Legal: Privacy & Terms

This privacy policy was last reviewed on 2026-05-17. The date will be updated whenever we revise the policy.

Redatium is an open-source data marketplace. The hosted instance — the website, mobile and web apps, and backend services — is operated by PaperGo (papergo.io). This privacy policy applies to that hosted instance.

Because the protocol and smart contracts are open source, anyone can run their own instance of the platform. If you are using a different instance, the operator of that instance — not PaperGo — is the controller of your data.

If PaperGo ever stops operating the hosted service, the on-chain registry, contracts, and any data you have on the blockchain remain accessible directly. The hosted off-chain components (apps, API, indexer) can be redeployed by anyone from the public source.

For any privacy-related enquiry, see the contact section at the bottom of this page.

We collect only the minimum needed to run the marketplace:

• Your wallet address — this is your identity on Redatium. Wallet addresses are public on the blockchain by their nature.
• The metadata of any dataset you publish — name, type, description, price, file size, content hash. We do not receive the file's contents.
• The records of requests and transfers — who requested what from whom, when, and the status of the transfer. This is needed to operate the marketplace and to support dispute resolution.
• A push-notification device token, if you enable push notifications on the mobile app. Used solely to deliver the new-data-request alert via Firebase Cloud Messaging.
• Your bank account list and identifiers that you choose to expose to the platform during a PSD2 banking integration session. We do not receive your bank password or any session credentials.

• Your name, email address, or phone number — we don't ask for any of these. The wallet address is your only identity.
• The contents of your data files. These move peer-to-peer between seller and buyer over WebTorrent; the platform's servers never see, store, or proxy them.
• Your bank login credentials. When you connect a bank account through PSD2, you sign in on your bank's own page. Redatium never sees your username or password.
• KYC documents. Redatium does not run a KYC process and does not request identity documents.

• Dataset files move directly between users over WebTorrent (peer-to-peer). They do not pass through our servers.
• The on-chain registration for mobile users writes a JSON entry to the RedatiumRegistry contract. The wallet address and registration timestamp are publicly visible.
• Bank account information is read from your bank's PSD2 API using a short-lived access token, then packaged on your device into a dataset that stays on your device until you sell it.
• Real-time updates (request status changes, channel events) are pushed to the webapp over a SignalR WebSocket connection scoped to your wallet address.

Redatium depends on the following external services:

• MetaMask (and other WalletConnect-compatible wallets) — for signing. You control your keys; we never see them.
• WalletConnect — the bridge protocol the mobile app uses to talk to MetaMask Mobile.
• Firebase Cloud Messaging (Google) — for push notifications on the mobile app, only when push is enabled.
• National Bank of Greece (NBG) — for PSD2 open-banking integration on the mobile app.
• Base (Coinbase) blockchain network — currently the Base Sepolia test network. On-chain transactions are publicly visible.

Each of these third parties has its own privacy policy that governs the data it sees. By using their services through Redatium, you are also subject to their terms.

Where you have rights under applicable data-protection law (such as the EU GDPR), you can exercise them by contacting us at Info@redatium.org. These rights typically include:

• The right to know what off-chain data we hold about you and to receive a copy.
• The right to correct inaccurate information.
• The right to ask us to delete information we hold off-chain.
• The right to portability — receiving your data in a machine-readable form.
• The right to complain to a data-protection authority.

Important limitation — on-chain data is permanent. Some Redatium records are written to a public blockchain: your wallet registration, channel deposits, conclude transactions, and withdraws. These live on a decentralised network we do not control. They cannot be deleted retroactively and are visible to anyone with access to the network. Off-chain records (request metadata, dataset descriptions, push tokens) can be removed or unlinked from your wallet on request.

• The marketing site (the redatium.org landing page) uses Google Analytics and the Facebook Pixel to measure visitor traffic.
• The webapp and mobile app do not use marketing trackers. The webapp stores your wallet session, theme preference, and language choice in your browser's local storage so the app remembers them between visits.
• We do not sell or share analytics data with third parties beyond what is required to operate these tools.

We may revise this policy as the platform evolves. The Last updated date at the top of this section reflects the most recent revision. For material changes we will surface a notice in the apps so existing users can review the change before continuing.

For privacy-related enquiries, contact us at Info@redatium.org.

2026-05-17. The date will be updated whenever we revise these terms.

You must be of legal age to contract in your jurisdiction (typically 18+) to use Redatium. By connecting a wallet you confirm that you meet this requirement.

• Your wallet is your account. Redatium does not have the ability to access, freeze, or recover wallets.
• You are responsible for the safekeeping of your wallet's recovery phrase. If you lose it, neither you nor Redatium can recover the account or any funds it holds.
• You are responsible for any activity originating from your wallet address.
• You may sign in with multiple wallets; each is an independent account with its own datasets, earnings, and reputation.

