Privacy Notice

Rarework Privacy Notice — Pilot Draft Rarework processes uploaded work to analyze eligibility, identify privacy and security risks, calculate an estimate, conduct operator review, and fulfill an accepted data license. Anonymous submissions are scheduled for deletion after 24 hours unless claimed by an account. Raw files remain quarantined and are not made available to buyers unless the contributor completes review and accepts an offer. We store account details, contribution history, rights certifications, license records, review messages, audit events, and payout status. SendGrid delivers passwordless sign-in links. Stripe processes identity and bank details; Rarework does not store complete bank account numbers. Account holders can download their submissions and request deletion in Settings. Unlicensed uploads are deleted with the account; accepted-license, payment, fraud-prevention, and audit records may be retained where necessary. Do not upload credentials, government identifiers, financial-account data, health or biometric data, children's data, private personal communications, or data you are not authorized to disclose and license. Automated scanning is a safety aid and cannot detect every sensitive item. Rarework uses Amazon Web Services for hosting and quarantine storage, SendGrid for transactional email, and Stripe for payout onboarding and transfers. Contact privacy@rarework.org for access, correction, portability, or deletion requests. This pilot notice must be reviewed by counsel before live payouts or a broad public launch.