1. Who we are
Controller: [VIEW PROJECT ORGANIZATION/OWNER NAME]
Contact: [CONTACT@EMAIL.TLD]
Website: viewproject.kujin.dev
2. What we do
View Project presents and manages charity art auctions promoted via Instagram. Users receive a unique auction link, can view items, and place bids online until the scheduled end time. Items are handed over offline, and proceeds are donated to the designated charity for each auction: [INSERT CHARITY NAME HERE].
3. Personal data we process
- Identifiers: Instagram username/ID, generated auction ID.
- Auction/bidding data: bid amounts, timestamps, auction status, winner.
- Technical data: IP address, user agent, referrer, session identifiers, server logs.
- Optional contact/handover details: provided by you to coordinate pickup/delivery offline.
We do not collect payment card data. Payments are not processed online; settlement occurs in cash at the event.
4. Lawful bases for processing
- Contract: operate auctions, record bids, determine winners, provide support.
- Legitimate interests: security, rate limiting, preventing abuse, service reliability.
- Legal obligation: comply with applicable legal/reporting requirements.
5. How we use data
- Display auction pages and accept bids.
- Apply bidding rules: increments of 10 / 25 / 50 and a limit of 5 bids per user per minute.
- Determine winners at the scheduled end time and notify participants.
- Prevent abuse, ensure fairness, and maintain security and availability.
- Provide user support and respond to data rights requests.
6. Data sharing and disclosures
- Charity partners: details required to attribute donations and coordinate handover for [INSERT CHARITY NAME HERE].
- Meta/Instagram: as inherent to your use of Instagram (outside our website).
- Legal and compliance: disclosures where required by law.
We do not sell personal data. We do not use third‑party analytics, advertising, or error tracking tools.
7. International transfers
Data may be processed where our servers are located. Where required, appropriate safeguards (e.g., SCCs/DPAs and technical measures) are applied.
8. Data retention
- Auctions and bidding data: deleted or anonymized automatically 30 days after the auction closes.
- Logs: retained up to 30 days for security/troubleshooting, then deleted.
9. Your rights
Depending on your jurisdiction, you may have rights to access, rectification, deletion, restriction, objection, and portability. To exercise rights, contact [CONTACT@EMAIL.TLD].
10. Children
View Project is intended for users aged 18+ and is not directed to children.
11. Security
- Encryption in transit (HTTPS/TLS).
- No encryption at rest currently.
- RBAC for server/database/queue; least‑privilege access.
- Local stdout logging for operational visibility.
12. Cookies and tracking
No non‑essential cookies, analytics, or third‑party tracking. Essential session mechanisms may be used solely to operate the service.
13. Data deletion
- Auctions and related personal data are automatically deleted or anonymized within 30 days after auction close.
- You can also email a request to [CONTACT@EMAIL.TLD]. We complete deletion/anonymization within 30 days, except where retention is required by law.
14. Third‑party links
We may link to third‑party sites. Their policies and practices are not controlled by us.
15. Changes
We may update this Privacy Policy. Changes will be posted here with a new effective date.
16. Contact
[VIEW PROJECT ORGANIZATION/OWNER NAME]
Email: [CONTACT@EMAIL.TLD]