Privacy Policy

1.1 This Privacy Policy describes how T1 DERIVATIVES, an exempted company incorporated in the Cayman Islands with company number 413842 (“T1 Derivatives,” “we,” “us” or “our”), handles information about Users (“you”) in connection with Amplifi, including any websites, smart contracts, interfaces, APIs and related services made available by us in connection with Amplifi (collectively, the “Services”).

1.2 This Privacy Policy is incorporated into, and forms part of, the Amplifi Terms of Service. Capitalised terms used but not defined here have the meanings given to them in the Terms of Service. If you do not agree with this Privacy Policy, you must not access or use the Services.

1.3 We are a small team operating a beta product. We do not currently maintain a formal GDPR, UK GDPR or other comprehensive data protection compliance programme. We aim to handle the information we receive responsibly and in line with the Cayman Islands Data Protection Act (As Revised) (the “Cayman DPA”), but we do not represent that our practices meet the specific procedural requirements of EU, UK or other non-Cayman data protection laws.

2.1 We collect a limited amount of information when you use the Services. Specifically:

• Wallet information: the public address of the digital wallet you connect to the Services, and information about your Amplifi Wallet (including transactions, positions, collateral, deposits and withdrawals associated with that wallet);
• Signature data: cryptographic signatures you provide, including signatures authorizing trading sessions, orders, withdrawals and similar actions;
• Technical information: your IP address, approximate geographic location derived from your IP address, browser type and version, device type and identifiers, operating system, language settings, referring URLs, and timestamps of your requests, collected by us and by our infrastructure providers and stored, together with your usage events, in our own systems;
• Usage information: pages visited, features used, interactions with the user interface and similar usage data, captured by us and by our analytics providers, including recordings of your sessions on the interface with the text you type masked. We may link the identifiers we set (such as a device identifier stored in a cookie) with the wallet addresses you use and with your activity on the Services, including across our websites; and
• Account information: if you sign in with an email address or a social account (for example, Google), that email address and account identifier, collected through our authentication provider;
• Communications: any information you provide when you contact us (for example by email or through a support channel), including your name, email address and the contents of your communications.

2.2 We do not knowingly collect, and we ask you not to provide to us, any government identifiers (such as passport or social security numbers), financial account numbers, payment card details, health information, or other sensitive personal information.

2.3 We do not currently perform on-chain wallet sanctions or risk screening through a third-party screening provider. We may begin to do so in the future and will update this Privacy Policy if and when we do.

3.1 We use the information described above to:

• provide, operate, maintain and improve the Services;
• execute the transactions you instruct, calculate and apply margin, liquidations, borrowing rates and lending pool accounting, and otherwise enforce the rules of the Amplifi protocol;
• apply geo-blocking and similar access restrictions, and detect and prevent access by Prohibited Persons as defined in the Terms of Service;
• detect, investigate and respond to fraud, market manipulation, abuse, security incidents, and other prohibited activity;
• comply with applicable law, including sanctions laws and anti-money-laundering laws, and respond to lawful requests from governmental authorities;
• understand how the Services are used so that we can improve them; and
• respond to your communications and provide support.

4.1 When you interact with the Services you transact on one or more public blockchains. Information about your transactions, including your wallet address and the details of your positions and balances, is publicly visible on those blockchains. We do not control public blockchains and cannot edit, delete, hide or otherwise alter information once it has been recorded on a public blockchain.

4.2 Public blockchain data may be observed, copied, indexed and analysed by anyone, including by third-party block explorers, analytics firms, journalists, and law-enforcement agencies. We have no control over the use of this publicly available information by such third parties.

