Privacy Policy

1. What we collect

CRA Marketplace is built on a wallet-first model. We collect the minimum data needed to operate the service:

— Your connected Solana public address and the role (employer / worker) you sign up with.

— Profile details you choose to add, such as a display name, bio, and avatar URL.

— On-chain data generated by your use of the service: briefs you post, proposals you submit, contracts, escrow transactions, disputes, and bounty activity.

— Technical data such as your IP address, browser type, and device information for security and abuse prevention.

2. Wallet and signing data

We never receive, store, or have access to your private keys or seed phrases. Wallet sign-in uses Sign-In With Solana (SIWS) so that you sign a session message with your own wallet — we only verify the signature on-chain.

Authentication is cookie-based. The session cookie is set after a successful SIWS verification and is removed when you sign out.

3. Public on-chain data

The Solana blockchain is public. Wallet addresses, escrow amounts, and payment transactions related to your contracts are visible to anyone with the transaction reference.

By using the service you accept that on-chain data, once recorded, cannot be deleted or made private.

4. How we use data

We use your data to: operate and secure the service; match you with briefs and contracts; enforce the escrow and dispute process; display reputation and activity; and comply with legal obligations.

We do not sell your personal data. We do not use your data for advertising.

5. Sharing

Your public wallet address and displayed profile are shared with other users as part of the marketplace (e.g., a worker sees the employer they're contracting with).

We may share data with service providers (such as hosting) who process it on our behalf and are bound to protect it.

We may disclose data where required by law, regulation, or legal process.

6. Data retention

Off-chain account data is retained while your account is active. You can delete your profile or contact us to remove your account; on-chain records necessarily remain.

Technical logs may be retained for a limited period for security purposes.

7. Your rights

You can view and edit the profile information you've provided at any time from your profile page.

Where applicable law grants you rights to access, correct, or erase personal data, you may exercise them by contacting us.

8. Changes to this policy

We may update this policy as the service evolves. Changes will be published on this page.

This document was last updated on September 2026.