Privacy Policy

Earth Inc., registered in Lagos, Nigeria, is the data controller for personal information processed through earthinc.io, studio.earthinc.io, and dashboard.earthinc.io (the "Platform"). We process personal information in accordance with the Nigeria Data Protection Act 2023 and, where it applies to users in those jurisdictions, the UK GDPR and EU GDPR. Privacy enquiries: privacy@earthinc.io.

Account and identity information.

• Name, email address, phone number, and country of residence.
• For artists: identity verification (KYC) documents, date of birth, studio address, and portfolio information.
• For collectors: delivery addresses and acquisition history.

Authentication session information. The ENORA capture session that artists complete when a work is authenticated collects:

• Photographs of the artwork, its reverse, and the affixed ENORA Seal.
• A short declaration video in which the artist appears and states the work is their original creation. This video includes the artist’s face and voice.
• The device identifier (fingerprint) of the phone or computer used, to confirm the session is run from the artist’s registered device.
• The device’s GPS location at the time of the session, to confirm proximity to the registered studio address. Location is used for this check only.

Transactions. Payments are processed by our payment partner, Flutterwave. We receive transaction confirmations and settlement details; we do not store your full card details on our systems.

Usage. We use Google Analytics to understand how the public site is used (pages visited, approximate region, device type). We also keep records of correspondence with our support team.

• To perform our contract with you: operating accounts, authenticating works, issuing Certificates of Authenticity, settling acquisitions, and arranging delivery.
• To meet legal obligations: identity verification, fraud prevention, anti-money-laundering checks, and cooperation with lawful requests from authorities.
• For our legitimate interests: securing the Platform, preventing authentication fraud (including device and location checks during capture sessions), improving our services, and maintaining accurate provenance records.
• With your consent: optional communications such as market intelligence newsletters. You can withdraw consent at any time.

Provenance is the product: the record of a work's registration, authentication, and ownership history must remain accurate and complete for the lifetime of the work. Artwork Passports are public but identify owners only as "Private Collection"; collector identities are never published.

As part of authentication we anchor a cryptographic fingerprint of the session record to a public blockchain. No personal information, no images, and no documents are written to the blockchain; the anchor is a mathematical reference that cannot be reversed into the underlying material. Blockchain entries are permanent by design and cannot be deleted, including by us.

We do not sell personal information. We share it only with:

• Service providers who host and operate the Platform on our behalf: cloud hosting, database, and file storage providers (data at rest is held in the United Kingdom and European Union), our email delivery provider, and our payment partner.
• Professional advisers, insurers, and auditors where necessary.
• Law enforcement, regulators, or registries (such as loss and theft registries checked during authentication) where the law requires or permits it.
• A buyer or successor in the event of a corporate transaction, under equivalent confidentiality obligations.

Earth Inc. operates from Nigeria and serves collectors internationally. Platform data is hosted with cloud providers in the United Kingdom and European Union. Where personal information moves between jurisdictions, we rely on appropriate safeguards recognised under the Nigeria Data Protection Act and, where applicable, UK and EU adequacy and standard contractual mechanisms.

• Account information: for as long as your account is open, and up to 6 years after closure for legal and audit purposes.
• KYC records: as required by anti-money-laundering law.
• Provenance records, authentication session records, and issued COAs: retained for the lifetime of the work. These attach to the artwork, not to an account, and survive account closure.
• Analytics data: retained on Google Analytics’ standard schedule.

Personal information is protected with encryption in transit, access controls, and segregated storage for sensitive material such as KYC documents. Authentication media is held on infrastructure with restricted, logged access. No system is perfectly secure; if a breach affecting your rights occurs we will notify you and the relevant authority as the law requires.

Subject to applicable law, you have the right to:

• Access the personal information we hold about you and receive a copy.
• Correct inaccurate or incomplete information.
• Request deletion of your personal information. Note that provenance records, issued COAs, and blockchain anchors cannot be deleted: they are retained under our legal and legitimate interests in maintaining the integrity of the authentication record, and blockchain entries are immutable by design.
• Object to or restrict certain processing, and withdraw consent where processing is based on consent.
• Receive your information in a portable format.
• Complain to the Nigeria Data Protection Commission, or to your local supervisory authority in the UK or EU.

To exercise any of these rights, contact privacy@earthinc.io. We respond within the timelines set by applicable law.

The Platform is for adults. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us information, contact us and we will delete it.

We may update this policy from time to time. Material changes will be notified to registered users by email or through the Platform before they take effect. The date at the top of this page shows when it was last revised.

Earth Inc., Lagos, Nigeria. Privacy: privacy@earthinc.io. General support: support@earthinc.io.