// LEGAL

Privacy Policy

Last Modified: July 22, 2026

This Privacy Policy explains how Nomos Technologies, Inc. ("Nomos," "we," "us," or "our") collects, uses, shares, and protects information when you access or use https://nomos.trade and any related tools, applications, APIs, and services (collectively, the "Services").

By using the Services, you agree to the practices described in this Privacy Policy. If you do not agree, you must not use the Services. This Privacy Policy is incorporated into and forms part of our Terms of Service.

1. Scope

This Privacy Policy applies to information we collect through the Services and through our communications with you. It does not apply to information collected by third-party services we integrate with, including External Platforms such as Polymarket, wallet and authentication providers such as Privy, on-ramp providers, blockchain networks, or any third-party site you reach by clicking a link on the Services. Those services have their own privacy policies, which we encourage you to review.

2. Information We Collect

We collect the following categories of information.

2.1 Information You Provide

  • Account information. When you create an account, we collect identifiers associated with your authentication method, such as your email address, social login identifier (for example, Google or Twitter handle), or wallet address.
  • Profile information. Display name, profile picture, watchlists, saved markets, custom dashboards, alerts, and preferences you configure.
  • Communications. Messages you send to us, including support requests, feedback, survey responses, beta access requests, and waitlist sign-ups.
  • Marketing and outreach. If you respond to outreach campaigns or sign up for newsletters, we collect your contact details and engagement signals (opens, clicks).

2.2 Information We Collect Automatically

  • Device and connection information. IP address, approximate geolocation derived from IP, device type, operating system, browser type and version, language preferences, referring URLs, and timestamps.
  • Usage information. Pages and features you access, actions you take, queries you run, markets you view, AI prompts you submit to features such as Nomi, session duration, and error reports.
  • Cookies and similar technologies. See Section 7 below.

2.3 Information from Third Parties

  • Authentication and wallet providers. When you sign in or connect a wallet through a third-party provider (currently Privy), we receive the identifiers and metadata that provider exposes to us, such as your wallet address, linked accounts, and authentication status. We do not receive your private keys, seed phrases, or passwords.
  • External Platforms. When you connect or route activity to an External Platform, we may receive data about your activity on that platform, such as orders, positions, balances, and trade history, to the extent permitted by that platform's API and terms.
  • Blockchain data. We collect and analyze publicly available on-chain data associated with wallet addresses you connect to the Services. Blockchain data is public by nature.
  • Analytics, infrastructure, and fraud-prevention providers. We receive aggregated and per-user data from analytics, performance monitoring, error logging, and abuse-prevention tools we use to operate the Services.
  • Public sources. We may collect publicly available information, including social media posts, news articles, geopolitical event data, and similar sources, to power features such as event tracking and market discovery. This data is not tied to you unless you explicitly link your accounts.

2.4 Sensitive Information

We do not intentionally collect government-issued identification, financial account numbers, biometric data, or other sensitive personal information through the Services. If KYC is required for use of an External Platform or on-ramp, the relevant third-party provider collects and processes that information directly, not Nomos.

3. How We Use Information

We use the information described above to:

  • provide, operate, secure, and improve the Services;
  • authenticate users and protect accounts;
  • route data and orders to External Platforms and other Third-Party Services at your direction;
  • generate analytics, signals, dashboards, and AI-assisted outputs;
  • personalize content, recommendations, and notifications;
  • detect, investigate, and prevent fraud, abuse, market manipulation, security incidents, sanctions evasion, and violations of our Terms of Service;
  • enforce our Terms of Service and other legal rights;
  • communicate with you about the Services, including support, product updates, security alerts, and (where you have opted in or where permitted by law) marketing;
  • conduct research, including A/B testing and product development; where we use information to train, fine-tune, or evaluate models, we use information in aggregated or de-identified form;
  • comply with applicable law, regulation, court order, sanctions screening obligations, and legal process;
  • aggregate or de-identify information for any purpose; and
  • otherwise carry out the purposes described to you at the point of collection.

3.1 AI Features

The Services may include AI-assisted features (including features marketed under the name "Nomi"). When you interact with these features, the prompts you submit and the context they require to function (such as the markets and data you are viewing) may be processed by third-party model providers and may be used to generate responses. We may also use prompts and outputs in aggregated or de-identified form to evaluate and improve the Services. AI outputs are generated automatically, may be inaccurate, and are not financial, legal, tax, or investment advice.

4. Legal Bases for Processing (EEA, UK, Switzerland)

If you are located in the European Economic Area, the United Kingdom, or Switzerland, we process your personal data on the following legal bases:

  • Contract. To provide the Services you have requested.
  • Legitimate interests. To secure and improve the Services, prevent fraud and abuse, market our Services, and operate our business, where those interests are not overridden by your rights and freedoms.
  • Legal obligation. To comply with applicable law, including sanctions, anti-money laundering, and tax obligations.
  • Consent. Where required, including for certain cookies and marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.

