Effective 24 September 2026.
This policy explains what peelbid collects, why, who processes it on our behalf, what is public, and how long it is kept. Questions go to hello@peelbid.com.
1.1peelbid is operated from Türkiye and is the controller of the personal data described here. Contact: hello@peelbid.com.
2.1We collect what the service needs: your email address, your X account if you connect it, what you do on the marketplace, and the photographs that prove a placement. We do not sell personal data or share it with advertisers. Anything recorded on a blockchain is public and permanent.
3.1Waitlist and Pass. Your email address and when you confirmed it, the role you selected, your referral code and who referred you, your Peels and quest activity, and links to posts you submit for quests.
3.2X account, if you connect it. The account’s id and handle, the date it was created and its follower count. We read your profile once. We never post, follow or read your messages, and we do not keep the access X grants.
3.3Account and wallets. Your sign-in details held by our authentication provider, the wallet addresses linked to your account, and the payout wallet you choose.
3.4Marketplace. Listings, including photographs, panel sizes and where the object is used; briefs; and bids, including the brand name, the artwork file and its fingerprint, the amount and the bidding wallet.
3.5Campaigns. Proof and spot check photographs, the time they were taken where the photograph records it, the codes issued for them, the results of their review, notes, disputes, and the arbiter’s decisions, including their reasons and the name of the person who decided.
3.6Technical. A one-way hash of the network address a request came from, used to limit abuse. Sign-in codes, stored only as a one-way hash. Your email address, a sign-in key and any referral code, kept in your browser’s local storage so the site recognises you. Cookieless usage counts, described in section 5.
4.1To provide the service you asked for: sign-in, the Pass, listings, auctions, campaigns, proof and payment. This is necessary to perform our agreement with you.
4.2To prevent abuse and to keep the records a dispute may depend on. These are our legitimate interests and, where applicable, legal obligations.
4.3To connect your X account and check posts you submit. This is based on your consent, which you may withdraw.
4.4To send occasional announcements about the programme. You may opt out at any time with the link in each one.
5.1We use the following service providers, each only for the purpose stated:
5.2Some of these providers process data outside Türkiye, including in the European Union and the United States. We rely on their contractual and technical safeguards.
6.1Your Pass page and its share image show your X handle, your pass number and the quests you have completed. The leaderboard shows your X handle, or your email masked to its first two characters and its domain.
6.2Listing pages show the listing and its photographs. Bid history shows partly hidden brand names and rates, never artwork. A campaign’s public proof page shows that proofs exist and when; it shows no emails, amounts or photographs.
6.3Blockchain records are public and permanent: wallet addresses, amounts, times, proof fingerprints and the outcome of disputes. Nobody, including us, can delete them.
7.1Sign-in codes and messages about your auctions, campaigns, spot checks and disputes are part of the service and cannot be switched off while you use it.
7.2Announcements are occasional, and each carries a one-click link to stop them. Opting out does not affect your Pass or your place on the list.
8.1Waitlist and Pass records are kept until you ask us to delete them.
8.2Records of a campaign are kept while it is live and for 90 days after its last instalment, so that either party can verify what happened. After that, we delete them on request.
8.3Sign-in codes expire after ten minutes and are stored only as a one-way hash.
8.4Blockchain records cannot be deleted, as set out in 6.3.
9.1You may ask to access, correct or delete your personal data, object to its use, or withdraw a consent you gave. These rights apply under Turkish law (KVKK) and, where applicable, the GDPR.
9.2Write to hello@peelbid.com. We reply within 30 days. You may also complain to the data protection authority, in Türkiye the Kişisel Verileri Koruma Kurumu.
10.1Data is encrypted in transit. Sign-in codes are stored as one-way hashes. Administrative access is restricted. No system is perfectly secure, and we will tell you promptly if a breach affects you.
11.1peelbid is not for anyone under 18. If we learn that we hold data about someone under 18, we delete it.
12.1Peels are promotional points. They cannot be bought, sold or transferred, have no monetary value, and are not a token, security or investment. See section 4 of the Terms of Service.
13.1We may update this policy. Material changes will be posted on this page and emailed to account holders.