You agree not to:

• Upload, publish, or sell data that you don't have the legal right to share.
• Misrepresent the contents or provenance of a dataset.
• Use the platform to commit fraud, money laundering, or any unlawful activity.
• Abuse the dispute mechanism — e.g. raising disputes in bad faith to extract funds.
• Programmatically scrape the marketplace at a rate that disrupts normal operation.
• Attempt to identify individuals from purchased data in violation of applicable privacy law.

Repeat or serious abuse may lead to your wallet being delisted from the hosted marketplace. Because Redatium is open source and built on a public blockchain, no one can prevent you from accessing the protocol directly — but the hosted apps and listings are at PaperGo's discretion.

• You confirm that any data you list on the marketplace is yours to share and complies with applicable laws (including, where relevant, the EU General Data Protection Regulation, banking secrecy rules, and health-data regulations in your jurisdiction).
• You set the price for your datasets. There is currently no platform commission on sales.
• Once a buyer downloads a dataset, the file is theirs to retain — the platform cannot recover or revoke it. You should consider this before listing sensitive data.

When you purchase a dataset:

• You receive a copy of the file. Sellers cannot revoke or remotely delete it after delivery.
• You should use the data consistently with what you stated in your request and within the limits of applicable law (data-protection law, consumer law, sector-specific rules).
• You should not attempt to re-identify individuals from anonymised or pseudonymised data.
• Re-distribution to third parties may be subject to the seller's stated terms and to applicable law — check before re-selling or sharing.

• Payments occur in ETH on the Base network — currently the Base Sepolia test network during the pre-production period. A move to mainnet is planned.
• Redatium is non-custodial: payments move directly between wallets via smart contracts (DataTransferAdjudicator, RedatiumRegistry, SolidusDataMarketplace, DatasetRating). The platform never holds user funds.
• Gas fees for on-chain actions (registration, channel deposit, channel conclude, withdraw) are paid by the user initiating each transaction.
• The platform does not refund failed or mispriced transactions. On-chain actions are final.

• The platform uses an on-chain adjudicator contract to resolve disagreements about whether a transfer completed correctly.
• Dispute resolution is automatic and based on cryptographic signatures from both parties; there is no manual review by Redatium. Funds are released according to the most recent co-signed channel state after the challenge period expires.

Redatium is open source. The project — including the smart contracts, the shared state-channel protocol library, and the mobile and web apps — is released under the MIT licence. A copy of the licence is included at the root of the source repository.

The MIT licence governs use, modification, and redistribution of the code; its terms prevail over anything here. (Note: the shared protocol library is currently published under the ISC licence, which is functionally equivalent for these purposes.)

The Redatium and PaperGo names and associated logos are trademarks of PaperGo. If you run your own instance of the platform from the open-source code, please brand it distinctly so users do not confuse your instance with the official hosted one.

Redatium is provided "as is" without warranty of any kind. PaperGo and contributors disclaim, to the maximum extent permitted by law, all implied warranties — including merchantability, fitness for a particular purpose, and non-infringement.

The platform is non-custodial, open source, and built on a public blockchain that PaperGo does not control. PaperGo is not responsible for:

• Loss of funds due to lost or compromised wallet recovery phrases.
• Loss of funds due to bugs in user wallets or third-party smart contracts.
• Counterparty behaviour — a buyer or seller acting in bad faith. The on-chain adjudicator resolves disputes mechanically based on signed channel states; there is no platform judgement.
• Errors or misrepresentations in datasets sold by other users.
• Outages or actions of third-party providers (blockchain networks, wallet apps, banks, Firebase).

To the maximum extent permitted by law, PaperGo's total liability arising from your use of the hosted Redatium service is limited to the platform fees you have paid us in the previous twelve months — which is zero, since Redatium does not currently charge a platform fee.

PaperGo may, at its discretion, remove a dataset from the hosted marketplace listing, restrict a wallet's access to the hosted apps, or shut the hosted service down entirely.

Because Redatium is open source and built on a public blockchain:

• Your wallet, its keys, and any on-chain assets are unaffected by such action.
• Anyone — including you — can run their own instance of the platform from the public source code.
• The on-chain registry, channels, adjudicator, and any data you have on-chain remain accessible directly via the blockchain regardless of whether the hosted service is running.

In other words: PaperGo can stop hosting Redatium at any time, but it cannot stop the protocol.

Because Redatium is open source and any party can operate an instance, governing law and dispute-resolution venue depend on which operator you are using. For the hosted instance, these are determined by the place of establishment of the operator (PaperGo). For any other instance, the operator of that instance defines its own terms.

We may revise these terms over time. The Last updated date at the top of this section reflects the most recent revision. Material changes will be surfaced in the apps; continued use after a material change indicates acceptance of the revised terms.

For questions about these terms, contact us at Info@redatium.org.