Privacy Policy

This Privacy Policy explains how Nomos (“Nomos,” “we,” “us,” or “our”) collects, uses, shares, and protects information when you access or use https://nomos.trade and any related tools, applications, APIs, and services (collectively, the “Services”).

By using the Services, you agree to the practices described in this Privacy Policy. If you do not agree, you must not use the Services. This Privacy Policy is incorporated into and forms part of our Terms of Service.

1. Scope

This Privacy Policy applies to information we collect through the Services and through our communications with you. It does not apply to information collected by third-party services we integrate with, including External Platforms such as Polymarket, wallet and authentication providers such as Privy, on-ramp providers, blockchain networks, or any third-party site you reach by clicking a link on the Services. Those services have their own privacy policies, which we encourage you to review.

2. Information We Collect

We collect the following categories of information.

2.1 Information You Provide

• Account information. When you create an account, we collect identifiers associated with your authentication method, such as your email address, social login identifier (for example, Google or Twitter handle), or wallet address.
• Profile information. Display name, profile picture, watchlists, saved markets, custom dashboards, alerts, and preferences you configure.
• Communications. Messages you send to us, including support requests, feedback, survey responses, beta access requests, and waitlist sign-ups.
• Marketing and outreach. If you respond to outreach campaigns or sign up for newsletters, we collect your contact details and engagement signals (opens, clicks).

2.2 Information We Collect Automatically

• Device and connection information. IP address, approximate geolocation derived from IP, device type, operating system, browser type and version, language preferences, referring URLs, and timestamps.
• Usage information. Pages and features you access, actions you take, queries you run, markets you view, AI prompts you submit to features such as Nomi, session duration, and error reports.
• Cookies and similar technologies. See Section 7 below.

2.3 Information from Third Parties

• Authentication and wallet providers. When you sign in or connect a wallet through a third-party provider (currently Privy), we receive the identifiers and metadata that provider exposes to us, such as your wallet address, linked accounts, and authentication status. We do not receive your private keys, seed phrases, or passwords.
• External Platforms. When you connect or route activity to an External Platform, we may receive data about your activity on that platform, such as orders, positions, balances, and trade history, to the extent permitted by that platform's API and terms.
• Blockchain data. We collect and analyze publicly available on-chain data associated with wallet addresses you connect to the Services. Blockchain data is public by nature.
• Analytics, infrastructure, and fraud-prevention providers. We receive aggregated and per-user data from analytics, performance monitoring, error logging, and abuse-prevention tools we use to operate the Services.
• Public sources. We may collect publicly available information, including social media posts, news articles, geopolitical event data, and similar sources, to power features such as event tracking and market discovery. This data is not tied to you unless you explicitly link your accounts.

2.4 Sensitive Information

We do not intentionally collect government-issued identification, financial account numbers, biometric data, or other sensitive personal information through the Services. If KYC is required for use of an External Platform or on-ramp, the relevant third-party provider collects and processes that information directly, not Nomos.

3. How We Use Information

We use the information described above to:

• provide, operate, secure, and improve the Services;
• authenticate users and protect accounts;
• route data and orders to External Platforms and other Third-Party Services at your direction;
• generate analytics, signals, dashboards, and AI-assisted outputs;
• personalize content, recommendations, and notifications;
• detect, investigate, and prevent fraud, abuse, market manipulation, security incidents, sanctions evasion, and violations of our Terms of Service;
• enforce our Terms of Service and other legal rights;
• communicate with you about the Services, including support, product updates, security alerts, and (where you have opted in or where permitted by law) marketing;
• conduct research, including A/B testing, model training, and product development;
• comply with applicable law, regulation, court order, sanctions screening obligations, and legal process;
• aggregate or de-identify information for any purpose; and
• otherwise carry out the purposes described to you at the point of collection.

3.1 AI Features

The Services may include AI-assisted features (including features marketed under the name “Nomi”). When you interact with these features, the prompts you submit and the context they require to function (such as the markets and data you are viewing) may be processed by third-party model providers and may be used to generate responses. We may also use prompts and outputs in aggregated or de-identified form to evaluate and improve the Services. AI outputs are generated automatically, may be inaccurate, and are not financial, legal, tax, or investment advice.

4. Legal Bases for Processing (EEA, UK, Switzerland)

If you are located in the European Economic Area, the United Kingdom, or Switzerland, we process your personal data on the following legal bases:

• Contract. To provide the Services you have requested.
• Legitimate interests. To secure and improve the Services, prevent fraud and abuse, market our Services, and operate our business, where those interests are not overridden by your rights and freedoms.
• Legal obligation. To comply with applicable law, including sanctions, anti-money laundering, and tax obligations.
• Consent. Where required, including for certain cookies and marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.

