Privacy Policy

1. Who we are

FRX — Film Rights Exchange — is a film and television rights workspace operated at defifilm.blaqclouds.io. The platform includes an on-chain evidence layer on the SUPER chain. This policy explains what we collect, how we use it, what is written on-chain, and the choices you have.

2. Information we collect

Access and identity: the email address you sign in with (which must already be on the invitation whitelist), and the profile you choose to provide in the setup wizard — your name, country, a short bio, and any company affiliation (company name, entity type, your relationship to it).

Content you provide: titles you add to your catalog, loglines and descriptions, rights package definitions, documents you upload, and the records and notes you create while using the platform.

Blockchain data: transaction hashes, block numbers, and on-chain indexes generated when FRX anchors evidence for your records. These are public by nature of the chain.

Technical data: standard service logs (sign-in events, request errors) used to operate and secure the platform.

3. How we use your information

To provide the service: authenticating you, provisioning your wallet, storing your catalog and records, and generating the on-chain evidence anchors for the records you create.

To email you — 100% transactional: magic-link sign-in links, and notices about your own records. FRX sends no marketing email, no newsletters, and no promotional lists. Ever.

To keep the platform safe: rate limiting, abuse prevention, and security monitoring.

We do not sell your information, and we do not use your catalog or documents to train external models.

4. Wallets and blockchain — what goes on-chain

Every account receives an automatically provisioned EVM wallet on the SUPER chain. The wallet is custodial by default: FRX derives and holds it for you so you never manage keys or pay gas (the platform relayer provides gas for platform writes). You can export the wallet to full self-custody from your account page at any time.

What is written on-chain: hashes (SHA-256 fingerprints) of records, object types and identifiers, timestamps, and certificate metadata references. What is never written on-chain: your email, your name, your personal data, or the contents of your documents.

EVIDENCE ONLY: blockchain artifacts are an evidence layer; the signed instrument and platform records control. Not an offer of securities. Anchors are permanent by design — see Retention for what that means.

5. Sharing

We share the minimum necessary with service providers that operate parts of the platform: an email relay that delivers your magic-link and transactional email, and the SUPER chain RPC nodes that receive on-chain writes.

We may disclose information where required by law or valid legal process. We do not sell or rent personal information to anyone.

6. Retention

Magic-link tokens expire 15 minutes after issue and work once. Sessions expire after 30 days. Wizard and profile data is retained while your account is active.

On-chain anchors are permanent by design — that permanence is their purpose. Anchors contain hashes and references, not personal data or document contents. If you delete your account, your platform records are removed; historical anchors (hashes only) remain on the chain, but they do not identify you and cannot be used to reconstruct your documents.

7. Security

Data is encrypted in transit and at rest. Platform secrets, keys, and credentials are stored in a dedicated credential vault, not in application code. Access to production systems is role-restricted and logged. The relayer wallet that executes on-chain writes is isolated from user wallets.

8. Your choices

You can export your wallet to full self-custody at any time from your account page. You can request correction of your profile data, and you can request deletion of your account and its platform records through the platform administrator (see the Contact page). We will confirm completion in writing.

9. Changes to this policy

If we change this policy materially, we will notify members through the platform before the change takes effect. The current version is always available at this address.

10. Contact

Questions about privacy can be directed to the platform administrator via the Contact page. Because FRX is invitation-only, members reach the administrator through their account page; prospective members reach us through the person or organization that invited them.