Introduction. AtlasOra ("we", "our", "us") is committed to protecting your privacy. This policy explains how we collect, use, disclose, and safeguard your information when you use the Platform. It aligns with GDPR, the UK Data Protection Act 2018, and the Estonian Personal Data Protection Act. Data Controller: Masaora Foundation. EU Representative: Andrew Deighan. Contact: privacy@atlasora.com.
Information We Collect
- Personal Info: name, email, payment information, physical address.
- Booking Info: dates, property details, messages, reviews, check-in/out confirmations.
- Technical: IP, device ID, cookies, usage data, location.
- Blockchain: public wallet addresses, on-chain escrow records, $AORA balances.
How We Use Data
- Facilitate bookings and payments; verify identity (KYC/AML); provide support; improve the platform.
- Marketing with consent; legal compliance; token operations and governance participation.
Legal Basis (GDPR)
Contractual necessity, legitimate interests (e.g., fraud prevention), legal obligation, and consent (withdraw anytime).
Sharing & Disclosure
- Service providers (payments, cloud, analytics), between users (as needed for bookings), legal requirements, business transfers.
- Some transaction data is recorded on public blockchains and cannot be deleted.
Retention & Rights
- Retention for as long as needed (e.g., 7 years for financial records). Deleted accounts: most data within 30 days; some retained for compliance.
- Your rights include access, rectification, erasure, restriction, portability, objection, consent withdrawal, and lodging a complaint with the Estonian Data Protection Inspectorate.
Security & Children
Industry-standard security measures (encryption, MFA, audits). Not intended for users under 18.
Cookies & Changes
We use cookies and similar tech. Changes to this policy will be communicated via email or prominent notice.
Contact
Data Protection Officer: dpo@atlasora.com