5. How We Share Information

We share information with:

• Service providers. Vendors who help us operate the Services (including hosting, infrastructure, analytics, error monitoring, customer support, email delivery, fraud prevention, and security). These providers are bound by contractual obligations to protect the information and use it only for the purposes we direct.
• Third-Party Services you connect. When you connect a wallet, an on-ramp, an External Platform, or another integration, we share the information necessary to enable that connection.
• Other users. Information you choose to make public (such as a display name or shared dashboard) is visible to other users.
• Compliance and law enforcement. We may disclose information when we believe in good faith that disclosure is required by law, legal process, or governmental request, or to protect the rights, property, or safety of Nomos, our users, or others.
• Sanctions and regulatory screening providers. To verify that users are not Restricted Persons or located in Restricted Jurisdictions.
• Corporate transactions. In connection with a merger, acquisition, financing, reorganization, sale of assets, or insolvency, your information may be transferred to the counterparty or successor entity. We will notify users of any such transfer where required by law.
• Affiliates. With our affiliates and subsidiaries, for the purposes described in this Privacy Policy.
• With your consent. With any other party where you have given us your consent.

We do not sell personal information for money. We do not share personal information for cross-context behavioral advertising in the manner contemplated by U.S. state privacy laws such as the CCPA/CPRA.

6. International Data Transfers

We operate internationally and may transfer your information to, store it in, and process it in countries other than the one in which you reside, including jurisdictions whose data protection laws differ from yours. Where required, we rely on appropriate safeguards such as standard contractual clauses or equivalent mechanisms.

7. Cookies and Similar Technologies

We use cookies, local storage, pixels, and similar technologies to operate the Services, remember your preferences, authenticate sessions, measure usage, prevent abuse, and improve performance.

Categories of cookies we may use:

• Strictly necessary. Required for the Services to function (for example, session and authentication cookies).
• Functional. Remember your preferences and personalize the Services.
• Analytics. Help us understand how the Services are used so we can improve them.
• Security. Help us detect and prevent abuse.

You can control cookies through your browser settings. Blocking strictly necessary cookies may break parts of the Services. Where required by law, we will request your consent before placing non-essential cookies.

8. Data Retention

We retain personal information for as long as necessary to provide the Services, comply with our legal obligations, resolve disputes, enforce our agreements, and for the other purposes described in this Privacy Policy. Retention periods vary by data type and context. When we no longer need information, we delete or de-identify it.

Information stored on public blockchains is outside our control and cannot be deleted by us.

9. Data Security

We implement administrative, technical, and physical safeguards designed to protect personal information from unauthorized access, disclosure, alteration, and destruction. No system is perfectly secure, and we cannot guarantee absolute security. You are responsible for protecting your account credentials, devices, and wallet keys.

If we become aware of a security incident affecting your personal information, we will notify you and the relevant authorities as required by applicable law.

10. Your Rights

Depending on where you live, you may have the following rights with respect to your personal information:

• Access. Request a copy of the personal information we hold about you.
• Correction. Request that we correct inaccurate or incomplete information.
• Deletion. Request that we delete your personal information, subject to legal exceptions.
• Restriction or objection. Request that we restrict or stop processing your personal information in certain circumstances.
• Portability. Request a copy of certain information in a portable format.
• Withdraw consent. Where processing is based on consent, withdraw consent at any time.
• Non-discrimination. Not be discriminated against for exercising your rights.
• Lodge a complaint. File a complaint with your local data protection authority.

To exercise any of these rights, reach us through our contact form at nomos.trade/contact. We may need to verify your identity before responding. Some information may be retained as required or permitted by law (for example, for sanctions compliance, fraud prevention, tax, or accounting purposes).

10.1 California Residents

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), including the rights described above. We do not sell or share personal information for cross-context behavioral advertising as those terms are defined under California law.

10.2 Other U.S. State Residents

Residents of other U.S. states with comprehensive privacy laws (such as Virginia, Colorado, Connecticut, Utah, Texas, Oregon, and others) may have similar rights. Contact us to exercise them.

11. Children's Privacy

The Services are not directed to, and we do not knowingly collect personal information from, individuals under the age of 18 (or the age of majority in their jurisdiction, whichever is greater). If you believe a child has provided us with personal information, contact us and we will take steps to delete it.

12. Third-Party Links

The Services contain links to third-party websites, products, and services. We are not responsible for the privacy practices of those third parties. Review their privacy policies before providing any information.

13. Do Not Track

Our Services do not currently respond to “Do Not Track” signals because no industry standard for processing them has been finalized.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The “Last Modified” date at the top reflects the most recent update. Material changes will be communicated through the Services or by other reasonable means. Your continued use of the Services after the effective date constitutes your acceptance of the updated Privacy Policy.

15. Contact

For questions, requests, or complaints about this Privacy Policy or our privacy practices, reach us through our contact form at nomos.trade/contact.