IDEOSPHERE ALPHA — PRIVACY POLICY
Version 1.0
Effective Date: Sunday February 1st 2026.
================================================================================
This Privacy Policy explains how Ideosphere Inc. ("Ideosphere", "we", "us",
"our") collects, uses, and protects your information when you use the
Ideosphere Alpha platform ("Platform").
By using the Platform, you consent to the practices described in this Policy.
================================================================================
--------------------------------------------------------------------------------
1. INFORMATION WE COLLECT
--------------------------------------------------------------------------------
1.1 INFORMATION YOU PROVIDE
When you create an account, we collect:
(a) Email address
(b) Display name
When you use the Platform, we collect:
(a) Forecasts and predictions you submit
(b) Comments and other content you post
(c) Transaction records (IDEA token purchases and usage)
1.2 INFORMATION COLLECTED AUTOMATICALLY
When you access the Platform, we automatically collect:
(a) Device information (browser type, operating system)
(b) IP address
(c) Pages visited and features used
(d) Timestamps of activity
(e) Error logs and performance data
1.3 INFORMATION FROM THIRD PARTIES
If you sign in using Google, we receive:
(a) Your Google email address
(b) Your Google display name
(c) Your Google profile picture (if available)
We do not receive or store your Google password.
--------------------------------------------------------------------------------
2. HOW WE USE YOUR INFORMATION
--------------------------------------------------------------------------------
2.1 We use your information to:
(a) Provide and operate the Platform
(b) Process IDEA token purchases
(c) Calculate reputation scores and rankings
(d) Send service-related communications (account verification, updates)
(e) Respond to your enquiries and support requests
(f) Detect and prevent fraud, manipulation, and abuse
(g) Improve and develop the Platform
(h) Conduct internal research and calibration of prediction mechanics
2.2 During the Alpha period, we use aggregated and anonymised data for
internal calibration and testing purposes only.
2.3 We do NOT:
(a) Sell your personal data to third parties
(b) Use your data for targeted advertising
(c) Share individual user data with third parties for their marketing
--------------------------------------------------------------------------------
3. REPUTATION DATA & ALGORITHMIC PROCESSING
--------------------------------------------------------------------------------
3.1 Your forecasts are processed algorithmically to calculate reputation
scores using the Brier Skill Score methodology.
3.2 Reputation scores are domain-specific and visible to other users
according to your profile settings.
3.3 We use zero-knowledge proofs for provenance verification. This allows
cryptographic verification of forecast authenticity without exposing
individual prediction data.
3.4 By using the Platform, you consent to this algorithmic processing of
your forecasting activity.
--------------------------------------------------------------------------------
4. COOKIES & SIMILAR TECHNOLOGIES
--------------------------------------------------------------------------------
4.1 We use cookies to operate the Platform:
| Cookie Type | Purpose | Duration |
|-----------------|--------------------------------|-------------|
| Session | Authentication and security | Session |
| Persistent | Remember your login | 1 hour |
4.2 We do NOT use:
(a) Marketing or advertising cookies
(b) Third-party tracking cookies
(c) Cross-site tracking technologies
4.3 You can disable cookies in your browser settings, but this may prevent
you from using certain features of the Platform.
--------------------------------------------------------------------------------
5. THIRD-PARTY SERVICES
--------------------------------------------------------------------------------
5.1 We use the following third-party services to operate the Platform:
| Service | Provider | Purpose | Privacy Policy |
|-------------|-----------|------------------------------|----------------|
| Hosting | Vercel | Platform hosting and CDN | vercel.com/legal/privacy-policy |
| Hosting | Supabase | Platform hosting & Database | supabase.com/privacy |
| Payments | Stripe | Payment processing | stripe.com/privacy |
| Email | SendGrid | Transactional emails | sendgrid.com/policies/privacy |
| Auth | Google | Optional sign-in | policies.google.com/privacy |
5.2 These providers may collect and process data according to their own
privacy policies. We encourage you to review them.
5.3 We do not use third-party analytics services during the Alpha period.
--------------------------------------------------------------------------------
6. DATA SHARING
--------------------------------------------------------------------------------
6.1 We may share your information in the following circumstances:
(a) WITH YOUR CONSENT: When you explicitly agree to sharing.
