What we collect, why we collect it, who else sees it, and what you can change. Bid is a social network built on a public blockchain, so this page is as much about what is public by design as about what we keep.
We never see your private keys. They are generated and held inside Privy's secure hardware enclaves. Export encrypts them to a keypair your own browser creates, so the ciphertext that passes through our servers is something we hold no key to open.
Most of what we do store is the minimum needed to run a social trading network: who you are on Telegram, what you traded, and what you chose to publish. Your trades are public by default — that is what a leaderboard is — and you can change that at any time with /privacy.
When you start the bot, Telegram gives us your numeric user ID, username, and first name. We use your ID to identify your account and your username and name to display you to other users, subject to your privacy settings. Your profile photo is fetched from Telegram on demand and proxied to the app; we do not need your phone number and Telegram does not give it to us.
In groups, we record that your account is present in a group so clans and shared-group suggestions work. We do not read, store or analyse group conversation; the bot acts on commands and pasted contract addresses.
Your display name, bio, privacy tier, DM policy, watchlist, theses, clan applications, direct messages sent through the app's inbox, and — if you connect it — your X (Twitter) handle.
Your trades, positions, realized and unrealized PnL, follows, referrals, claims, wallet addresses, and the on-chain transactions those produce. Also the ordinary technical records any service keeps: request logs, IP address, device and app version, error traces, and product analytics about which screens and commands get used.
Private keys and seed phrases. Not in our database, not in our logs, not in our network traces. Nobody from Bid will ever ask you for one.
Bid is a social network, so some information is published by design. Your privacy tier decides how much:
You can also hide your Telegram @username separately, so you are shown by display name everywhere instead, and control who may DM you.
One exception, deliberately. A trade you place inside a group is announced to that group whatever your tier — everyone there watched you run the command, and a silent trade on a public floor would be misleading. Your tier still governs everywhere else.
Your wallets and every transaction they make exist on public blockchains. That data is permanent, worldwide, and outside anyone's control, including ours. It cannot be edited, retracted or deleted — not by us, not by you, not by a deletion request.
Anyone who learns one of your wallet addresses can see its full history. Changing your Bid privacy tier changes what Bid displays; it does not and cannot change what the chain shows.
We do not sell your personal data. We share it only with the providers that make the service work, and only to the extent they need it:
We keep account and trading records for as long as your account exists and afterwards where we need them — to keep leaderboards and historical seasons coherent, to resolve disputes over money, and to meet legal obligations. Technical logs are kept for a short period for security and debugging.
Deleting your Bid account removes your profile and stops the service processing you. It does not, and cannot, remove your on-chain history.
Depending on where you live, you may have the right to access the personal data we hold about you, correct it, delete it, object to or restrict how we use it, or receive it in a portable form. You may also have the right to complain to your local data-protection authority.
Exercise any of these by writing to contact@bidbot.club. We will need to be satisfied you control the Telegram account in question before acting on a request about it.
Signing is isolated in its own service with policy limits, and withdrawals sit behind stricter gates — every one is confirmed by you, and a first withdrawal to an address you have never used is held for two hours with a cancel button, so a hijacked Telegram session cannot quietly drain you.
No system is perfectly secure. The weakest link is almost always your Telegram account: set a strong password, turn on two-step verification, and do not leave sessions open on devices you do not control.
Bid is not for anyone under 18. We do not knowingly collect data from children. If you believe a minor is using Bid, tell us and we will close the account.
We will post changes to this policy here with a new "last updated" date, and we will flag material ones in the app.
Questions, requests, or anything you think this page gets wrong: contact@bidbot.club.