Privacy Policy

At LUX TR ("we") we value our Users' privacy. This Privacy Policy explains what information we collect, how we use it, who we share it with, and what rights the User has over their personal data when using the LUX TR platform.

• Account data: email address and authentication credentials, managed through our identity provider (Supabase Auth), including Google sign-in when the User chooses it.
• Vault data: the watches, conditions, acquisition prices, declared physical location, and other information the User records in their portfolio.
• Payment data: when purchasing LUX TR Pro or participating in Lux Auctions, payments are processed directly through Stripe. LUX TR does not store card numbers or complete financial data on its own servers.
• Usage data: interactions with the Platform, language and currency preferences, and basic technical data (device type, browser) collected for operation and service improvement purposes.

We use the information collected to:

• Operate and maintain the Vault, Lux Auctions, Liquidation, Insurance, and other Platform features.
• Process LUX TR Pro subscriptions and sale liquidations.
• Send relevant notifications (auction alerts, target-price alerts, account status).
• Prevent fraud, misuse, and activity that violates these Terms.
• Improve the Platform through aggregated, anonymous usage analysis.

LUX TR does not sellits Users' personal information. We share data only with service providers strictly necessary to operate the Platform, including:

• Supabase: user authentication and account data storage, protected via Row Level Security (each User can only access their own data).
• Stripe: payment and subscription processing.
• Market data providers(e.g. Chrono24): used solely to obtain price references; they do not receive the User's personal data.

We may disclose information when required by law, court order, or competent authority, or to protect the rights, safety, or property of LUX TR and its Users.

We implement reasonable technical and organizational measures to protect User information, including database-level access control via Row Level Security and encryption in transit. No system is entirely foolproof; the User acknowledges that transmitting information over the internet carries inherent risks.

We retain personal data for as long as the User's account remains active or as needed to comply with legal obligations, resolve disputes, and enforce our agreements. The User may request deletion of their account and associated data at any time.

Subject to applicable law, the User has the right to:

• Access the personal data we hold about them.
• Request correction of inaccurate or incomplete data.
• Request deletion of their account and personal data.
• Request portability of their data in a structured format (e.g. CSV export of their Vault).
• Object to certain processing of their data.

To exercise any of these rights, the User can contact us through the means indicated in section 10.

LUX TR uses local browser storage and strictly necessary cookies to maintain the User's session, remember preferences (language, currency), and ensure the Platform's basic operation. We do not use third-party advertising cookies.

LUX TR is not directed at minors and does not knowingly collect information from individuals under 18 years of age. If a parent or guardian believes a minor has provided us with personal data, they may contact us to request its deletion.

For questions, requests, or to exercise rights related to this Privacy Policy, the User may write to privacidad@luxtcg.com.

We may update this Privacy Policy periodically. We will notify material changes through the Platform or by email. The "Last updated" date at the top of this document reflects the current version.