Privacy policy

Last updated September 2026

This is a template written for a portfolio demonstration and is not legal advice. Have a qualified lawyer review it before operating a real service.

1. What we collect

Account details (name, email, country, phone, address), transaction details, messages and files you upload, identity documents if you verify, and technical data such as IP address and browser type for security.

2. How we use it

To operate escrow transactions, process payments through PayPal, prevent fraud, verify identity, send transactional emails and notifications, provide support and meet legal obligations.

PayPal, to process payments and payouts. The other party in a transaction sees your name, email and verification status. Our email provider delivers messages. Authorities, where the law requires it. We do not sell personal data.

4. How we protect it

Passwords are hashed with Argon2id. Identity documents are encrypted at rest. Sessions use secure, HTTP-only cookies and every form is protected against cross-site request forgery. Access to identity documents is limited to authorised staff.

5. How long we keep it

We keep transaction records for as long as needed for accounting, dispute handling and legal requirements. Identity documents are kept while your account is active and for the period required by law afterwards.

6. Your rights

Depending on where you live, you may have the right to access, correct, export or delete your data, and to object to certain processing. Contact us to make a request; we may need to keep some records by law.

7. Cookies and storage

We use a session cookie to keep you signed in, an optional remember-me cookie if you ask for it, and your browser’s local storage to remember your light or dark theme. We do not use advertising cookies.

8. Contact

Privacy questions: support@escrow.test.