Privacy & Terms

Privacy Policy

Last updated: October 5, 2025

This Privacy Policy (“Policy”) describes how our platform (“we”, “us”, or “our”) collects, uses, processes, and protects information from users (“you” or “your”). Your privacy is of paramount importance to us. We are deeply committed to protecting it through our compliance with this policy and ensuring full transparency in how your data is handled in accordance with applicable data protection laws, including principles outlined in the General Data Protection Regulation (GDPR). This Policy applies to all services, websites, and applications offered through our platform (collectively, the "Services").

1. Information We Collect

To provide our services effectively and securely, we adhere to the principle of data minimization. This means we only collect the information that is strictly necessary for the functionality of our platform. We consciously avoid collecting any sensitive personal information.

• Telegram Public Data: When you authenticate via Telegram’s secure protocol, we receive a limited set of your public profile data. This includes your unique Telegram User ID, first name, and public username (@YourUsername), if you have one. This data is essential for creating your user identity on our platform, linking your account to your transactions, and displaying a human-readable profile in deal interfaces instead of a long, cryptic wallet address. We do not receive, store, or request access to your phone number, private messages, contact list, or any other private information from your Telegram account.
• Transaction Data: We record public, non-personally identifiable details of transactions conducted on our platform. This includes the username being traded (as an NFT), the transaction amount in cryptocurrency, timestamps, and the public wallet addresses of the buyer and seller. This information is immutably and permanently stored on the TON blockchain. This is a fundamental requirement for transaction validation, public verification, and establishing a clear chain of ownership. This data is public by its very nature and accessible to anyone with access to a TON blockchain explorer. We cannot modify or delete this on-chain data.
• Technical & Usage Data: When you interact with our service, we may automatically collect certain non-personally identifiable information. This can include your IP address, browser type and version, device information (e.g., screen resolution, operating system), referral source, pages visited, time spent on pages, and general clickstream data. This data is used in an aggregated form for analytics to improve user experience, for performance monitoring, debugging, and for vital security purposes like preventing Distributed Denial of Service (DDoS) attacks, detecting malicious bots, and identifying potentially fraudulent activity. This information is not used to personally identify you.
• Support Communications: When you contact our support team for assistance, we will collect and store the contents of your communication. This includes your Telegram ID, username, the messages you send, and any other information you voluntarily provide. This is necessary to understand your issue, provide a relevant and timely resolution, maintain a record of our interaction for quality assurance, and to improve our overall support services.

2. How We Use Your Information

Your information is processed based on the necessity to perform our services, our legitimate interests in maintaining a secure and functional platform, and our legal obligations. Your data is used for the following specific purposes:

• Service Provision: To create and manage your account, facilitate and verify transactions, execute smart contracts correctly, display your public transaction history, and enable you to interact with the various features and other users on the platform. This is the core purpose for which we collect data.
• Security & Verification: To proactively monitor for and prevent fraudulent, unauthorized, or illegal activities. This includes analyzing technical data to protect the integrity of our platform, investigating suspicious transactions, enforcing our Terms of Service, and protecting our systems from cyber threats.
• Communication: To provide you with essential customer support, respond to your inquiries, and send important service-related notices. These communications are strictly transactional and not for marketing purposes. Examples include transaction confirmations, dispute status updates, security alerts, or notifications about material updates to our policies.
• Service Improvement: To analyze usage trends and user behavior in an aggregated and anonymized form. This helps us understand which features are most valuable, identify areas for improvement, troubleshoot issues, and enhance the overall functionality, performance, and user experience of our Services. This data helps us make informed decisions about future development.

3. Legal Basis for Processing

Our legal basis for collecting and using the personal information described above will depend on the personal information concerned and the specific context in which we collect it. We primarily process data on the following grounds:

• Performance of a Contract: The majority of our data processing is necessary to provide the Services you have requested and to fulfill our contractual obligations under our Terms of Service. For example, using your Telegram ID to link a transaction to your account is an essential part of the service contract between you and us.
• Legitimate Interests: We process some data for what we deem to be our legitimate interests, such as for platform security, fraud prevention, and service improvement. We only do this where our interests are not overridden by your fundamental data protection rights and freedoms. For instance, analyzing IP addresses to mitigate a DDoS attack is a legitimate interest.
• Legal Obligation: In certain circumstances, we may have a legal obligation to collect, use, or disclose your information, for example, in response to a lawful request from a government authority or to comply with applicable anti-money laundering (AML) or other financial regulations.
• Consent: For any processing that is not covered by the legal bases above, such as for the use of non-essential cookies or for sending promotional marketing communications (which we currently do not send), we would seek your explicit, informed consent before any data processing occurs.