5.1 We share information with the following categories of third parties:

• Cloud, hosting, network and infrastructure providers: we use third-party cloud, content-delivery, edge-compute and network providers (for example Google Cloud, Netlify and Cloudflare) to host and deliver the Services. These providers receive technical information including IP addresses and request data in the course of providing their services;
• Blockchain infrastructure providers: we use third-party node, RPC, indexer and similar blockchain infrastructure providers (for example Alchemy or equivalent providers) to read from and write to public blockchains on your behalf. These providers receive wallet addresses, transaction data and technical information necessary to relay your transactions;
• Analytics providers: we use third-party product analytics providers to understand how the Services are used. These providers (currently Google Analytics and PostHog) receive technical and usage information, including session recordings, which may include identifiers such as your wallet address and IP address;
• Authentication and embedded wallet provider: we use a third-party provider (currently Privy) to let you sign in with an email address or social account and to create and operate embedded wallets. It receives your email address or social account identifier, your wallet addresses and technical information;
• Payment and on-ramp providers: if you buy digital assets with a card or bank transfer, the provider you are routed to processes your payment and identity information under its own terms;
• Advertising platforms: when you arrive from an advertisement, the advertising platform (currently X) sets its own cookies, and we send it a click identifier (or, where none is available, your IP address and browser details) together with a record of certain actions, such as connecting a wallet or making a deposit, to measure the advertisement's performance. We do not send it your wallet address;
• Trading venue and settlement infrastructure: to execute your instructions, wallet addresses, orders and transaction data are transmitted to Polymarket (its order book, relayer, bridge and related APIs);
• Error monitoring: we use an error-monitoring provider that receives technical information and an identifier associated with your session, which may include your wallet address;
• Embedded third-party services: parts of the interface (for example the deposit flow's bridge widget) are provided by third parties that process your wallet address and transactions;
• Attestation services: cross-chain withdrawals use a third-party attestation API that receives the related transaction data;
• Governmental authorities: we may share information with governmental authorities, courts, regulators or law-enforcement agencies if we believe in good faith that disclosure is required by applicable law, court order, or other legal process, or is reasonably necessary to enforce our rights or protect the safety of others.

5.2 We do not sell information to third parties for advertising or marketing purposes.

6.1 We operate from the Cayman Islands and may store and process information in any country in which we or our service providers operate, including in jurisdictions outside the Cayman Islands. By using the Services you acknowledge that information about you may be transferred to and processed in jurisdictions that may not have data protection laws equivalent to those of your country of residence.

7.1 We and our service providers use cookies, local storage and similar technologies on the front-end of the Services. These technologies are used for first-party analytics and identity (including a device identifier valid for up to two years and shared across amplifi.finance subdomains, and a session identifier), for enforcing geographic restrictions, and for remembering your device's connection state, and measuring usage of the Services through our analytics providers, which set their own cookies. We also store advertising click identifiers and campaign parameters for up to 90 days to attribute your visit to the advertisement or link that brought you, and advertising platforms may set their own cookies.

7.2 Most browsers allow you to control cookies through their settings. If you disable cookies, some features of the Services may not function correctly.

8.1 We retain information for as long as we reasonably need it for the purposes described in this Privacy Policy. The specific retention period depends on the type of information, the purpose for which it was collected, and any applicable legal or regulatory obligations. Public blockchain data is retained on the relevant blockchain indefinitely and is outside our control.

9.1 Subject to applicable law, you may request that we:

• provide you with a copy of the information we hold about you;
• correct information that is inaccurate or incomplete;
• delete information we hold about you, where we no longer have a lawful basis to retain it; and
• stop using your information for analytics or other non-essential purposes.

9.2 You can contact us at the address in Section 13 to make such a request. We will respond to your request in a reasonable timeframe. We do not commit to the specific response timelines or procedures required by the EU General Data Protection Regulation, the UK GDPR or other non-Cayman data protection laws.

9.3 Some information cannot be deleted on request, including information recorded on public blockchains (which we do not control), information we are required to retain for legal or compliance reasons, and information we need to defend or pursue legal claims.

10.1 We use reasonable administrative, technical and organizational measures to protect the information we handle. No information system is perfectly secure, however, and we cannot guarantee the security of information we receive or store. Our information security practices may evolve over time.

11.1 The Services are not directed to, and may not be used by, persons under the age of 18 (or the age of majority in their jurisdiction, whichever is older). We do not knowingly collect information from such persons. If you believe a minor has provided information to us, please contact us using the details below and we will take reasonable steps to delete it.

12.1 We may amend this Privacy Policy from time to time. Any amended Privacy Policy will be posted at the same location as the current Privacy Policy and the “Last updated” date will be revised. Your continued use of the Services following any such amendment constitutes your acknowledgement of the amended Privacy Policy.

13.1 You can contact us with privacy questions or requests at: