Re

ffLegal

Privacy Policy

Effective Date: May 2026 · J&JOHN Corp. · ARKPIA

ARKPIA is operated by J&JOHN Corp. This Privacy Policy explains how we collect, use, store, and protect your personal information in connection with our physical art authentication and commerce platform. By using ARKPIA, you agree to the practices described in this policy.

1. Information We Collect

We collect information you provide directly when you register, submit applications, or transact on the platform.

Account Information

• Name, email address, nickname (displayed in OwnershipChain records)

• Profile information and artist/collector designation

  
  

KYC (Know Your Customer) Information

To comply with applicable AML/KYC laws and regulations, we collect identity verification documents based on transaction levels:

• Basic Name, phone number, address (first purchase)

• Enhanced Government-issued ID, address proof (transactions over $3,500 USD or international)

• Verified Source of funds declaration (transactions over $35,000 USD or high-risk activity)

  
  

Transaction Information

• Purchase history, payment method type (bank wire, card)

• Artwork registration and ownership transfer records

• Invoice and settlement information

  
  

Technical Information

• IP address, browser type, device information

• Access logs and platform usage data

2. How We Use Your Information

• To operate and maintain the ARKPIA platform and its services

• To verify identity and comply with applicable AML/KYC obligations

• To process transactions and generate Certificates of Authenticity (COA)

• To maintain OwnershipChain records linked to SHA-256 artwork fingerprints

• To communicate platform updates, settlement notices, and policy changes

• To detect and prevent fraud, tampering, or unauthorized access

• To improve platform features and user experience

3. How We Protect Your Information

ARKPIA employs technical and organizational measures to protect your personal data:

• KYC documents are stored with restricted access (Admin-only) and are never publicly accessible

• Artwork fingerprints and ownership records are generated using SHA-256 dual-hash cryptography — tamper-evident by design

• All files uploaded for identity verification are stored as private files and attached only to your verified KYC record

• Personal names and private information are never displayed in public OwnershipChain records — only your chosen nickname is shown

• Payment credentials are never stored on ARKPIA servers

4. Data Retention

We retain your data for as long as necessary to provide our services and comply with legal obligations:

• Account data: retained while your account is active

• KYC documents: retained for the legally required period, with a scheduled deletion date recorded at submission. Deleted upon expiry unless extended by legal requirement.

• Transaction records and OwnershipChain entries: retained indefinitely as part of the provenance record — these cannot be deleted as they form the basis of artwork authenticity

• Audit logs: retained for a minimum of 5 years for AML compliance purposes

5. Information Sharing

We do not sell your personal information. We may share information in the following limited circumstances:

• With your consent: When you initiate an ownership transfer, the counterparty can see your nickname (not your legal name)

• Legal compliance: When required by law, court order, or regulatory authority

• Service providers: Trusted third parties who assist in platform operations, under strict confidentiality obligations

• Business transfers: In the event of a merger, acquisition, or asset sale, subject to equivalent privacy protections

6. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you

• Correction: Request correction of inaccurate personal data

• Deletion: Request deletion of personal data where legally permitted (note: OwnershipChain records cannot be deleted)

• Portability: Request your data in a portable format

• Objection: Object to certain types of processing

To exercise these rights, contact us at [email protected]

7. Cookies and Tracking

ARKPIA uses essential cookies necessary for platform operation (session management, security). We do not use advertising or third-party tracking cookies without your explicit consent. You may control cookie settings through your browser.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes via email. Continued use of the platform after notification constitutes acceptance of the updated policy.

9. Contact