Privacy Policy

This Privacy Policy explains how gzinvesting ("the Platform", "we") collects, uses, and protects your personal information.

⚠️ Draft notice: this is a placeholder document pending review by qualified legal counsel. Final Privacy Policy will replace this version before public launch.

• Account data: email address, display name, password hash, account status, fee rate.
• Financial data: deposit transactions, withdrawal requests, bet allocations, balance ledger entries — all linked to your account.
• Wallet data: on-chain deposit addresses derived for your account, transaction hashes, USDC amounts.
• Session data: login timestamps, IP addresses, user-agent strings (for fraud prevention and audit).
• Activity data: bets placed, settled, and associated outcomes for accounting purposes.

• To operate your account and process deposits, bets, and withdrawals.
• To send transactional emails (verification, withdrawals, settlements).
• To detect and prevent fraud, abuse, or unauthorized access.
• To comply with applicable legal obligations.

We do not sell your data. Limited sharing occurs only with:

• Service providers: hosting infrastructure, email delivery, blockchain RPC providers — each bound by data-protection agreements.
• On-chain transactions: deposit and withdrawal addresses and amounts are public on the Polygon blockchain by nature.
• Legal compliance: we may disclose data when required by court order, subpoena, or applicable law.

Financial records (deposits, bets, withdrawals, balance changes) are retained for the lifetime of your account and for at least 10 years after closure for accounting and compliance purposes.

Session and login data is retained for up to 12 months.

You may request deletion of your account; certain financial records will be retained as required by law.

We use HTTP-only secure cookies for session authentication (refresh and access tokens). These cookies are essential for the Platform to function and are not used for advertising or tracking.

We employ industry-standard security measures including TLS encryption in transit, encrypted password storage, restricted database access, and infrastructure firewalls. However, no system is perfectly secure. You are responsible for keeping your account credentials confidential.

Subject to applicable law, you have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate data.
• Request deletion (subject to legal retention requirements).
• Export your data in a portable format.
• Object to certain processing.

Contact admin@carryingtheworld.com to exercise these rights.

By using the Platform, you consent to processing and storage of your data in countries outside your jurisdiction where applicable data-protection laws may differ from those of your home country.

The Platform is not directed to anyone under 18 years old. We do not knowingly collect personal information from minors.

We may update this Policy. Material changes will be communicated to verified email addresses with at least 14 days' notice before taking effect.

Privacy questions: admin@carryingtheworld.com