Data Protection

Privacy Policy

Last Updated: 5/14/2026

1. Information We Collect

When you use DigiAucta, we may collect the following types of information:

  • Account Information: Name, email address, password hash, and profile image.
  • Transaction Data: Bidding history, auction purchases, fixed-price purchases, and payment status (all sensitive cards are processed strictly via secure payment gateways).
  • Payout Data: Configuration details for your preferred payout method (such as Payoneer email, Wise email/IBAN, Crypto address, or Local Bank details).
  • Community Interactions: Public Q&A questions, direct messages between buyers and sellers, curated Collections, and public seller Reviews.
  • Usage Data: Information on how you interact with the marketplace, IP addresses, and browser types.

2. How We Use Your Data

Your information is used to provide, maintain, and improve the DigiAucta marketplace. Specifically, we use your data to:

  • Facilitate user authentication and account management.
  • Process transactions and provide secure escrow environments.
  • Send critical notifications regarding your auctions and bids (e.g., outbid notifications).
  • Deliver customer support and respond to your queries.

3. Third-Party Services

We may share your data with select third-party service providers required to operate the platform:

  • Payment Processors: For processing payments. Our payment gateway acts as the payment processor, handling global compliance.
  • Cloud Hosting & Storage: For securely storing platform databases, user uploads, and digital asset zip files (e.g., AWS, Vercel Blob, UploadThing).
  • Resend: For delivering transactional emails and notifications.

4. Data Security

The security of your data is paramount. We employ industry-standard encryption, secure server architecture, and authorized access controls to prevent unauthorized access or disclosure of your personal information.

5. Your Rights

Depending on your location (e.g., GDPR in Europe, CCPA in California), you may have the right to request access to, correction of, or deletion of your personal data. Please contact us via our Contact Page to exercise these rights.

Disclaimer: This is a boilerplate Privacy Policy. It is recommended to consult a legal professional to ensure full compliance with regional data processing laws like GDPR or CCPA.