R2Y2 Privacy Policy

Last Updated: April 2026

1. Introduction

This Privacy Policy explains how [R2Y2 Legal Entity Name, to be confirmed] ("R2Y2," "we," "us," or "our") collects, uses, discloses, and protects personal data when you access or use the R2Y2 platform, including our website, dashboard, marketplace, and related services (collectively, the "Platform").

This Policy applies to all users of the Platform, including visitors, registered account holders, and individuals who rent, list, buy, or sell website assets through R2Y2. By using the Platform, you acknowledge that you have read and understood this Policy. If you do not agree with our practices, you should not use the Platform.

This Policy is incorporated by reference into our Terms of Service. Capitalized terms not defined in this Policy have the meaning given to them in the Terms of Service.

2. Who We Are

R2Y2 operates a marketplace through which users may rent verified, existing websites, manage and grow those websites, and monetize them through rental of on-site placements or outright resale, with transactions settled in USDT.

Our registered business details are as follows:

Legal entity: [Entity Name, to be confirmed]
Registered address: [Address, to be confirmed]
Contact email for privacy matters: [privacy@r2y2.com, to be confirmed]

Until incorporation and registration are finalized, the entity operating R2Y2 acts as the data controller for the purposes described in this Policy.

3. Personal Data We Collect

We collect personal data in the following categories.

3.1 Information You Provide Directly

Account registration details, including name, email address, and password.
Identity verification information, where required for compliance or fraud prevention purposes, such as government-issued identification or proof of address.
Wallet addresses and transaction details associated with USDT (BEP20) payments made through the Platform.
Communications you send to us, including support requests, dispute submissions, and feedback.
Content you upload or publish through the Platform, including website copy, images, and other materials submitted for site management.

3.2 Information Collected Automatically

Device and browser information, including IP address, device type, operating system, and browser type.
Usage data, including pages visited, features used, time spent on the Platform, click patterns, and referral source.
Website performance data associated with sites you rent or manage, collected through tools including Google Search Console and Matomo, such as traffic volume, keyword rankings, and search visibility metrics.
Cookies and similar tracking technologies, as described in our Cookies Policy.

3.3 Information From Third Parties

Information from payment processors and blockchain networks relevant to verifying USDT transactions.
Information from identity verification or fraud prevention service providers, where used.
Information from advertising and marketing partners where you arrive at the Platform through a tracked campaign, link, or pixel.

4. How We Use Personal Data

We use personal data for the following purposes:

To create, maintain, and authenticate your account.
To operate the Platform's core functions, including site rental, content management, performance tracking, rental of placements, and resale transactions.
To process payments, maintain wallet balances, and process withdrawal requests.
To detect, investigate, and prevent fraud, abuse, traffic manipulation, and other activity that violates our Terms of Service.
To communicate with you regarding your account, transactions, support requests, and material changes to our policies.
To send marketing communications, where permitted, and to measure the effectiveness of our marketing campaigns through pixels and similar technologies.
To comply with applicable legal, regulatory, and tax obligations.
To enforce our Terms of Service and other applicable agreements.
To improve, secure, and develop the Platform, including through aggregated and anonymized analysis of usage patterns.

5. Legal Bases for Processing

Where applicable data protection law requires a legal basis for processing, we rely on one or more of the following:

Performance of a contract, where processing is necessary to provide the Platform and fulfill our obligations to you.
Legitimate interests, including fraud prevention, Platform security, and service improvement, balanced against your rights and interests.
Legal obligation, where processing is required to comply with applicable law.
Consent, where required, including for certain cookies, marketing pixels, and direct marketing communications. You may withdraw consent at any time as described in Section 9.

6. How We Share Personal Data

We do not sell personal data. We may share personal data in the following circumstances:

With service providers who perform functions on our behalf, including hosting, payment processing, analytics, identity verification, and customer support, under contractual obligations to protect your data.
With other users of the Platform, where necessary to facilitate a transaction, such as disclosing relevant transaction details to a counterparty in a rental or resale agreement.
With professional advisors, including legal, accounting, and financial advisors, where necessary.
With regulators, law enforcement, or other authorities, where required by law, legal process, or to protect our rights, property, or safety, or that of our users.
In connection with a merger, acquisition, financing, reorganization, or sale of assets, in which personal data may be transferred as a business asset, subject to standard confidentiality protections.
With your consent, where you have authorized a specific disclosure.

7. International Data Transfers

R2Y2 operates across multiple jurisdictions and may transfer personal data to countries other than the country in which you reside, including for hosting, analytics, and payment processing purposes. Where we transfer personal data internationally, we take appropriate steps to ensure the data receives an adequate level of protection consistent with applicable data protection law, including the use of contractual safeguards where required.

8. Data Retention

We retain personal data for as long as necessary to fulfill the purposes described in this Policy, including:

For the duration of your active account, and for a reasonable period thereafter to address disputes, enforce agreements, and comply with legal obligations.
Transaction and payment records are retained for the period required under applicable financial and tax recordkeeping laws.
Identity verification records, where collected, are retained in accordance with applicable anti-fraud and compliance requirements.

When personal data is no longer required, we securely delete, anonymize, or aggregate it.

9. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

The right to access the personal data we hold about you.
The right to request correction of inaccurate or incomplete data.
The right to request deletion of your personal data, subject to legal and contractual retention requirements.
The right to object to or restrict certain processing, including direct marketing.
The right to withdraw consent at any time, where processing is based on consent, without affecting the lawfulness of processing carried out before withdrawal.
The right to data portability, where applicable.
The right to lodge a complaint with a relevant data protection authority.

To exercise these rights, contact us using the details in Section 13. We may need to verify your identity before fulfilling a request, and certain requests may be limited where retention is required by law or necessary to complete an in-progress transaction.

10. Security

We implement technical and organizational measures designed to protect personal data against unauthorized access, alteration, disclosure, or destruction, including access controls, encryption in transit, and atomic transaction processing for financial operations on the Platform. No system is completely secure, and we cannot guarantee absolute security of information transmitted to or stored on the Platform.

If you believe your account has been compromised, contact us immediately using the details in Section 13.

11. Children's Privacy

The Platform is not directed to individuals under the age of 18, and we do not knowingly collect personal data from individuals under 18. If we become aware that we have collected personal data from a person under 18 without verification of parental consent, we will take steps to delete that information.

12. Changes to This Policy

We may update this Policy from time to time to reflect changes in our practices, the Platform, or applicable law. Material changes will be notified through the Platform or by email prior to taking effect. The "Last Updated" date at the top of this Policy indicates when it was most recently revised. Continued use of the Platform after a revised Policy takes effect constitutes acceptance of the changes.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our handling of personal data, contact us at:

[privacy@r2y2.com, to be confirmed] [Registered business address, to be confirmed]

14. Related Policies

This Privacy Policy should be read together with our Cookies Policy and Terms of Service, both of which govern your use of the Platform.