Privacy Policy

1. Information We Collect

We collect information you provide directly when creating an account (email address, password hash), making purchases, or listing datasets. We also collect usage data automatically, including IP addresses, browser type, pages visited, and timestamps, to improve our services and ensure security.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Platform
• Process transactions and send transaction-related notifications
• Verify vendor and buyer identities
• Detect and prevent fraud, abuse, and security incidents
• Comply with legal obligations
• Communicate updates, security alerts, and support messages

3. Data Storage & Security

Account data is stored in a PostgreSQL database with encrypted connections. Dataset files are stored on Cloudflare R2 with presigned, time-limited access URLs. Passwords are hashed using bcrypt and are never stored in plain text. We implement rate limiting, webhook signature verification, and other industry-standard security measures.

4. Data Sharing

We do not sell your personal information. We may share limited information with: our payment processor (Cryptomus) to facilitate transactions; law enforcement when required by applicable law; and service providers who assist in operating the Platform under strict confidentiality agreements.

5. Cookies & Tracking

We use essential cookies to maintain your session and authentication state via secure, HTTP-only tokens stored in local storage. We do not use third-party tracking or analytics cookies. No advertising cookies are used on the Platform.

6. Your Rights

You have the right to:

• Access and download your personal data
• Correct inaccurate information in your profile
• Request deletion of your account and associated data
• Object to processing of your data for specific purposes

To exercise these rights, contact us at [email protected].

7. Data Retention

We retain account data for as long as your account is active. Transaction records are retained for 5 years for legal and tax compliance. Upon account deletion, personal data is removed within 30 days, though anonymized transaction records may be retained.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes via email or an in-app notification. Your continued use of the Platform after changes take effect constitutes acceptance of the updated policy.

9. Contact

For privacy-related inquiries, please contact us at [email protected].