Privacy policy.

What we collect

• Account: email, password hash (scrypt), display name, handle, role.
• Profile: bio, avatar URL, optional Solana wallet address.
• Activity: gigs, orders, signals, hubs, posts, reviews, messages — needed to run the marketplace.
• Logs: server access logs (IP, user-agent) kept for 30 days for debugging + abuse prevention.

What we don't collect

• No tracking cookies. No third-party ad pixels.
• No payment card numbers — payments are USDC on Solana.
• No phone numbers (unless you add 2FA in V2).

Who we share with

• Resend: sends transactional email on our behalf. They see your email + the email content.
• Railway: hosts the app + database.
• Pyth Network: public oracle we read prices from. No data is sent to Pyth.
• X (Twitter): if you OAuth-link your X account (V1.5), we receive your X user id and handle.

We do not sell, rent, or trade your data to advertisers or data brokers.

Your rights

• Access: email hello@kolhub.net for an export of your data.
• Deletion: we'll delete your account and personal data within 30 days. Public reviews may be retained anonymized.
• Portability: reviews + reputation are exported as JSON.

Cookies

We use a single kh_session httpOnly cookie for login. That's it. No analytics cookies in V1.

Contact

Privacy questions: hello@kolhub.net.