01Information We Collect#

Account information: email, username, display name, hashed password, and optional profile details. OAuth data from Google (where you use Google sign-in). Transaction data: listing details, escrow state, messages, and payment references. Usage data: IP address, device, and interaction logs for security and abuse prevention.

02How We Use Information#

To operate the escrow marketplace, process payments, facilitate dispute resolution, prevent fraud and abuse, comply with legal obligations, and communicate with you about your account and transactions.

03Data Minimization & Security#

We collect only what is necessary to operate the service. Passwords are hashed with bcrypt. Sessions use secure, httpOnly, sameSite cookies. All money operations are atomic and logged to an immutable audit trail. API keys are stored in an admin-controlled database, never hardcoded. Inputs are validated server-side on every route, and rate limiting protects authentication endpoints.

04AI Processing#

Deal chat messages and transaction activity may be processed by AI models to detect scams and provide assistant responses. We do not use your private deal content to train third-party models.

05Sharing#

We do not sell your data. We share data with payment processors (NowPayments) as needed to complete transactions, and with authorities where legally required. Counterparty users see the username and profile you provide.

06Your Rights#

You may access, correct, or export your data, and request deletion subject to legal retention requirements (including audit-log retention for financial transactions).

07Cookies#

We use essential cookies for authentication and session management. We do not use advertising cookies.

08Contact#

Privacy questions: [email protected]