Privacy Policy
Last updated October 16, 20261. INTRODUCTION
This Privacy Policy explains how Fraction AI Ltd. ("Fraction AI," "we," "us" or "our") collects, uses and shares personal information when you use Index through the website at fractionai.xyz and the services you access through it (together, the "Services"). Use of the Fraction AI mobile app is covered by the app version of this policy at fractionai.xyz/privacy-policy/app. If you use the same account on both, each version describes what happens through its own surface.
By using the Services you agree to this Privacy Policy. If you do not agree, please do not use the Services.
2. INFORMATION WE COLLECT
Account information. Your email address, display name and avatar, the logins you link (such as Google, X, Discord or Telegram) and the profile details they share with us, your language and your consent choices. If you use Index as a guest, we create a temporary account and record your IP address. Guest accounts that are not turned into full accounts are deleted after 7 days.
Wallet and trading information. The wallet addresses created for your account, your balances, deposits, withdrawals and transfers, and your trades, orders, positions, profit and loss and paper trades.
Eligibility confirmation. Before you deposit funds into Perps or move funds from Tokens to Perps, you confirm that you are not a US citizen or resident and are not located in the United States. We keep a record of that confirmation, including when you gave it, your IP address and the approximate country it indicates, your device and the wallet address linked to your Perps balance.
Payment information. When you deposit by card, our payment provider Crossmint collects your payment details and may verify your identity. We receive the status and amount of your deposit and its transaction hash. We do not receive your card number or identity documents.
Device and usage information. Your IP address and the approximate country it indicates, your device and browser type, the pages and screens you view, the actions you take, and the requests your device sends to our servers, which we keep in server logs.
Communications. Messages you send us, and, if you link Telegram, your Telegram username and ID so we can send you trade alerts.
Website features. Messages and images you send to the AI chat; your Gold, chests, achievements, rewards and tournament results; your referral and ambassador activity; and, if you link Discord, messages you post in our community channels, which we may review to award community rewards.
3. HOW WE USE YOUR INFORMATION
- to create and secure your account and the wallets linked to it;
- to execute your trades, orders and transfers, and to process deposits and withdrawals;
- to check that you are eligible to use the Services, including Perps, and to keep a record of your eligibility confirmation;
- to show your portfolio, history, alerts and notifications;
- to detect and prevent fraud, abuse, multiple accounts and breaches of our Terms of Use;
- to understand how the Services are used and improve them;
- to measure our marketing and send you updates, which you can opt out of;
- to respond to you and provide support;
- to comply with the law and enforce our rights;
- to run the AI chat, rewards, tournaments, leaderboards and the ambassador program.
4. HOW WE SHARE YOUR INFORMATION
We do not sell your personal information. We share it only as follows. Some privacy laws treat the advertising measurement described below as a "sale" or "sharing" of personal information or as targeted advertising, and you can opt out of it (see Section 9).
- Wallet and login provider: Privy, which provides your login and creates and secures your wallets.
- Trading venues and routing: Hyperliquid for Perps, and token routing and swap services such as Relay and Jupiter, which receive your wallet address and order details. On the website, also GRVT and the vault protocols you choose to use.
- Payments: Crossmint, which receives your email and wallet address to process card deposits.
- Analytics: PostHog for product analytics.
- Advertising measurement: Google and Meta, so we can measure whether our advertising works. They may receive your IP address, device details, the pages you visit and actions you take on the Services, and a hashed (scrambled) version of your email and account ID.
- Infrastructure: Amazon Web Services for hosting and storage, and our email provider for verification emails.
- AI providers: OpenRouter, OpenAI and Fireworks process your AI chat messages together with a summary of your portfolio (holdings, balances and positions) so the assistant can answer.
- Ambassadors and partners: if someone referred you, they can see your display name, avatar, activity, trading volume, deposits and the fees you generate, but not your email or wallet address. Marketing partners who referred you may also see your approximate country.
- Legal and safety: when required by law, or to protect our rights, users or the Services.
- Business transfers: to a buyer or successor if we are involved in a merger, acquisition or sale of assets.
5. PUBLIC INFORMATION
Blockchain transactions are public. Anyone can see the trades, positions and transfers made from a wallet address, including on Hyperliquid. We cannot delete or change information recorded on a blockchain.
Tournament leaderboards on the website are public and show your display name, avatar, profit and loss and rank.
6. COOKIES, SESSION RECORDINGS AND SIMILAR TECHNOLOGIES
We use cookies, local storage, pixels and similar technologies to keep you logged in, remember your settings, understand how the Services are used, and measure our advertising. You can block or delete cookies in your browser settings, but some features may then not work.
Our analytics may record how you use the Services, including the pages you view, where you click and how you move through the pages, so we can find and fix problems and improve the Services. Text you type and payment details are masked in these recordings. Your balances, positions and trading activity shown on screen may be visible in them. You can opt out of session recording at any time (see Section 9).
We do not respond to Do Not Track signals.
7. DATA RETENTION
We retain your personal information only for as long as reasonably necessary for the purposes set out in this Privacy Policy, or to comply with our legal obligations, resolve disputes, and enforce our legal agreements and policies. The criteria used to determine our retention periods include:
- the length of time we have an ongoing relationship with you and provide services to you;
- whether there is a legal or regulatory obligation to which we are subject;
- whether retention is advisable in light of our legal position (such as for statutes of limitations, litigation, or regulatory investigations).
If you delete your account, we delete it within 30 days of your request. When we no longer need to use your personal information, we will either delete it from our systems or anonymize it so that it can no longer be identified with you.
Information recorded on a blockchain cannot be deleted.
8. SECURITY
We use technical and organizational measures to protect your information, and your wallets are secured by Privy. No system is completely secure, so we cannot guarantee the security of your information.
9. YOUR RIGHTS AND CHOICES
Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal information, and to object to or restrict how we use it, including for marketing. Where we rely on your consent, you can withdraw it at any time.
You can opt out of advertising measurement and session recording at any time by emailing info@fractionai.xyz. Opting out does not affect the information we need to run your account and execute your trades.
You can delete your account at fractionai.xyz/dapp/delete-account. For any other request, email info@fractionai.xyz. We may need to verify your identity first. You may also complain to your local data protection authority.
10. INTERNATIONAL TRANSFERS
Fraction AI is based in the British Virgin Islands. Our servers and service providers are located in other countries, including India and the United States, so your information may be processed outside your country. We take reasonable steps to protect it wherever it is processed.
11. CHILDREN
The Services are not for anyone under 18, and we do not knowingly collect information from children. If you believe a child has given us information, contact us and we will delete it.
12. CHANGES TO THIS POLICY
We may update this Privacy Policy from time to time. We will post the new version here and change the date at the top. If the changes are significant, we will also tell you in the Services.
13. CONTACT
Questions about this Privacy Policy: info@fractionai.xyz
Fraction AI Ltd., British Virgin Islands