$CLI stores the minimum data needed to operate the marketplace: account email, profile details you choose to publish, wallet public keys, rental records, and audit logs.

Private keys are encrypted with a master KEK stored outside the database. We never sell user data. We do not run third-party advertising trackers.

Email-based authentication is provided through our auth backend. OAuth (Google) is supported via a server-side broker; we receive only your email + profile basics.

Delete-account requests remove your profile, listings, and wallet links. On-chain transactions are public and cannot be deleted.