4. Data Storage and Protection

We implement and maintain robust administrative, technical, and physical security measures designed to protect your information from unauthorized access, loss, misuse, modification, or disclosure. We take the security of your data very seriously. Our security practices include:

• Encryption: All data transmitted between your device and our servers is encrypted in transit using industry-standard protocols like Transport Layer Security (SSL/TLS).
• Access Control: Access to user data on our servers is strictly limited on a need-to-know basis to authorized personnel who are subject to strict confidentiality obligations and require such access to perform their job functions (e.g., customer support or technical maintenance).
• Data Minimization: We are committed to collecting only the data that is strictly necessary for the purposes outlined in this policy. Crucially, we are a non-custodial platform, meaning we do not store your private keys or other sensitive wallet information, which remain in your sole control.
• Infrastructure Security: We utilize secure, reputable cloud infrastructure providers with built-in security features to protect against common threats. We regularly review and update our security practices to adapt to new threats and challenges.

5. Sharing and Disclosure of Information

We do not sell, rent, or lease your personal data to third parties for their marketing or any other purposes. Your information is shared only under the following limited and transparent circumstances:

• Public Blockchain: Transactional data is, by its very nature, public and permanently recorded on the TON blockchain. This includes wallet addresses, transaction amounts, and NFT identifiers. This is a core feature of how blockchain technology works and is outside of our direct control. You should be aware of this public nature before engaging in transactions.
• Legal Compliance and Safety: We may disclose your information to law enforcement, government officials, or other third parties if we are compelled to do so by a subpoena, court order, or similar legal procedure. We may also do so if we believe in good faith that the disclosure is necessary to prevent physical harm or financial loss, to report suspected illegal activity, or to investigate violations of our Terms of Service.
• Service Providers: We may engage trusted third-party companies and individuals to perform services on our behalf (e.g., cloud hosting providers, security analytics services, customer support software). These providers are contractually obligated to protect your data with a level of care equivalent to our own and are strictly restricted from using it for any other purpose than what we have contracted them for.
• Business Transfers: In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you of any such deal and outline your choices in that event.

6. Data Retention

We retain your public Telegram information stored on our servers for as long as your account remains active on our platform, or as long as necessary to provide you with continuous service. As stated, transactional data recorded on the TON blockchain is permanent and cannot be altered or deleted by us or anyone else. You may request the deletion of your account information from our servers by contacting us. Upon receiving such a request, we will delete your data from our active databases, subject to any legal or regulatory obligations that may require us to retain certain information for a specific period for purposes such as security, anti-fraud measures, and financial record-keeping.

7. Cookies and Tracking Technologies

We use essential cookies to maintain your session, remember your preferences (like language or theme), and ensure the basic functionality and security of our website. We may also use analytics cookies (e.g., from privacy-focused providers) to understand how users interact with our service in an anonymous and aggregated manner. These cookies are not used for targeted advertising. We distinguish between session cookies (which expire when you close your browser) and persistent cookies (which stay on your device for a set period). You can control or refuse cookies through your browser settings, but be aware that disabling essential cookies may cause some parts of our service to not function correctly.

8. Your Rights and Choices

Depending on your jurisdiction, you have certain rights regarding your personal data under laws like the GDPR. We are committed to upholding these rights for all our users, regardless of their location:

• Right to Access: You have the right to request a copy of the personal information we hold about you.
• Right to Rectification: You can update your public Telegram information (e.g., first name, username) directly through your Telegram app. This change will be reflected on our platform upon your next authentication.
• Right to Erasure (Right to be Forgotten): You may request the deletion of your account and associated public data stored on our servers by contacting our support team, subject to the legal limitations and on-chain data permanence outlined in Section 6.
• Right to Object: You may have the right to object to our processing of your data where we are relying on a legitimate interest as our legal basis.
• Right to Restrict Processing: You can ask us to suspend the processing of your personal data in certain scenarios, for example, if you contest its accuracy.
• Right to Data Portability: You may request that we provide your data in a structured, commonly used, and machine-readable format to you or another service.
• Right to Lodge a Complaint: You have the right to lodge a complaint with a data protection authority about our collection and use of your personal information.

To exercise any of these rights, please contact us through our designated support channels.

9. International Data Transfers

Our services are global in nature, which means your information may be stored and processed on servers located in countries outside of your country of residence, where data protection laws may differ. We take all necessary measures to ensure that your data is treated securely and in accordance with this Privacy Policy, regardless of where it is processed. When we transfer personal data, we rely on legally-provided mechanisms to lawfully transfer data across borders, such as the Standard Contractual Clauses (SCCs).

10. Children's Privacy

Our services are not intended for or directed to individuals under the age of 18 or the age of legal majority in their jurisdiction, whichever is higher. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal information in violation of applicable law, we will take steps to delete such information immediately. If you are a parent or guardian and believe your child has used our services, please contact us.

11. Updates to This Policy

We reserve the right to amend this Policy at any time to reflect changes in our practices, our Services, or for other operational, legal, or regulatory reasons. Updated versions will be posted on the Platform with the new effective date. For material changes, we may provide a more prominent notice, such as a banner on our website or a direct notification. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of the platform after such changes constitutes your acceptance of the new Policy.

12. Contact Us

If you have any questions, concerns, feedback, or requests regarding this Privacy Policy or how we handle your data, please do not hesitate to contact us through the official contact form or support channel provided on our platform. We are committed to resolving any privacy-related issues you may have.