PRIVACY POLICY

Heritage Ventures is offered only to users in the United States and Canada. We do not offer or direct our services to users in the European Union, the United Kingdom, or other regions outside our permitted list. Access from outside those regions is blocked at our network edge, and requests to our financial endpoints are additionally screened for VPN, proxy and Tor use.

If you are located outside the United States or Canada, please do not use this service or provide us with personal information.

Information you give us

• Email address — when you create an account. Accounts are created through thirdweb's in-app wallet, which uses your email to authenticate you.
• Avatar selection and other profile preferences you choose.
• Terms acceptance — the fact and version of the Terms of Service you agreed to, and when.
• Correspondence — anything you send us by email, through the consignment form, or when booking a meeting.

Information created by your use of the platform

• Wallet address — the blockchain address associated with your account.
• Transaction and balance records — purchases, sales, cart activity, ledger entries, withdrawals and account balances.
• Blockchain activity — transactions you make are recorded on the Base blockchain. See section 6.

Information collected automatically

• IP address and country — used to determine whether our service is available in your region.
• VPN, proxy and Tor signals — when you use payment or withdrawal features, your IP address is checked against IPQualityScore, a third-party fraud-detection service. Where access is blocked, we record the IP address, country and detection result in our access logs.
• Usage and interaction data — pages visited, clicks, scrolling, device type, screen size, browser and operating system. See section 4.
• Local storage — we store your Terms acceptance and some session state in your browser's local storage. See section 5.

We do not collect or store your card details. Card payments are handled entirely by Stripe; we receive only confirmation of the result and limited transaction metadata.

• To create and operate your account, and to authenticate you.
• To process purchases, sales, withdrawals and balances.
• To send transactional messages such as purchase receipts and account notifications.
• To enforce regional availability and to detect fraud, abuse and automated access.
• To understand how the site is used so we can improve it — see section 4.
• To respond to your enquiries and provide support.
• To meet legal, tax and record-keeping obligations.

We do not sell your personal information, and we do not share it with third parties for their own advertising purposes.

We use Hotjar (a Contentsquare service) to understand how visitors use our site so that we can improve it. Hotjar records how you interact with pages — clicks, mouse movement, scrolling, and navigation between pages — along with your device type, screen size, browser, operating system and country. This is used to produce heatmaps and session recordings that show us where people get stuck.

We configure Hotjar to mask sensitive information. Wallet addresses, account balances and email addresses are suppressed before recording, so they do not appear in heatmaps or session recordings. Hotjar does not follow you across other websites, and we do not use it to build advertising profiles.

Hotjar processes this data on our behalf under their privacy policy. You can opt out of Hotjar on every site that uses it via Hotjar's Do Not Track page, or by enabling the “Do Not Track” setting in your browser.

We use browser storage sparingly and only for functional and analytics purposes:

• Functional — remembering that you accepted the current Terms of Service, and short-lived session state such as onboarding progress. Without these, the site will repeatedly prompt you.
• Analytics — Hotjar sets cookies to recognise a returning visitor and to keep a session together. These do not identify you personally to us.
• Third-party — Stripe, hCaptcha and embedded content may set their own cookies when those features are used.

You can clear or block storage through your browser settings. Blocking functional storage will degrade parts of the site.

This is important and differs from most services you use. Transactions made through Heritage Ventures are recorded on the Base public blockchain. That record includes your wallet address, the items involved and the amounts.

Blockchain records are public, permanent and outside our control. We cannot edit, delete or hide them, and neither can you. Anyone can view them using a public block explorer. If a wallet address is ever connected to your real-world identity — by us or by anyone else — that connection may reveal your transaction history.

Deleting your account with us removes the information we hold in our own systems. It does not and cannot remove anything already written to the blockchain.

We share personal information with service providers who help us operate the platform. They are permitted to use it only to provide their service to us.

Some features are provided by third parties embedded in or linked from our site. When you use them you are interacting with that company directly, and their privacy policy governs what they collect:

• Paragraph — Newsletter signup embedded in the footer.
• forms.app — Consignment application form.

We may also disclose information where required by law, to comply with legal process, to enforce our Terms of Service, or to protect the rights, safety and property of Heritage Ventures or others. If our business is sold or merged, information may transfer as part of that transaction.

We keep account and transaction records for as long as your account is active, and afterwards for as long as needed to meet legal, tax, accounting and dispute-resolution obligations. Access and fraud-detection logs are kept for a shorter period, sufficient to investigate abuse. Analytics data is retained according to Hotjar's retention settings.

• Access and correction — you can ask us what personal information we hold about you and ask us to correct it.
• Deletion — you can ask us to delete your account information, subject to records we must retain by law and to the blockchain limitation in section 6.
• Email preferences — you can unsubscribe from newsletters at any time. We will still send transactional messages such as receipts, as these are part of the service.
• Analytics — you can opt out of session recording as described in section 4.

Depending on where you live, you may have additional rights under state privacy laws, including the right to know what we collect and the right to be free from discrimination for exercising your rights. To make a request, email us at support@heritageventures.io. We may need to verify your identity before we act on it.

Heritage Ventures is not intended for anyone under 18. We do not knowingly collect personal information from children. If you believe a child has provided us with information, contact us and we will delete it.

We use technical and organisational measures to protect your information, including encrypted connections, restricted administrative access, rate limiting and automated abuse detection. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

We may update this policy as our service changes. When we do, we will revise the “last updated” date above. If the changes are significant, we will provide more prominent notice. Continued use of the service after an update means you accept the revised policy.

Questions about this policy, or about the information we hold about you:

support@heritageventures.io
[LEGAL ENTITY NAME — e.g. Heritage Ventures LLC]
[REGISTERED MAILING ADDRESS]