WallyPilot Privacy Policy

Last updated: September 1, 2025

This Privacy Policy explains how WallyPilot (operated by Polygon Capital LLC d/b/a WallyPilot, "WallyPilot," "we," "us," or "our") collects, uses, discloses, and safeguards information when you visit our website, create an account, and use our services (collectively, the "Services").

By using the Services, you agree to the practices described in this Privacy Policy. If you do not agree, please discontinue use of the Services.

1) Who we are & how to contact us

• Controller/Operator: Polygon Capital LLC d/b/a WallyPilot
• Contact (privacy & support): customersupport@polygonpl.com
• Postal address (for legal notices): 5540 Centerview Dr Ste 204, Raleigh, NC 27606-8012 US

2) What we collect

We collect information in three main ways: (A) directly from you, (B) automatically through your device and our Services, and (C) from integrations you choose to connect.

A. Information you provide

• Account & contact data: name, email, password (hashed), organization/team name.
• Billing data: cardholder name, billing email, and related information processed by our payment provider (Stripe). We do not store full card numbers.
• Support communications: messages, attachments, and metadata you send when you contact us.
• Uploaded CSVs & inputs: keywords, product identifiers (e.g., item IDs/ASINs), and other content you upload to use rank tracking and research features.

B. Information collected automatically

• Usage & device data: IP address, browser type, operating system, referring pages, pages visited, time zone, product usage events, and error logs.
• Cookies & similar technologies: session tokens, authentication cookies, analytics cookies (see Cookies below).

C. Information from integrations you choose

• Walmart Connect (optional/limited): Rank tracking and keyword research do not require Walmart Connect access. If you later connect Walmart for advertising features (e.g., automations once available), we may process limited advertising account data (e.g., campaign/ad group names, budgets, performance metrics) via OAuth tokens that you can revoke at any time. We do not store your Walmart password.

3) Why we use your information (purposes)

We use information to:

1. Provide the Services: create and secure accounts; process payments; enable keyword rank tracking, research, dashboards, and exports.
2. Maintain & improve: monitor performance, debug issues, develop new features, and enhance usability.
3. Security & fraud prevention: protect accounts, enforce terms, and detect/prevent abuse.
4. Communicate with you: transactional emails (account, billing, product updates), support responses, and optional product tips. You can opt out of non‑transactional emails.
5. Legal & compliance: meet legal, tax, and regulatory obligations; enforce agreements.

Legal bases (EEA/UK only)

Where GDPR/UK GDPR applies, we rely on: Contract (to provide the Services), Legitimate interests (to secure/improve the Services), Consent (for optional cookies/marketing), and Legal obligation (where required).

4) Cookies & analytics

We use cookies and similar technologies to keep you signed in, remember preferences, and understand how the Services are used.

• Strictly necessary cookies: required for login and core features.
• Analytics cookies: to measure usage and improve performance (aggregated).
• Preference cookies: to remember settings.

Your browser may allow you to block cookies; some features may not work without them. Where required by law, we will display a cookie notice with choices.

5) Sharing & disclosure

We share information only as necessary to provide the Services and as described below:

• Service providers (sub‑processors): hosting, databases, analytics, email delivery, error monitoring, and customer support tools.
• Payments: Stripe processes billing and payment information.
• Legal & safety: if required by law, subpoena, or to protect rights, safety, or property.
• Business transfers: as part of a merger, acquisition, financing, or sale of assets, subject to confidentiality.

We do not sell personal information. We do not share personal information for cross‑context behavioral advertising as defined by certain US state privacy laws.

6) Data retention

• Account data: retained while your account is active. Upon deactivation or verified deletion request, we delete or de‑identify personal data within 30 days, subject to legal holds or backups retained up to 90 days.
• Product data (keywords, CSVs): retained while needed to provide features; deleted upon account deletion or your request.
• Logs & analytics: retained for a limited period (typically 30–180 days) for security and troubleshooting.

7) Security

We employ administrative, technical, and physical safeguards, including:

• Encryption in transit (TLS) and at rest,
• Role‑based access controls, least‑privilege principles, and audit trails,
• Regular patching and monitoring.

No method of transmission or storage is 100% secure; we work to continuously improve our protections.

8) Your rights & choices

Depending on your location, you may have rights over your personal information, including to access, correct, delete, port, or object/restrict certain processing.

EEA/UK

You may also withdraw consent where processing is based on consent, and lodge a complaint with your local supervisory authority. International transfers are protected by Standard Contractual Clauses or equivalent safeguards where applicable.

US State Privacy (e.g., CA/CO/CT/VA/UT)

• Right to know/access and deletion.
• Correction of inaccurate information.
• Opt‑out of sale/share/targeted advertising: We do not sell or share personal information as defined by these laws.
• Appeals: If we deny a request, you may appeal by replying to our decision email.

To exercise rights, email customersupport@polygonpl.com with "Privacy Request" in the subject and specify your request. We may verify your identity before responding.

9) Children's privacy

The Services are not directed to children under 13 and we do not knowingly collect personal information from them. If you are a parent or guardian and believe your child provided personal information, contact us to request deletion. We do not knowingly sell/share data of users under 16.

10) International data transfers

We may store and process information in the United States and other countries. Where required, we use appropriate safeguards (e.g., Standard Contractual Clauses) for cross‑border transfers.

11) Third‑party links & sites

The Services may link to third‑party websites. We are not responsible for their privacy practices. Review their policies before providing personal information.

12) Walmart Connect & other integrations (clarity)

• Not required for rank tracking or research.
• If you connect Walmart for future ad automations, we'll process limited advertising data necessary to run and measure automations.
• You can disconnect at any time; tokens are revoked and related data is deleted or de‑identified per our retention schedule.

13) Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version with a new "Last updated" date and, when required, notify you via email or in‑app notice. Continued use of the Services after the effective date constitutes acceptance of the updated policy.

14) How to contact us

For questions, concerns, or privacy requests:

Email: customersupport@polygonpl.com

Postal: 5540 Centerview Dr Ste 204, Raleigh, NC 27606-8012 US