Privacy policy

This Privacy policy explains how Perps Fund (“we,” “us”) collects, uses, shares, and protects personal data when you use our platform (the “Service”), and the rights you have over your data. It forms part of, and should be read with, our Terms of service. Perps Fund is the controller of the personal data described here.

It applies to visitors and to account holders across evaluations and funded accounts. If you do not agree with this policy, do not use the Service.

We collect: account data (email, username, credentials, and authentication settings, including your two-factor status); evaluation and trading data (your simulated orders, positions, fills, and performance — records of activity on simulated accounts); payout data (withdrawal wallet addresses, networks, and payout history); identity-verification data processed through our KYC provider (see the next section); payment data through our payment provider (we receive confirmation and limited metadata, not full card or wallet credentials); and technical and anti-abuse data (IP address, device and browser characteristics, approximate location, and log, usage, and cookie data).

We also derive fraud- and abuse-prevention signals — including links between accounts that share a device, IP address, payment instrument, or withdrawal address — which we use solely to protect the integrity of the Service. How and why we use these signals is described under “How we use information.”

Identity verification is performed by Sumsub, a third-party identity-verification provider, before your first payout and once your lifetime unverified payouts would exceed $1,000. To verify you, Sumsub may collect government-identification documents, a selfie or liveness check, and related identity data, and may carry out sanctions and watchlist screening.

Sumsub processes this data as our processor under its own security and compliance controls. We receive the verification result and the limited data needed to make and evidence a payout decision. We retain verification records for as long as required to meet our legal and anti-fraud obligations, and we minimize what we store.

We use personal data to: operate the Service and your evaluations and funded accounts; process and pay profit share and referral rewards; verify identity and screen for sanctions; prevent, detect, and investigate fraud, abuse, and exploitation of the Service — including by linking and reviewing related accounts and trading and payout activity; provide support; comply with legal obligations; and maintain the security and integrity of the platform.

Our lawful bases include performance of our contract with you (operating the Service and paying you); our legitimate interests — notably preventing fraud and abuse and securing the platform, balanced against your rights; compliance with legal obligations (identity verification, sanctions screening, and record-keeping); and your consent where required, for example for certain cookies. The anti-abuse signals described above are processed on the basis of our legitimate interest in preventing fraud and protecting the Service.

We share personal data with processors who act on our instructions: Sumsub (identity verification), NowPayments (payment processing), and our hosting, infrastructure, and analytics providers. Market price and funding data is sourced from Hyperliquid, a third-party venue; we do not share your personal data with that venue to obtain it.

We may disclose data where required by law, to comply with sanctions obligations, or to protect our rights, our users, or the Service. We do not sell your personal data.

We use cookies and similar technologies that are essential to operate the Service — for example, authentication and security — and, where applicable, optional analytics cookies to understand and improve how the Service is used. Essential cookies are required for the Service to function; you can manage optional cookies through your browser or any in-product controls we provide.

Some anti-abuse signals, such as device characteristics, are processed on the basis of our legitimate interest in security rather than through optional cookies.

We protect personal data with technical and organizational measures, including encryption in transit, access controls, and two-factor authentication on accounts. Withdrawal addresses are whitelisted, and a newly added address is subject to a 48-hour security hold before it can receive a payout.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for safeguarding your credentials and for enabling two-factor authentication.

We keep personal data for as long as your account is active and as needed to provide the Service. After an account is closed, we retain certain data for longer where necessary to meet legal, tax, accounting, and anti-fraud obligations, to resolve disputes, and to enforce our agreements — for example, identity-verification and payout records are kept for the period required by applicable law.

When data is no longer needed for these purposes, we delete or anonymize it.

Depending on where you live, you may have rights to access, correct, delete, restrict, or object to the processing of your personal data, to data portability, and to withdraw consent. To exercise a right, contact us through the channels in the site footer; we will respond within the time required by applicable law and may need to verify your identity first.

Some data — such as records we must keep for legal or anti-fraud reasons — may be retained even after a deletion request. You may also have the right to complain to your local data-protection authority.

We and our processors may process personal data in countries other than where you live. Where we transfer data across borders, we rely on the safeguards required by applicable law, such as standard contractual clauses or an adequacy decision.

We may update this policy from time to time. If we make a material change, we will post the updated policy with a new effective date and, where appropriate, notify you in-app or by email.

For privacy questions or to exercise your rights, contact us through the channels listed in the site footer. We will publish a dedicated data-protection contact address as the company is finalized.