Legal

Privacy Policy

EFFECTIVE · JULY 22, 2026 · DRAFT

This document is a launch draft. Before Pebble accepts real funds it will be reviewed by qualified counsel, and the final version may differ. If anything here is unclear, ask us at @OnPebble before using the service.

1. What we collect

Account information you give us (name, email, and for Builders, business details and identity-verification documents). Wallet addresses you connect, and the public on-chain activity associated with them. For Builders, revenue data pulled through a read-only payment-processor connection — transaction amounts, dates, types, and refunds, but never your customers' card numbers or personal payment credentials. Standard technical data such as IP address, device and browser type, and usage analytics.

2. What we use it for

Operating the marketplace: verifying revenue, publishing listing figures, computing and settling distributions, and displaying your portfolio. Meeting legal obligations, including identity verification, sanctions screening, and record-keeping. Protecting the platform against fraud and abuse. Communicating with you about your account and, only if you opt in, about product updates.

3. What we publish

Pebble is a transparency-first marketplace, and some data is public by design: listing revenue figures and grades, raise progress, distribution amounts, and the on-chain record of every settlement, which includes participating wallet addresses. We do not publish your legal name or contact details alongside your wallet unless you choose to link them publicly.

4. What we share

Service providers who help us run the platform (hosting, analytics, identity verification), under contractual confidentiality. Payment processors, only to maintain the read-only connection you authorised. Authorities, where the law compels us. We do not sell personal information.

5. Retention and security

We keep personal data only as long as needed for the purposes above or as the law requires, then delete or irreversibly anonymise it. Processor credentials are stored encrypted and scoped read-only; access to production data is restricted and logged. No system is perfectly secure, and on-chain data, once written, cannot be deleted by anyone, including us.

6. Your rights

Depending on where you live, you may have rights to access, correct, delete, or port your personal data, and to complain to a privacy regulator (in Australia, the OAIC). Contact us through @OnPebble on X and we will respond within a reasonable period. Note that deletion rights cannot apply to data recorded on a public blockchain.