(b) SERVICE PROVIDERS: With third-party vendors who assist in operating
the Platform (see Section 5), subject to confidentiality obligations.
(c) LEGAL REQUIREMENTS: When required by law, court order, or government
request, or to protect our rights, property, or safety.
(d) BUSINESS TRANSFERS: In connection with a merger, acquisition, or
sale of assets, your information may be transferred to the successor
entity.
(e) AGGREGATED DATA: We may share anonymised, aggregated statistics that
cannot identify you individually.
6.2 We do NOT sell your personal data.
--------------------------------------------------------------------------------
7. DATA RETENTION
--------------------------------------------------------------------------------
7.1 We retain your data for as long as your account is active or as needed
to provide services to you.
7.2 Upon account deletion:
(a) Personal data (email, display name) is deleted within 30 days
(b) Forecasting data may be retained in anonymised form for research
(c) Transaction records may be retained for legal and accounting purposes
(d) Server logs are retained for 90 days for security purposes
7.3 We may retain certain information as required by law or for legitimate
business purposes (fraud prevention, dispute resolution).
--------------------------------------------------------------------------------
8. DATA SECURITY
--------------------------------------------------------------------------------
8.1 We implement appropriate technical and organisational measures to
protect your data, including:
(a) Encryption in transit (TLS/HTTPS)
(b) Encryption at rest for sensitive data
(c) Access controls and authentication
(d) Regular security assessments
8.2 No method of transmission or storage is completely secure. While we
strive to protect your data, we cannot guarantee absolute security.
8.3 You are responsible for maintaining the confidentiality of your account
credentials.
--------------------------------------------------------------------------------
9. YOUR RIGHTS
--------------------------------------------------------------------------------
9.1 You have the right to:
(a) ACCESS: Request a copy of the personal data we hold about you
(b) CORRECTION: Request correction of inaccurate data
(c) DELETION: Request deletion of your account and personal data
(d) PORTABILITY: Request your data in a machine-readable format
(e) OBJECTION: Object to certain processing activities
9.2 To exercise these rights, contact us at info@ideosphere.io. We will
respond within 30 days.
9.3 We may request verification of your identity before processing requests.
9.4 Some requests may be limited where we have legitimate grounds to retain
data (legal obligations, fraud prevention, dispute resolution).
--------------------------------------------------------------------------------
10. INTERNATIONAL DATA TRANSFERS
--------------------------------------------------------------------------------
10.1 Our servers are located in the United States.
10.2 If you access the Platform from outside the United States, your data
will be transferred to and processed in the United States.
10.3 By using the Platform, you consent to this transfer.
10.4 FOR USERS IN THE EUROPEAN ECONOMIC AREA OR UNITED KINGDOM:
If applicable data protection laws require additional safeguards for
international transfers, we rely on:
(a) Your explicit consent to the transfer; and/or
(b) The necessity of the transfer to perform our contract with you.
You may have additional rights under GDPR or UK GDPR. Contact us at
info@ideosphere.io to exercise these rights.
--------------------------------------------------------------------------------
11. CHILDREN'S PRIVACY
--------------------------------------------------------------------------------
11.1 The Platform is not intended for anyone under 18 years of age.
11.2 We do not knowingly collect personal data from children under 18.
11.3 If we learn that we have collected data from a child under 18, we will
delete it promptly. If you believe we have collected such data, contact
us at info@ideosphere.io.
--------------------------------------------------------------------------------
12. CHANGES TO THIS POLICY
--------------------------------------------------------------------------------
12.1 We may update this Privacy Policy from time to time.
12.2 Material changes will be notified via email or prominent notice on the
Platform.
12.3 The "Effective Date" at the top indicates when the Policy was last
revised.
12.4 Your continued use of the Platform after changes constitutes acceptance
of the revised Policy.
--------------------------------------------------------------------------------
13. CONTACT US
--------------------------------------------------------------------------------
For questions about this Privacy Policy or to exercise your rights, contact:
Ideosphere Inc.
Email: info@ideosphere.io
================================================================================
END OF PRIVACY POLICY
================================================================================