Privacy Policy
1. Introduction & Scope
This Privacy Policy ("Policy") explains how LabelYX ("LabelYX", "we", "us", or "our") collects, uses, stores, shares, and otherwise processes information, including personal data, when you:
- Visit or use the LabelYX website and any subdomains (the "Website"),
- Access, connect to, or interact with the LabelYX marketplace and creator tools, or otherwise communicate with us.
For the purposes of applicable data protection laws (including GDPR), LabelYX is the "data controller" of your personal data.
2. Who We Are
LabelYX operates as a decentralized protocol interface. While we facilitate the interaction between Creators and Buyers, we generally do not take custody of assets.
Note on Decentralization: We are building towards a DAO structure. Currently, data is processed by the core development team.
3. Personal Data We Collect
Information You Provide
- Contact Information: Email address (via Privy or newsletter signup).
- Profile Data: Username, biography, profile links, and avatars.
- Content: Images, metadata, and descriptions you upload.
Information Collected Automatically
- Wallet Address: Public keys used to interact with the protocol.
- Usage Data: Pages visited, time spent, referrer URLs, and interaction logs.
- Technical Data: IP address, browser type, device type, and OS.
4. Third-Party Wallets & Important Disclaimer
To use the Platform, you must use a non-custodial digital wallet (e.g., MetaMask, Privy, Coinbase Wallet).
We do not have access to your private keys or seed phrases. If you lose access to your wallet, we cannot recover it for you.
5. Legal Basis for Processing (GDPR)
We process your personal data relying on the following legal bases:
- Performance of Contract: To provide the marketplace services, facilitate transactions, and enforce Terms of Service.
- Legitimate Interests: To prevent fraud, ensure security, improve our AI models, and analyze platform performance.
- Consent: For optional cookies, marketing emails, or specific features.
- Legal Obligation: To comply with tax, AML, and regulatory requirements.
6. How We Use Personal Data
We use your data to:
- Provide and maintain the Service.
- Process transactions and facilitate smart contract interactions.
- Detect and prevent fraud (e.g., duplicate image detection).
- Communicate with you regarding updates, security alerts, and support.
- Comply with legal obligations (e.g., tax reporting if applicable).
7. Cookies and Usage Data
We use cookies to enhance your experience. You can manage your preferences via our Cookie Settings banner.
- Essential Cookies: Necessary for wallet connection and security.
- Analytics Cookies: Help us understand how visitors interact with the site (Google Analytics).
8. Your Rights
Depending on your location (GDPR, CCPA, LGPD), you have rights regarding your data:
- Right of Access: Request a copy of your personal data.
- Right to Rectification: Correct inaccurate data.
- Right to Erasure: Request deletion of off-chain data (we cannot delete blockchain data).
- Right to Restriction: Limit processing of your data.
- Right to Portability: Receive data in a structured format.
See Section 17 for contact details to exercise these rights.
10. International Data Transfers
Your data may be transferred to and maintained on computers located outside of your state or country. We use Standard Contractual Clauses (SCCs) and other mechanisms to ensure data protection during these transfers.
13. Security Measures
We use industry-standard security including SSL/TLS encryption, secure S3 storage for assets, and strict access controls. However, no method of internet transmission is 100% secure.
17. Contact & Data Requests
If you have any questions about this Privacy Policy or wish to exercise your rights, please contact our Data Protection Team:
Subject: Privacy Request [GDPR / CCPA]
You may use the template provided in Appendix B of our internal policy when emailing to ensure faster processing.