Privacy Policy

We collect personal information that you provide directly to us when you create an account, list data for sale, or purchase data through our platform.

• Name, email address, and contact information
• Payment information and billing details
• Professional information (company, role, industry)
• Identity verification documents (as required by law)
• Communication preferences and account settings

When you participate in our data marketplace, we collect information about your transactions and data offerings.

• Data descriptions, categories, and metadata
• Licensing preferences and pricing information
• Transaction history and payment records
• Data usage analytics and access logs
• Quality ratings and marketplace feedback

We automatically collect certain technical information when you use our platform.

• IP address, browser type, and device information
• Usage patterns, page views, and navigation data
• API access logs and authentication records
• Performance metrics and error reports
• Security event logs and access attempts

We use your information to provide and improve our marketplace services.

• Create and manage your account and profile
• Process data listings and marketplace transactions
• Facilitate secure data transfers and licensing
• Provide customer support and technical assistance
• Send important service notifications and updates

We use information to enable the core functions of our ethical data marketplace.

• Match data owners with appropriate AI developers
• Verify data provenance and rights clearance
• Process payments and revenue sharing
• Monitor usage compliance with licensing terms
• Generate analytics and marketplace insights

We may use your information to comply with legal obligations and protect our platform.

• Comply with applicable laws and regulations
• Prevent fraud, abuse, and unauthorized access
• Enforce our Terms of Service and licensing agreements
• Respond to legal requests and court orders
• Protect the rights and safety of our users

We employ industry-standard technical measures to secure your data.

• End-to-end encryption for data in transit and at rest
• Multi-factor authentication and access controls
• Regular security audits and penetration testing
• Secure cloud infrastructure with AWS compliance certifications
• Automated threat detection and incident response systems

Our team follows strict protocols to ensure data protection.

• Employee background checks and security training
• Role-based access controls and principle of least privilege
• Regular security awareness training and updates
• Incident response procedures and breach notification protocols
• Third-party security assessments and compliance audits

Special security measures for marketplace transactions and data handling.

• Token-gated access with usage metering and monitoring
• Blockchain-based provenance verification (where applicable)
• Secure data escrow services for high-value transactions
• Automated compliance monitoring for licensing terms
• Secure deletion protocols for expired or revoked data

If you are located in the European Union, you have the following rights under the General Data Protection Regulation.

• Right of access: Request copies of your personal data
• Right to rectification: Request correction of inaccurate data
• Right to erasure: Request deletion of your personal data
• Right to restrict processing: Limit how we use your data
• Right to data portability: Receive your data in a portable format
• Right to object: Object to certain types of data processing
• Right to withdraw consent: Withdraw consent for data processing

If you are a California resident, you have rights under the California Consumer Privacy Act.

• Right to know: Information about data collection and use
• Right to delete: Request deletion of personal information
• Right to opt-out: Opt-out of the sale of personal information
• Right to non-discrimination: Equal service regardless of privacy choices
• Right to correct: Request correction of inaccurate personal information

To exercise any of these rights, please contact us using the information provided in the Contact section. We will respond to your request within the timeframes required by applicable law.

• Submit requests through our privacy portal or email
• Provide sufficient information to verify your identity
• Specify which rights you wish to exercise
• We will respond within 30 days (or as required by law)
• Appeals process available for denied requests

We use different types of cookies for various purposes on our platform.

• Essential cookies: Required for basic platform functionality
• Performance cookies: Help us analyze and improve our services
• Functional cookies: Remember your preferences and settings
• Analytics cookies: Understand how you use our platform
• Security cookies: Protect against fraud and unauthorized access

Some cookies are placed by third-party services we use to enhance our platform.

• Analytics providers (e.g., Google Analytics)
• Payment processors for secure transactions
• Customer support and chat services
• Security and fraud prevention services
• Performance monitoring and optimization tools

You have control over how cookies are used on our platform.

• Adjust cookie preferences in your browser settings
• Use our cookie consent management tool
• Opt-out of non-essential cookies while maintaining functionality
• Clear existing cookies through your browser
• Note: Disabling essential cookies may affect platform functionality

We use third-party services for various aspects of our platform operations.

