data protection authority, regulator, or privacy authority where applicable.