Privacy Policy

1. Overview

This Privacy Policy applies to the Cred platform and any companion applications operated by GA Labs LLC (collectively, the "Service"). By using the Service, you consent to the practices described in this policy.

2. Information We Collect

Account Information

• Email address
• Username or display name
• Authentication identifiers (OAuth tokens, session data)

Commitment and Forecast Data

• Forecast content and confidence levels (probabilities)
• Amendments and revision history
• Timestamps and resolution outcomes
• Credibility scores and scoring metadata

Technical Information

• IP address (may be logged or hashed for security)
• Browser type and device information
• Public signing keys (if applicable)
• Operational and error logs

Usage Data

• Pages visited and features used
• Interaction patterns and session duration
• Referral sources

3. Information We Do Not Collect

Cred does not collect:

• Payment or financial account information (we do not process payments)
• Government-issued identification
• Precise geolocation data
• Biometric data

4. How We Use Information

We use collected information to:

• Operate, maintain, and improve the Service
• Evaluate commitments and compute credibility scores
• Maintain audit logs and integrity records
• Generate aggregate platform statistics
• Detect abuse, fraud, and security threats
• Communicate service updates (if you opt in)

5. Third-Party Services

The Service integrates with third-party services in the following ways:

• Hosting and infrastructure: Vercel (hosting), Supabase (database and authentication)
• Market data: We display publicly available data from third-party prediction market platforms. We do not share your personal data with these platforms.
• AI providers: AI-generated forecasts are produced by third-party language model APIs (e.g., OpenAI, Anthropic, DeepSeek). Market questions and categories may be sent to these providers for analysis. No personal user data is included in AI requests.

6. Data Sharing

Cred does not sell, rent, or trade personal data.

We may share information with:

• Infrastructure and hosting providers necessary to operate the Service
• Analytics providers (if applicable), using anonymized or aggregated data
• Law enforcement or government authorities when required by applicable law

7. Data Retention

To preserve platform integrity and auditability:

• Commitment and resolution records may be retained indefinitely as part of the platform's integrity model.
• Certain ledger records are designed to be immutable and cannot be altered or deleted.
• Account information is retained for the duration of your account and a reasonable period thereafter.

Operational logs are retained for security and reliability purposes and are periodically purged.

8. Cookies and Tracking

Cred uses essential cookies for authentication and session management. We do not use third-party advertising cookies or cross-site tracking.

9. Your Rights

You may request:

• Access to your account information and data
• Correction of inaccurate personal data
• Deletion of your account
• A copy of your data in a portable format

Note: Due to the platform's immutability model, certain integrity records (such as sealed commitments and resolution outcomes) may be retained in anonymized or pseudonymized form even after account deletion, as they are part of the platform's public record.

To exercise your rights, contact:

support@cred-repo.com

10. Security

We use industry-standard safeguards including:

• Encrypted connections (TLS/HTTPS)
• Row-level security and controlled database access
• Role-based access controls
• Hashed and salted authentication credentials

If device-based signing keys are used, private keys remain on your device and are never transmitted to our servers.

No system is perfectly secure. We cannot guarantee absolute security of your information.

11. Children's Privacy

Cred is not intended for individuals under 13 years old. We do not knowingly collect information from children under 13. If we become aware of such collection, we will take steps to delete the information.

12. International Users

The Service is operated from the United States. If you access the Service from outside the U.S., your information may be transferred to and processed in the United States. By using the Service, you consent to this transfer.

13. Changes to This Policy

We may update this Privacy Policy periodically. Updates will include a revised "Last Updated" date at the top of this page. Material changes will be communicated through the Service.

14. Contact

For privacy-related inquiries:

GA Labs LLC
support@cred-repo.com