Escrow TrustLock

Privacy Policy

Last updated: placeholder — replace once legal counsel has reviewed this document.

Placeholder notice: this page is a starting draft for engineering purposes only and should be reviewed by legal counsel, particularly for the jurisdiction(s) Escrow TrustLock operates in, before launch.

1. What we collect

  • Account details: name, email, phone, WhatsApp number.
  • Transaction details: what's being bought/sold, amounts, counterparties, messages, and status history.
  • Payment proof files (receipts, screenshots) and, if collected, KYC identity documents.
  • Basic technical data (IP address, device/browser) for security and fraud prevention.

2. How we use it

To operate the escrow service: verifying payments, mediating disputes, preventing fraud and abuse, and communicating with you about your transactions. We do not sell your personal data.

3. Who can see what

Your counterparty on a transaction sees your name and the transaction details, but never your uploaded payment proof file or bank/wallet screenshots — those are visible only to you and to Admins, who verify payments and review disputes. Payment proof and identity documents are stored in private storage and served only via short-lived signed links generated on request.

4. Data retention

We retain transaction records, messages, and payment proofs for as long as needed for dispute resolution, accounting, and legal compliance, and may retain minimal records after account deletion where required by law.

5. Your rights

You can request a copy of your data, ask us to correct it, or request deletion of your account (subject to records we must legally retain) by contacting us through the Contact page.

6. Security

Access to your data is protected by row-level security policies enforced at the database layer, and sensitive files are never exposed via public URLs. No system is perfectly secure, and we encourage using a strong, unique password.

7. Changes

We may update this policy from time to time. Material changes will be reflected by the "last updated" date above.