• Cloud infrastructure and hosting (AWS)
• Payment processing and financial services
• Email delivery and communication services
• Analytics and performance monitoring
• Customer support and help desk services
• Security and fraud prevention tools

We only share data with third parties as necessary to provide our services.

• Minimal data sharing based on service requirements
• Contractual data protection obligations for all partners
• Regular audits of third-party data handling practices
• Immediate notification of any data security incidents
• Right to audit and inspect third-party security measures

Some of our service providers may be located outside your country of residence.

• Adequate protection measures for international transfers
• Standard Contractual Clauses (SCCs) where applicable
• Compliance with applicable data transfer regulations
• Regular review of international transfer mechanisms
• Notification of any changes to transfer arrangements

Different types of data are retained for different periods based on their purpose.

• Account information: Retained while your account is active
• Transaction records: 7 years for financial and tax compliance
• Communication logs: 3 years for customer support purposes
• Security logs: 1 year for security monitoring and incident response
• Marketing data: Until you opt-out or withdraw consent

We have automated systems to ensure data is deleted when retention periods expire.

• Scheduled deletion jobs for expired data
• Secure deletion methods that prevent data recovery
• Audit logs of all deletion activities
• Verification processes to ensure complete removal
• Exception handling for legal hold requirements

When you close your account, we follow specific procedures for data handling.

• Immediate deactivation of account access
• Retention of transaction records as required by law
• Deletion of personal preferences and non-essential data
• Anonymization of data used for analytics purposes
• Complete deletion after all legal retention periods expire

We use legally recognized mechanisms to protect your data during international transfers.

• Adequacy decisions by relevant data protection authorities
• Standard Contractual Clauses (SCCs) approved by the European Commission
• Binding Corporate Rules (BCRs) where applicable
• Certification schemes and codes of conduct
• Specific derogations for particular situations as permitted by law

Additional measures we implement to protect your data during international transfers.

• Encryption of data in transit and at rest
• Regular assessment of destination country privacy laws
• Contractual obligations for data protection by recipients
• Right to object to transfers to specific countries
• Notification of any changes to transfer arrangements

You have rights related to international transfers of your personal data.

• Right to be informed about international transfers
• Right to object to transfers in certain circumstances
• Right to request information about safeguards in place
• Right to lodge complaints with supervisory authorities
• Right to seek judicial remedies for unlawful transfers

We act as an intermediary platform connecting data owners with AI developers seeking training data.

• We do not own the data listed on our marketplace
• We facilitate secure transactions and licensing agreements
• We verify data ownership and rights before listing
• We provide escrow services for high-value data transactions
• We monitor compliance with licensing terms and usage restrictions

We implement strict protocols for handling data during marketplace transactions.

• Secure data transfer protocols with end-to-end encryption
• Temporary storage only as necessary to facilitate transfers
• No access to the actual data content during transfers
• Automated deletion of temporary copies after successful transfer
• Audit trails for all data handling activities

We perform quality checks and verification processes to ensure data integrity.

• Automated scanning for data quality and completeness
• Verification of data ownership and licensing rights
• Compliance checks for privacy and regulatory requirements
• Metadata validation and standardization
• Removal of personally identifiable information where required

We ensure all data transactions include appropriate licensing for AI training use.

• Clear licensing terms that explicitly permit AI training
• Verification that data owners have rights to grant AI training licenses
• Standardized licensing agreements for different use cases
• Attribution requirements and usage restrictions as specified by data owners
• Compliance monitoring for licensed AI training activities

We promote responsible AI development through our data handling practices.

• Bias detection and mitigation in training datasets
• Diversity and representation analysis for training data
• Ethical review of intended AI applications
• Prohibition of harmful or discriminatory AI applications
• Support for AI transparency and explainability initiatives

We maintain technical standards for AI training data to ensure quality and usability.

• Standardized data formats and schemas for AI training
• Quality metrics and validation for training datasets
• Version control and lineage tracking for training data
• Performance benchmarks and evaluation metrics
• Integration support for popular AI training frameworks

We operate on a commission-based model where data owners retain the majority of revenue from their data sales.

• Transparent fee structure published on our platform
• Data owners retain 70-90% of sale proceeds (depending on service level)
• Clear breakdown of platform fees and payment processing costs
• No hidden fees or surprise deductions from payments
• Regular reporting on revenue sharing and fee calculations

We use secure, compliant payment processing systems to handle all financial transactions.

