1. Information we collect
- Account information. Your email address (provided when you sign in), and a profile you create: username, display name, and avatar image.
- Wallet & blockchain data.The blockchain address of the smart wallet created for you by our authentication provider, and the on-chain transactions you make (deposits, escrow funding, purchases, releases, refunds). Blockchain data is public by nature. See “Blockchain data is public” below.
- Transactions & orders. Records of your purchases, sales, orders, amounts, fees, settlement outcomes, and reviews.
- Content & files. Product listings, files you upload to sell, and images.
- Messages. Chat messages you exchange with a counterparty about an order.
- Device & notifications. If you enable notifications, a push token for your device or browser so we can deliver alerts.
- Technical & usage data. Basic logs and request data needed to operate and secure the service, plus analytics events (such as page views and feature usage) collected via Google/Firebase Analytics, which may use cookies or similar identifiers.
2. How we use information
- Provide the marketplace: accounts, listings, orders, escrow, downloads, and messaging.
- Process and confirm on-chain payments and settlements.
- Send transactional emails and (if enabled) push notifications about your orders, deliveries, payments, and messages.
- Maintain security, prevent fraud and abuse, and comply with law.
- Understand aggregate usage and transaction volume to improve the product.
3. Service providers
We share data only as needed with providers that help us run ClaspMarket:
- Privy: authentication and embedded smart wallets.
- Supabase: database, file storage, and backend functions.
- Vercel: web hosting.
- Firebase Cloud Messaging (Google): push notification delivery.
- Google / Firebase Analytics: aggregate usage analytics.
- Resend: transactional email delivery.
- MoonPay: optional card-to-USDC purchases. MoonPay collects and processes your payment and identity information directly under its own privacy policy.
- The Base / Ethereum network: a public blockchain that records on-chain transactions.
We do not sell your personal information.
4. Blockchain data is public
ClaspMarket is non-custodial: payments happen on the Base blockchain through smart contracts, and we never hold your funds. Wallet addresses, transaction amounts, and escrow activity are public and permanent. Anyone can view them, and they cannot be edited or deleted, by us or anyone else. Please keep this in mind when transacting.
5. Data retention
We keep off-chain data (profile, orders, messages, files) for as long as your account is active or as needed to provide the service and meet legal obligations. On-chain data is permanent and outside our control.
6. Your rights & choices
- Access or correct your profile information from your account settings.
- Turn notifications on or off at any time in your account or browser settings.
- Request deletion of your off-chain account data by contacting us at support@claspmarket.com. Note that on-chain records cannot be deleted.
7. Security
We use reputable infrastructure and reasonable safeguards to protect your information. No method of transmission or storage is 100% secure, and you are responsible for keeping your login and device secure.
8. Children
ClaspMarket is not directed to anyone under 18, and we do not knowingly collect information from children.
9. International users
Our providers may process data in countries other than yours. By using ClaspMarket you consent to such processing.
10. Changes
We may update this policy. Material changes will be reflected by the “Last updated” date above, and where appropriate we will notify you.