Privacy Policy
Last updated: August 2026
What information we collect
We only ask for the data needed to run the marketplace and comply with the identity verification required to buy and sell:
Identity verification (KYC)
Full name, date of birth, document type and number, and three photos (front, back, and a selfie holding the document). These are stored in private storage that only the Ikiraro team can review to approve or reject the request.
Account data
The wallet addresses you link and, if you choose to link one, an email -- we use it for security alerts and to help you recover access to your account if you lose a wallet.
Usage data
Shipping addresses you enter, purchase and sales history, chat messages (with sellers, buyers, or support), and reviews you leave or receive.
Automatic data
A session cookie to keep you logged in, and your language and reference currency preference. We don't use advertising or third-party tracking cookies.
What we use it for
- Verifying your identity before enabling you to buy or sell, as required for operating with real payments.
- Processing your purchases and sales, including escrow management.
- Resolving disputes between buyer and seller when a claim is opened.
- Sending you alerts about your account, your orders, and your verification (via the site's bell, and by email too if you linked one).
- Complying with legal obligations that apply to the platform.
Who we share it with
We don't sell your data to anyone. What is shared, in a limited way:
The blockchain is public
Deposits and fund releases happen on Polygon, a public network -- anyone can see your wallet address and the amounts of those transactions on a blockchain explorer. This isn't an Ikiraro setting, it's how any public blockchain works. Your name and identity documents are NEVER uploaded to the blockchain -- those always stay in our private storage.We also use infrastructure providers to run the site (database and storage, email delivery, hosting) -- all under contract, none of them receive more data than needed to provide that specific service.
How long we keep it
While your account is active, and for a reasonable time afterward in case a dispute needs resolving or a legal obligation applies. You can request your account's deletion at any time (see below).
Security
Identity documents are stored in private storage, inaccessible except to you and the Ikiraro team resolving verifications. Database access is restricted row by row based on who you are, and one-time codes (like account recovery codes) are stored hashed, never in plain text.
Your rights
You can view and correct your account data at any time from Account security, and from there delete your account entirely whenever you want -- that action erases your wallet, your profile, and all your data on Ikiraro.
Changes to this policy
If we make significant changes to this policy, we'll notify you through the site's bell or by email before they take effect.