privacy policy

1. who we are

antiq is operated by palisad labs, llc, 95 third street, san francisco, ca 94103. for privacy inquiries contact privacy@antiq.xyz.

2. what we collect

we collect information you provide directly:

• account data — username, email, password (hashed), display name
• artist profile — streaming links, social handles, bio, genre, location
• uploaded files — profile pictures, presets, and other assets
• authentication credentials — passkey public keys (never private keys)

we also collect automatically:

• server logs — ip address, user agent, timestamps, request paths
• session data — stored server-side, identified by a secure cookie

3. how we use it

• to operate and improve the service
• to authenticate you and keep your account secure
• to share your public artist profile with connected apps via antiq oauth
• to send transactional emails (password resets, security notices)

we do not sell your data. we do not use it for advertising.

4. sharing

we share data only with third-party infrastructure providers necessary to operate the service (hosting, object storage, database). we require these providers to process data only on our behalf.

your public artist profile fields (streaming links, bio, genre, etc.) are shared with third-party apps you authorize via "sign in with antiq". you control which apps have access and can revoke access at any time.

5. data retention

we retain your data for as long as your account is active. when you delete your account, your personal data is deleted within 30 days, except where retention is required by law.

6. your rights

you have the right to:

• access a copy of your personal data
• correct inaccurate data via your account settings
• delete your account and associated data
• object to or restrict certain processing
• data portability where technically feasible

to exercise these rights email privacy@antiq.xyz.

7. cookies

we use a single session cookie to keep you signed in. it is httpOnly, secure, and sameSite=lax. we do not use tracking or advertising cookies.

8. security

passwords are hashed with bcrypt. passkey private keys never leave your device. all data is transmitted over tls. we review our security practices regularly.

9. changes

we may update this policy. we will notify you of material changes via email or an in-app notice before they take effect.