Privacy Policy

This Privacy Policy explains how OnlyStonks collects, uses, stores, and protects your information when you use our Service. Please read this policy carefully.

Last Updated: January 2026

1. Introduction

OnlyStonks (“we,” “us,” or “our”) operates a prediction market trading service through multiple platforms: our Telegram bot (@onlystonks_live_bot), Discord bot (ID 1465030288659710235), and web portal (portal.onlystonks.xyz) (collectively, the “Service”). This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you use our Service.

By using the Service, you consent to the data practices described in this Privacy Policy. If you do not agree with this Privacy Policy, please do not use the Service.

2. Information We Collect

We collect information necessary to provide and operate the Service. This includes:

2.1 Account and Identity Information

2.2 Wallet and Transaction Information

OnlyStonks is non-custodial. We never store or have access to your private keys.

2.3 Usage Information

• Structured event logs (e.g., wallet–Telegram link events and order metadata necessary to operate the Service)
• Error logs and debugging information
• Session information

We do not store free-form message content beyond what is necessary to operate the Service.

2.4 Information We Do NOT Collect

We practice data minimization. OnlyStonks does NOT intentionally collect or store:

• Private Keys: We never store, access, or transmit your wallet private keys — OnlyStonks is fully non-custodial
• Personal Identity Information: We do not collect your real name, address, or phone number
• Government ID / KYC Documents (by OnlyStonks): OnlyStonks does not collect or store government-issued identification. Kalshi may require that users be identifiable and may request information through processes outside the Service. You are responsible for providing any information required to satisfy Kalshi-related identifiability requirements.
• Email Address: We do not require or store email addresses
• Payment Card Information: We do not process credit cards or traditional payment methods
• Location Data: We do not collect GPS or precise geolocation data. We may process IP address and coarse location signals transiently for access control, fraud prevention, and to enforce geographic restrictions. We do not store IP addresses for tracking purposes.
• Biometric Data: We do not collect fingerprints, facial recognition, or other biometric data
• Telegram/Discord Content Beyond Commands: We only process bot commands and interactions necessary for Service operation; we do not access your private messages, contacts, or other Telegram/Discord data

Note: Our infrastructure providers (hosting, Telegram API) may also process limited technical data as part of standard service delivery.

3. How We Collect Information

We collect information in the following ways:

• Upon Wallet Connection: When you connect your external wallet to OnlyStonks, we store your wallet’s public address and associate it with your Telegram User ID, Discord User ID, or web portal account
• Through Your Activities: We record your trading activities, transactions, and interactions with the Service across all platforms
• From Third-Party Platforms: We receive your Telegram User ID or Discord User ID when you interact with our bots, and collect session data when you use our web portal
• From the Blockchain: We may retrieve transaction data and balances from the Solana blockchain

4. How We Use Your Information

We use the information we collect to:

• Provide the Service: Facilitate trades by sending transaction requests to your connected wallet, and deliver core functionality
• Calculate Portfolio Data: Compute profit/loss, track positions, and display portfolio analytics
• Maintain and Improve: Debug issues, optimize performance, and enhance user experience
• Communicate: Send transaction confirmations and important service notifications
• Ensure Security: Detect and prevent fraud, abuse, or unauthorized access
• Comply with Legal Obligations: Respond to legal requests and enforce our Terms of Service

5. Non-Custodial Architecture

OnlyStonks is a fully non-custodial service.

• We never store, access, or transmit your private keys
• Your private keys remain exclusively in your external wallet application (such as Phantom)
• All transactions require your explicit approval and signature in your wallet
• We only store your wallet’s public address to associate it with your Telegram User ID
• You maintain full custody and control of your funds at all times

6. Data Storage and Retention

6.1 Storage Location

• User data is stored in PostgreSQL databases
• Blockchain data (public keys, transactions) exists on the Solana blockchain
• Servers may be located in various regions where our cloud infrastructure providers maintain data centers

6.2 Retention Period

We retain your data only as long as reasonably necessary to provide our Service and comply with legal obligations:

• Active Account Linkage (Telegram ID ↔ Wallet): Retained while your account is active; removed upon wallet disconnection or account deletion request
• Trade and Order Records: Retained as needed for Service functionality, reporting, and any applicable legal or regulatory requirements
• Structured event logs (order/event metadata): Retained up to 14 days
• Error Logs and Security Data: Up to 1 year
• Aggregate/anonymous analytics: Up to 2 years (where applicable)
• Blockchain Data: Permanently recorded on the Solana blockchain (immutable and beyond our control)

6.3 Wallet Disconnection

When you disconnect your wallet:

• We remove the active link between your Telegram User ID and wallet address. Portfolio features that rely on that linkage may no longer be available until you reconnect.
• Your wallet and funds remain fully under your control (OnlyStonks is non-custodial)

6.4 Account Deletion

You may request deletion of your account data by contacting us at support@onlystonks.xyz. Upon a verified deletion request, we will delete:

• (i) Telegram User ID association and (ii) wallet linkage
• Derived portfolio/analytics stored off-chain
• User preferences and settings

We may retain public transaction references (e.g., transaction hashes) and operational records that are not linked to your Telegram account, plus limited data as required by law or for security purposes.

Backup Disclaimer: Deleted data may persist in encrypted backups for a limited period before being purged according to our backup retention schedule.

Blockchain Disclaimer: Blockchain records are permanent and immutable. We cannot delete transaction data recorded on the Solana blockchain

7. Data Sharing and Disclosure

We may share information only in the following limited circumstances:

7.1 Third-Party Service Providers

7.2 Kalshi Data Use

When you trade on Kalshi-connected markets through OnlyStonks, certain trade-related data may be shared with Kalshi and/or dFlow (directly or indirectly) to support execution, clearing/settlement, compliance, and regulatory requirements.

You acknowledge that Kalshi’s terms of service and Member Agreement may include provisions granting Kalshi broad rights to use, store, and disseminate your trading data. OnlyStonks does not control Kalshi’s data practices. Please review the Kalshi Member Agreement and Kalshi Privacy Policy to understand how Kalshi handles your data.

7.3 Regulatory Information Sharing / Kalshi Identifiability

Kalshi is a CFTC-regulated exchange that may require identity verification (KYC) and compliance with regulatory obligations.

Important Clarifications:

• OnlyStonks does NOT perform KYC: We do not collect government-issued identification, run background checks, or verify your identity
• Kalshi-related compliance/identifiability requirements may apply: OnlyStonks may request information from you, or require you to complete steps outside the Service, to ensure you are identifiable to Kalshi
• Regulatory disclosures: Kalshi may be required to share information with regulatory bodies, government agencies, or law enforcement. These obligations are governed by Kalshi’s terms and applicable law — not by OnlyStonks

By using OnlyStonks to access Kalshi markets, you acknowledge that Kalshi’s compliance requirements may apply to you. Please review the Kalshi Member Agreement for details on their regulatory and identity verification requirements.

7.4 Legal Requirements

We may disclose your information if required to do so by law or in response to:

• Valid legal process (subpoenas, court orders, legal requests)
• Government or regulatory agency requests
• To protect our rights, property, or safety, or that of our users or others
• To investigate or prevent fraud, security issues, or technical problems

7.5 Business Transfers

If OnlyStonks is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify users of any change in ownership or control of personal information.

8. Blockchain and Public Data

You acknowledge that blockchain transactions are inherently public and permanent.

• Your wallet public address is visible on the blockchain
• All transactions (deposits, withdrawals, trades) are publicly recorded
• Blockchain data cannot be deleted or modified
• Third parties may analyze blockchain data to identify patterns or associate addresses with identities
• We have no control over blockchain data once transactions are submitted

9. Data Accuracy Disclaimer

While we strive to maintain accurate data, you acknowledge that:

• No Guarantee of Accuracy: Portfolio values, P&L calculations, and other analytics may contain errors or inaccuracies
• Third-Party Data: Market prices and data sourced from third-party platforms may be delayed, incomplete, or incorrect
• Informational Purposes: All data displayed through the Service is for informational purposes only and should not be relied upon for financial decisions
• Your Responsibility: You should verify all important information through independent sources

10. Your Rights and Choices

Depending on your jurisdiction, you may have certain rights regarding your personal information:

10.1 Access and Export

• You can view your connected wallet address, balances, and transaction history through the Service
• Your wallet remains fully under your control at all times (OnlyStonks is non-custodial)
• You may request a copy of your personal data by contacting us

10.2 Deletion

• You can disconnect your wallet to remove the link between your Telegram User ID and wallet address
• You may request deletion of your account and associated data by contacting us
• Note: Blockchain data cannot be deleted as it is immutable
• Note: We may retain certain data as required by law or for legitimate business purposes

10.3 GDPR Rights (European Users)

If you are located in the European Economic Area (EEA), you may have additional rights including:

• Right of Access: Request access to your personal data
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of your data (subject to limitations)
• Right to Restrict Processing: Request limitation of processing
• Right to Data Portability: Receive your data in a portable format
• Right to Object: Object to certain processing activities

To exercise these rights, please contact us at support@onlystonks.xyz. We will respond to requests within the timeframes required by applicable law.

10.4 California Privacy Rights (CCPA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information we collect, use, and share
• Right to delete personal information (subject to exceptions)
• Right to opt-out of the sale of personal information (we do not sell your data)
• Right to non-discrimination for exercising your privacy rights

11. Children’s Privacy

The Service is not intended for individuals under 18 years of age.

We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately. If we discover that we have collected personal information from a child under 18, we will take steps to delete that information.

12. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your jurisdiction.

We may process limited technical data (e.g., IP for access control) in these regions to enforce geographic restrictions.

By using the Service, you consent to the transfer of your information to countries outside your country of residence, including to countries where our service providers operate data centers.

13. Third-Party Links and Services

The Service may contain links to third-party websites, services, or applications. We are not responsible for the privacy practices of these third parties. We encourage you to read the privacy policies of any third-party services you access.

Third-party services we integrate with have their own privacy policies:

• Telegram Privacy Policy
• Kalshi Privacy Policy
• Kalshi Member Agreement and Regulatory Documents

14. Security Measures

We implement reasonable administrative, technical, and physical security measures to protect your information. These include:

• Secure database access controls
• Regular security assessments
• Limited access to personal information
• Non-custodial architecture — we never store your private keys

However, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security of your information.

15. Updates to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the updated policy on our website
• Updating the “Last Updated” date at the top of this policy
• Announcing changes through bot notifications

Your continued use of the Service after any changes constitutes your acceptance of the updated Privacy Policy.

16. Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us:

• Privacy Inquiries: support@onlystonks.xyz
• General Inquiries: support@onlystonks.xyz