Security & Trust

We handle real money, so here is exactly where your funds sit, who can sign for them, and how they are protected.

Where Your Funds Are

Each account gets its own Polymarket wallet on Polygon. Your USDC sits there on-chain, never in a pooled Polyfollow account.
Copy trades are placed from that wallet on Polymarket's order book. Polyfollow is never the counterparty to your trades.
Every trade, deposit and withdrawal is a public on-chain transaction you can verify.

Your wallet is controlled by a signing key that Polyfollow creates for your account.
To copy trades while you are offline, our servers keep that key encrypted (AES-256-GCM) and decrypt it in memory only to sign your orders, sales, redemptions and the withdrawals you request.
Because our servers hold the key, Polyfollow's systems can technically sign transactions for your wallet. That is why we don't call Polyfollow non-custodial.
You can export the private key from Settings at any time. With it you control the wallet directly, without Polyfollow.

All communication is encrypted via TLS 1.3 (HTTPS).
Authentication is handled by Privy. We never store passwords or raw credentials.
Trading keys are stored encrypted, and the encryption secret is kept separately from the database.
Account data is protected by row-level security (RLS), so each user only sees their own data.
API keys and secrets are managed through secure environment variables, never hardcoded.

Your wallet and positions exist on-chain. They don't depend on Polyfollow's servers.
With your exported private key you can reach your funds and positions without Polyfollow, for example by importing the key into a wallet and signing in to Polymarket.
Export your key now and keep it safe: it is the backup that does not depend on us.
No copy trades will execute, but your existing positions and funds stay in your wallet.

Every trade we execute on your behalf is visible in your dashboard with full details.
You can verify all transactions on-chain at any time.
Trade execution logs show exactly when and why each trade was placed.

Questions about security? Reach out at security@polyfollow.com