• PCI DSS compliant payment processing
• Multiple payment methods including bank transfers and digital payments
• Automated payment distribution to data owners
• Detailed transaction records and tax reporting support
• Fraud prevention and chargeback protection

We protect your financial information with the highest security standards.

• Encryption of all financial data and payment information
• Limited access to financial data on a need-to-know basis
• Regular audits of financial data handling practices
• Compliance with financial privacy regulations
• Secure deletion of financial data after required retention periods

We implement sophisticated access control mechanisms to protect licensed data.

• Cryptographic tokens for secure data access
• Time-limited access tokens with automatic expiration
• Role-based access controls for different user types
• Multi-factor authentication for sensitive data access
• Real-time access monitoring and anomaly detection

We track data usage to ensure compliance with licensing agreements.

• Automated tracking of data downloads and access patterns
• Usage analytics and reporting for data owners
• Compliance monitoring for licensing term violations
• Automated enforcement of usage limits and restrictions
• Detailed audit logs of all data access activities

We balance usage monitoring with privacy protection for data purchasers.

• Aggregated usage statistics without revealing specific use cases
• Privacy-preserving analytics that protect competitive information
• Opt-in detailed monitoring for enhanced compliance verification
• Secure storage and limited retention of usage data
• Transparency reports on usage monitoring practices

We implement rigorous verification processes to confirm data ownership and legitimacy.

• Multi-step verification of data ownership claims
• Documentation requirements for data origin and collection methods
• Third-party verification services for high-value datasets
• Blockchain-based provenance tracking for premium data
• Regular audits of provenance verification processes

We ensure all necessary rights and permissions are in place before data can be listed or sold.

• Verification of intellectual property rights and licenses
• Confirmation of consent for personal data (where applicable)
• Review of contractual obligations and restrictions
• Legal review of complex rights situations
• Insurance coverage for rights clearance errors

We continuously monitor for changes in data rights and ownership status.

• Regular re-verification of data ownership claims
• Monitoring for changes in legal status or ownership
• Automated alerts for potential rights conflicts
• Dispute resolution procedures for ownership conflicts
• Immediate suspension of disputed data pending resolution

High-value dataset transactions are managed through secure escrow services.

• Escrow managed through Acqui Trust Escrow LLC for transactions above specified thresholds
• Funds released upon verification of delivery and authenticity
• Independent verification of data quality and completeness
• Dispute resolution procedures for escrow transactions
• Insurance coverage for escrow-managed transactions

Each dataset includes comprehensive provenance tracking for transparency and verification.

• Cryptographic provenance hash stored off-chain for transparency
• Immutable record of data origin and ownership chain
• Verification of data collection methods and legal basis
• Audit trail of all data handling and processing activities
• Third-party verification available for premium datasets

Users may request deletion of their account and associated datasets at any time.

• Complete account deletion available upon request
• Deletion of all personal information and account data
• Removal of listed datasets from the marketplace
• Anonymization of transaction records where legally required to retain
• Secure deletion methods that prevent data recovery

We have established clear procedures for processing deletion requests.

• Submit deletion requests to [email protected]
• Identity verification required for security purposes
• Requests honored within 30 days of verification
• Confirmation provided upon completion of deletion
• Exception handling for legal retention obligations

Some data may be retained where legal obligations apply.

• Financial records retained for tax and regulatory compliance (7 years)
• Transaction logs retained for fraud prevention and legal compliance
• Security incident records retained for regulatory requirements
• Court orders or legal holds may prevent immediate deletion
• Clear documentation of any retained data and legal basis

Reach out to us for any privacy-related questions or requests.

• General inquiries: [email protected]
• Privacy requests: [email protected]
• Data Protection Officer: [email protected]
• Privacy Portal: Available through your account dashboard
• Response Time: We respond to privacy requests within 30 days

You have the right to lodge complaints with relevant supervisory authorities.

• EU residents: Contact your local Data Protection Authority
• UK residents: Information Commissioner's Office (ICO)
• California residents: California Attorney General's Office
• Other jurisdictions: Contact your local privacy regulator
• We will cooperate fully with any supervisory authority investigations