5. How We Share Information

We share information with:

  • Service providers. Vendors who help us operate the Services (including hosting, infrastructure, analytics, error monitoring, customer support, email delivery, fraud prevention, and security). These providers are bound by contractual obligations to protect the information and use it only for the purposes we direct.
  • Third-Party Services you connect. When you connect a wallet, an on-ramp, an External Platform, or another integration, we share the information necessary to enable that connection.
  • Other users. Information you choose to make public (such as a display name or shared dashboard) is visible to other users.
  • Compliance and law enforcement. We may disclose information when we believe in good faith that disclosure is required by law, legal process, or governmental request, or to protect the rights, property, or safety of Nomos, our users, or others.
  • Sanctions and regulatory screening providers. To verify that users are not Restricted Persons or located in Restricted Jurisdictions.
  • Corporate transactions. In connection with a merger, acquisition, financing, reorganization, sale of assets, or insolvency, your information may be transferred to the counterparty or successor entity. We will notify users of any such transfer where required by law.
  • Affiliates. With our affiliates and subsidiaries, for the purposes described in this Privacy Policy.
  • With your consent. With any other party where you have given us your consent.

We do not sell personal information, and we do not share personal information for cross-context behavioral advertising, as those terms are defined under applicable U.S. state privacy laws, including the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA). If our practices change, we will update this Privacy Policy and provide any opt-out mechanisms required by law before engaging in those activities.

6. International Data Transfers

We operate internationally and may transfer your information to, store it in, and process it in countries other than the one in which you reside, including jurisdictions whose data protection laws differ from yours. Where required, we rely on appropriate safeguards such as standard contractual clauses or equivalent mechanisms.

7. Cookies and Similar Technologies

We use cookies, local storage, pixels, and similar technologies to operate the Services, remember your preferences, authenticate sessions, measure usage, prevent abuse, and improve performance.

Categories of cookies we may use:

  • Strictly necessary. Required for the Services to function (for example, session and authentication cookies).
  • Functional. Remember your preferences and personalize the Services.
  • Analytics. Help us understand how the Services are used so we can improve them.
  • Security. Help us detect and prevent abuse.

You can control cookies through your browser settings. Blocking strictly necessary cookies may break parts of the Services. Where required by law, we will request your consent before placing non-essential cookies.

8. Data Retention

We retain personal information for as long as necessary to provide the Services, comply with our legal obligations, resolve disputes, enforce our agreements, and for the other purposes described in this Privacy Policy. Retention periods vary by data type and context. When we no longer need information, we delete or de-identify it.

Information stored on public blockchains is outside our control and cannot be deleted by us.

9. Data Security

We implement administrative, technical, and physical safeguards designed to protect personal information from unauthorized access, disclosure, alteration, and destruction. No system is perfectly secure, and we cannot guarantee absolute security. You are responsible for protecting your account credentials, devices, and wallet keys.

If we become aware of a security incident affecting your personal information, we will notify you and the relevant authorities as required by applicable law.

10. Your Rights

Depending on where you live, you may have the following rights with respect to your personal information:

  • Access. Request a copy of the personal information we hold about you.
  • Correction. Request that we correct inaccurate or incomplete information.
  • Deletion. Request that we delete your personal information, subject to legal exceptions.
  • Restriction or objection. Request that we restrict or stop processing your personal information in certain circumstances.
  • Portability. Request a copy of certain information in a portable format.
  • Withdraw consent. Where processing is based on consent, withdraw consent at any time.
  • Non-discrimination. Not be discriminated against for exercising your rights.
  • Lodge a complaint. File a complaint with your local data protection authority.

To exercise any of these rights, contact us through our contact form at nomos.trade/contact or by email at privacy@nomos.trade. We may need to verify your identity before responding, and we will use the information you provide for verification only for that purpose. Where permitted by law, you may designate an authorized agent to make a request on your behalf; we may require proof of the agent's authorization and verification of your identity. If we decline to act on a request, you may appeal our decision by replying to our response, and we will inform you of the outcome of your appeal. Some information may be retained as required or permitted by law (for example, for sanctions compliance, fraud prevention, tax, or accounting purposes).

10.1 California Residents

If you are a California resident, you have specific rights under the CCPA/CPRA, including the rights described above. The categories of personal information we collect, the sources of that information, the purposes for which we use it, and the categories of third parties with whom we disclose it are described in Sections 2, 3, and 5 of this Privacy Policy. We do not sell personal information and do not share personal information for cross-context behavioral advertising, as those terms are defined under California law, and we have no actual knowledge of selling or sharing the personal information of consumers under 16 years of age.

10.2 Other U.S. State Residents

Residents of other U.S. states with comprehensive privacy laws (such as Virginia, Colorado, Connecticut, Utah, Texas, Oregon, and others) may have similar rights, including the right to appeal a refusal to act on a request. Contact us as described above to exercise them.

11. Children's Privacy

The Services are not directed to, and we do not knowingly collect personal information from, individuals under the age of 18 (or the age of majority in their jurisdiction, whichever is greater). If you believe a child has provided us with personal information, contact us and we will take steps to delete it.

12. Third-Party Links

The Services contain links to third-party websites, products, and services. We are not responsible for the privacy practices of those third parties. Review their privacy policies before providing any information.

13. Do Not Track and Opt-Out Preference Signals

Our Services do not currently respond to "Do Not Track" signals because no industry standard for processing them has been finalized. To the extent required by applicable law, we treat recognized opt-out preference signals, such as the Global Privacy Control (GPC), as a valid request to opt out of any sale or sharing of personal information for the browser or device sending the signal. Because we do not sell or share personal information as described in Section 5, such signals do not currently change how we process your information; if our practices change, we will honor these signals as required by law.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The "Last Modified" date at the top reflects the most recent update. Material changes will be communicated through the Services or by other reasonable means. Your continued use of the Services after the effective date constitutes your acceptance of the updated Privacy Policy.

15. Contact

For questions, requests, or complaints about this Privacy Policy or our privacy practices: