Privacy Policy

1. Introduction

EscrowPeer ("we", "us", "the Platform") is committed to protecting the personal data of our users. This Privacy Policy explains what data we collect, why we collect it, how we use it, and your rights regarding it.

2. Data We Collect

We collect the following categories of personal data:

• Account data: Name, username, email address, password (hashed), date of birth
• KYC documents: Government-issued ID (front and back), selfie, proof of address
• Profile data: Country, phone number, avatar image, account preferences
• Trade data: Listings, trades, payment methods used, wallet addresses provided, payment proofs uploaded
• Communication data: Trade room messages, support ticket content
• Technical data: IP address, browser type, device type, login timestamps, session data
• Ratings and reviews: Star ratings and comments you submit

3. Why We Collect Your Data

We process your data for the following purposes:

• To create and manage your account
• To verify your identity (KYC) and prevent fraud
• To facilitate and secure trades through the escrow system
• To resolve disputes and comply with our legal obligations
• To send transactional emails (trade updates, OTP codes, notifications)
• To improve platform security and detect abuse
• To comply with applicable anti-money laundering (AML) laws

4. Legal Basis for Processing

We rely on the following legal bases:

• Contract performance: Processing necessary to provide the escrow service you've requested
• Legal obligation: KYC and AML compliance under applicable financial regulations
• Legitimate interests: Security monitoring, fraud prevention, platform improvement
• Consent: Marketing emails (you can opt out at any time)

5. Data Sharing

We do not sell your personal data. We may share your data with:

• Other traders: Your username and trade ratings are publicly visible. Your wallet address is shared with your trade counterparty only.
• Service providers: Email delivery services, hosting providers — bound by data processing agreements
• Law enforcement: When required by law, court order, or to protect platform users from serious harm
• Dispute resolution: Admin team members who review your trade room chat and uploaded evidence

6. Data Retention

We retain your data for as long as your account is active. KYC documents and trade records are retained for a minimum of 5 years after your last trade to comply with AML regulations. Upon account deletion, non-KYC data is deleted within 30 days. KYC records are retained for the legally required period then securely destroyed.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data (subject to legal retention requirements)
• Withdraw consent for marketing communications
• Object to processing for legitimate interest purposes
• Data portability (receive your data in a machine-readable format)

To exercise these rights, submit a request through your account's support ticket system.

8. Security

We implement appropriate technical and organisational measures to protect your data, including: bcrypt password hashing, encrypted data transmission (HTTPS), session management and CSRF protection, restricted file upload validation, and access controls on our infrastructure. Despite these measures, no system is perfectly secure and we cannot guarantee absolute security.

9. Cookies

We use cookies for session management, security, and analytics. For full details, see our Cookie Policy.

10. Changes to This Policy

We may update this policy and will notify you by email and in-app notification before changes take effect. Continued use of the Platform after the effective date constitutes acceptance.