Privacy Policy

Introduction & Core Philosophy

At Aquarelia.io, we believe privacy is a fundamental right. This Privacy Policy details our data minimization practices and explains how we handle your personal data. We strictly limit data collection to the minimum viable set necessary to operate a secure, transparent digital art marketplace.

Your data belongs entirely to you. We never sell, rent, or commercialize your personal data to advertisers or third-party data brokers. Our infrastructure gives you complete autonomy over your digital footprint, with built-in capabilities to publish anonymously, manage visibility, or permanently delete your account.

Information We Collect

We collect only the information essential to deliver platform services and maintain the integrity of our cryptographic provenance noticeboard:

• Account Information: Chosen username, email address, and encrypted authentication credentials.
• Financial & Payment Data: All payment transactions, fiat payouts, and identity verifications are handled securely by our licensed partner, Stripe. Aquarelia never stores full payment card numbers, CVVs, or bank account details on its servers.
• Platform Activity: Marketplace transactions, active bids, direct communications, and artwork uploads registered for provenance tracking.
• Technical Telemetry: De-identified server metrics and UI performance telemetry to monitor system stability and latency.

How We Use Your Data

Your information is used exclusively to:

• Execute marketplace transactions and facilitate accurate creator payouts.
• Maintain the security of the ecosystem and actively enforce our Terms of Service.
• Bind cryptographic provenance signatures (C2PA) to certified digital artworks.
• Deliver essential account alerts, customer support, and system status notifications.

Zero-Tracking & Cookie Standards

Aquarelia is engineered with a zero-tracking framework. We do not utilize third-party advertising cookies, behavioral trackers, or invasive cross-site pixels.

We exclusively deploy Strictly Necessary, HttpOnly session tokens to securely authenticate users and manage active sessions. Because we do not run behavioral advertising or invasive analytics, you will not encounter cookie consent banners on our platform.

Data Security & Retention

We use industry-standard encryption protocols to protect all information. De-identified performance logs are automatically purged on a rolling 14-day cycle. Account and profile data are retained only for the active lifecycle of your account.

Your Rights & Account Deletion

Regardless of your jurisdiction, you hold full statutory rights to access, rectify, export, or permanently delete your personal data.

Completing an account deletion places your profile into a 20-day grace period. If unrecovered, the system permanently purges your node ID, irreversibly wipes all private messages, and severs all links to previously generated assets, leaving behind zero trace.