Privacy Policy

What we collect, why, and what stays public.

Last updated

18 August 2026. These are the operator's own terms for using ARC. They are not legal advice, and they do not override rights you have under the law where you live.

1. Our approach

ARC is wallet-first, so we collect very little. There is no email or password requirement to sign in, and we never ask for your seed phrase or private keys. We collect what is needed to run the marketplace and keep an honest record of contracts and payouts.

2. What we collect

  • Wallet address — your account identifier, plus the signed message used to prove you control it.
  • Profile data you choose to enter — display name, username, bio, skills, links, availability, rate.
  • Marketplace activity — briefs, applications, contracts, statuses, deliveries, reviews, notifications, reports.
  • Payout records — amount, currency, recipient wallet, and the Solana transaction signature we verify on chain.
  • Technical data — a session cookie for sign-in, plus server logs and error reports used to keep the app working and to prevent abuse.

We do not sell your data, we do not run advertising profiles, and we do not ask for government ID for ordinary marketplace use.

3. Public by design

Profiles, briefs, reputation scores, and reviews are publicly visible — that is the point of a reputation marketplace. Only publish in them what you are comfortable making public.

Solana is a public blockchain. Every payout — sender wallet, recipient wallet, amount, and timestamp — is permanently public and outside our control. It cannot be deleted, edited, or hidden by us or by you, and it may be linked to your other on-chain activity by third parties.

4. Cookies

We use a single HttpOnly session cookie so you stay signed in after signing the wallet challenge. It is not used for advertising or cross-site tracking. Clearing it signs you out.

5. Who processes data for us

We use infrastructure providers to host the app, store the database, and read the Solana network through a public RPC endpoint. They process data only to provide those services. Wallet software you install is controlled by its own provider, not by ARC.

6. How long we keep it

Profile content is kept while your account exists. Contract, payout, review, and moderation records are retained after account closure because they are the evidence base for reputation, disputes, tax, and abuse handling. Server logs are kept for a short operational period.

7. Your rights

Depending on where you live, you may have the right to access, correct, export, restrict, or delete personal data we hold, and to object to certain processing. You can edit or clear most profile fields yourself at any time. For anything else, contact us at legal@arc.market from an address you control and be ready to prove control of the wallet in question by signing a message.

Two limits are real and we would rather state them plainly: we cannot delete anything recorded on the Solana blockchain, and we may retain a minimal contract and payout record where we have a legal obligation or a fraud-prevention need.

8. Security

Access to marketplace data is enforced at the database level with row-level policies, and privileged actions run server-side behind authentication. No system is perfectly secure; protect your wallet, and report suspected vulnerabilities to legal@arc.market.

9. Children

ARC is not for anyone under 18, and we do not knowingly collect their data.

10. Changes and contact

We will announce material changes in the app. Questions, requests, or complaints: legal@arc.market. See also our Terms of Service and Dispute & Refund Policy.