Privacy policy

Last updated: August 18, 2026

When you use our websites, applications, APIs and services (together the "Service"), Utopia Data ("Utopia Data", "Utopia", "we", "us" or "our") collects, uses and shares information as this Privacy Policy describes. The policy also sets out the rights and choices available to you. Using the Service constitutes agreement to these practices.

1. Who we are #

For the personal data this policy covers, Utopia Data acts as the controller. The exception is data we process for an enterprise customer under a separate agreement; there, the customer is the controller and our role is that of a processor. Direct questions to privacy@utopiadata.net.

2. Information we collect #

Account and identity data. Because a self custodied wallet authenticates access to the Service, the primary identifier we keep for a contributor or requester is a public wallet address. Signing in requires no email address or password, although you may share contact details when contacting us or entering an enterprise agreement.

Capture data. A contributor's submission gives us the blurred video file plus its metadata: a coarse location, a timestamp, a content hash and the recording's technical properties. Unblurred frames never come to us, since blurring occurs on the device and the original footage remains there.

Derived data. Accepted captures are the source from which we produce 3D models, structured spatial data and provenance records, all derived from the blurred capture.

Usage and device data. Standard technical data is gathered automatically as you use our websites and applications: IP address, browser and device type, pages viewed, interactions and diagnostic logs. It supports operating, securing and improving the Service.

Enterprise account data. For enterprise customers, we keep business contact details, billing information and account configuration, data residency settings included.

Communications. Messages and details you send us when you get in touch are kept, both to respond and to maintain a record.

3. How we use information #

The information above serves the following purposes:

• Running the Service, which covers reconstructing captures, verification and delivering data to requesters and customers.
• Authenticating access, handling bounties and tracking points and rank.
• Preserving the integrity of verification and of provenance records.
• Keeping the Service secure, stopping abuse and looking into suspected fraud or breaches of our Terms.
• Supporting you and answering your requests.
• Learning how the Service gets used so it can be made better.
• Meeting legal obligations and enforcing our agreements.

4. Legal bases #

If the GDPR or a comparable law governs, our processing rests on these legal bases: performing a contract with you, our legitimate interests in running and securing the Service, complying with legal obligations, and consent wherever consent is required. Consent, once given, can be withdrawn at any time.

5. How we share information #

Personal data is never sold by us. Sharing happens only in these cases:

• With requesters and customers. The requesters who funded a capture, and enterprise customers who license data, receive accepted captures, the data derived from them and their provenance records. What is delivered is the blurred, reconstructed output, never raw footage.
• With service providers. Vendors handle hosting, storage, processing, analytics and payment infrastructure for us. Where they process data on our behalf, they do so bound by confidentiality and security obligations.
• On public infrastructure. Bounty settlement and provenance anchors go onto public infrastructure, but what gets written is limited to hashes and transaction records. Footage, briefs and the identity behind a wallet never appear there.
• For legal reasons. Disclosure may occur when the law requires it, in response to lawful requests, or to defend the rights, safety and property of Utopia Data, our users or the public.
• In a business transfer. Should a merger, acquisition or sale of assets involve us, information may move as part of that transaction, still subject to this policy.

6. Rights of people who appear in a capture #

Anyone who appears in a capture and wants it taken down, or wants extra blurring applied, can submit a request via the process laid out in Capture and privacy. Valid requests are reviewed and acted on within a reasonable time, and we confirm the result to the requester. Since blurring of faces and plates happens at the moment of capture, the majority of concerns are resolved before any data reaches a customer.

7. Your rights #

Your place of residence may give you rights over the personal data we hold: to access it, correct it, delete it, restrict or object to certain processing, and obtain a portable copy. For residents of the European Economic Area or the United Kingdom, the GDPR is the source of these rights. California residents hold rights under the CCPA, among them the right to be free from discrimination for exercising them. To restate: we do not sell personal data.

Rights requests go to privacy@utopiadata.net. Before acting, we may need you to prove control of the wallet or account concerned. Lodging a complaint with your local data protection authority is also your right.

8. Data residency and retention #

Regional data residency is configurable for enterprise customers, as Data sovereignty explains. Blurred captures, derived models and account data are retained as long as providing the Service requires, as long as obligations to customers who licensed the data demand, and as long as the law mandates. Once data serves no further purpose, we delete or de identify it. Provenance hashes on public infrastructure are permanent by design; they contain neither footage nor personal identifiers.

9. Security #

Protecting information is the job of our technical and organizational measures, among them encryption in transit, access controls and the on device blurring that keeps raw footage away from our systems altogether. Since no storage or transmission method is ever fully secure, absolute security cannot be guaranteed; what we can commit to is working to protect your information and responding fast if an incident happens.

10. International transfers #

Information may be processed and stored in countries other than your own. Cross border transfers of personal data are covered by appropriate safeguards, standard contractual clauses among them, wherever the law calls for them.

11. Children #

Children are not the audience for the Service, which is meant for users aged 18 and up. Personal data from children is not knowingly collected by us. Contact us if you think a child has given us personal data, and we will remove it.

12. Cookies and analytics #

Cookies and similar technologies on our websites keep things functioning, hold onto your preferences and show us how the sites are used. Browser settings give you control over cookies. For non essential cookies, we request your consent first where that is required.

13. Changes to this policy #

This policy may change over time. Material changes will be reflected in the date at the top of this page and, where appropriate, communicated through additional notice. Continuing to use the Service after a change takes effect means the updated policy applies to you.

14. Contact #

Reach us at privacy@utopiadata.net with any privacy question or to exercise a right.