Privacy notice
Clear expectations for wallet-authenticated campaign orders, reviewed advertising and on-chain payments.
DRAFT — PROFESSIONAL LEGAL REVIEW REQUIRED BEFORE LAUNCH
Creator accounts and data
AIRTIME processes public wallet addresses and signed authentication challenges, private campaign briefs, commercials, targeting requests, invoices and creator messages. Creator sessions use secure HTTP-only cookies in production. Gasless nonces expire and are single-use. No seed phrase or wallet private key is requested or stored.
Access and providers
Creator data is scoped to its authenticated owner; authorized administrators review submitted campaigns. Private storage uses short-lived signed media URLs. Supabase provides database/Auth/storage, Helius provides mainnet data and CoinGecko provides SOL pricing. Advertising partners receive only the information needed to fulfill approved orders.
Retention and privacy rights
Blockchain payments are public and cannot be erased from Solana. AIRTIME retains invoice and review audit evidence; campaign media and account retention policies must be finalized by the operator before launch. Rate-limit identifiers are hashed. No marketing analytics are installed by default.
Professional review
The operator must publish data-controller identity, hosting regions, subprocessors, retention periods, contact and applicable privacy rights after professional review. This draft does not claim compliance.