Privacy Policy

BNTY is the data controller responsible for your personal data in connection with the Platform. For any privacy-related questions, requests, or complaints, contact our privacy team at privacy@bnty.market.

If you are located in the European Economic Area (EEA), the United Kingdom, or another jurisdiction that requires it, you may also have the right to contact a local data protection authority (see Section 12).

The Platform is intended solely for adults aged 18 years or older. We do not knowingly collect personal data from anyone under the age of 18. During onboarding we require your date of birth and verify that you meet the minimum age requirement. If we become aware that we have collected personal data from a person under 18, we will delete that data promptly.

We collect the following categories of personal data:

• Account & identity data: email address, username, display name, avatar image, and authentication identifiers.
• Age verification data: your date of birth, which we store privately and separately from your public profile, and which is never shown to other users.
• Profile & content data: bio, bounties you post, submissions, proof you upload, comments, votes, and any other content you choose to share.
• Wallet & blockchain data: the Solana wallet address you link for payouts, and the public on-chain transactions associated with funding and payouts (amounts, addresses, timestamps, and transaction signatures).
• Transaction & escrow data: records relating to bounty rewards, escrow funding, releases, refunds, and disputes.
• Technical & usage data: IP address, device and browser type, general location inferred from IP, pages viewed, and interactions with the Platform.
• Cookies & similar technologies: as described in our Cookie Policy.

We process your personal data only where we have a lawful basis to do so. Depending on the activity, the legal basis is one of the following:

• Performance of a contract — to create and manage your account, operate bounties and escrow, and provide the services you request.
• Legitimate interests — to secure the Platform, prevent fraud and abuse, enforce our Terms, and improve our services, balanced against your rights.
• Legal obligation — to comply with applicable laws, including age verification, tax, accounting, and anti-fraud requirements.
• Consent — for non-essential cookies and optional communications, which you may withdraw at any time.

We do not sell your personal data. We share data only as necessary:

• With other users — your public profile, bounties, submissions (where applicable), comments, and votes are visible to others as part of how the Platform works. Your email and date of birth are never made public.
• With service providers — trusted vendors who process data on our behalf under strict confidentiality and data-processing terms: our database and authentication provider (Supabase), application hosting (Vercel), transactional email delivery (Resend), and blockchain infrastructure providers used to read from and write to the Solana network.
• For legal reasons — where required by law, regulation, legal process, or to protect the rights, property, or safety of BNTY, our users, or the public.
• In a business transfer — in connection with a merger, acquisition, or sale of assets, subject to this Policy.

Your data may be processed in countries outside your own, including outside the EEA or the UK. Where we transfer personal data internationally, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses (and the UK International Data Transfer Addendum where applicable) to ensure your data receives an equivalent level of protection.

We retain personal data only for as long as necessary to fulfil the purposes set out in this Policy, including to provide the services, comply with our legal obligations, resolve disputes, and enforce our agreements. When data is no longer required, we securely delete or anonymise it. You may delete your account at any time from your settings, which removes your associated personal data, subject to records we are legally required to retain.

Blockchain data cannot be deleted. Transactions on the Solana blockchain (including wallet addresses and amounts involved in escrow funding and payouts) are recorded on a public, decentralised ledger that BNTY does not control and cannot alter or erase. Deleting your BNTY account removes the link between your identity and your wallet address in our systems, but the on-chain records themselves remain public and permanent. Please consider this before linking a wallet.

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include encryption in transit, strict access controls, row-level security on stored data, and the principle of least privilege. No method of transmission or storage is completely secure, but we continually work to protect your information.

If you are in the EEA or the UK, you have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you.
• Rectification — request correction of inaccurate or incomplete data.
• Erasure — request deletion of your data (“right to be forgotten”).
• Restriction — request that we limit how we process your data.
• Portability — receive your data in a structured, machine-readable format.
• Objection — object to processing based on legitimate interests.
• Withdraw consent — withdraw consent at any time where processing relies on it.

To exercise any of these rights, contact privacy@bnty.market. We will respond within the timeframes required by law.

If you are a California resident, you have the right to know what personal information we collect, use, and disclose; to request deletion or correction; and to opt out of the “sale” or “sharing” of personal information. We do not sell or share your personal information as those terms are defined under the CCPA/CPRA. You also have the right not to be discriminated against for exercising your privacy rights. To make a request, contact privacy@bnty.market.

We honour applicable privacy rights for users in Canada (PIPEDA), the United Kingdom (UK GDPR / Data Protection Act 2018), and across Asia-Pacific jurisdictions (including, where applicable, Singapore's PDPA, Japan's APPI, and similar frameworks). Where local law grants you additional rights, we will give effect to them. If you are unsure of your rights, contact us and we will assist.

You have the right to lodge a complaint with a supervisory authority. In the EEA, this is the data protection authority in your country of residence; in the UK, this is the Information Commissioner's Office (ICO). We would, however, appreciate the chance to address your concerns first — please contact us before doing so.

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, notify you. Your continued use of the Platform after changes take effect constitutes acceptance of the updated Policy.

For any questions about this Privacy Policy or our data practices, contact privacy@bnty.market. See also our Terms of Service and Cookie Policy.