DevEscrow
Legal

Privacy Policy

Last updated: February 28, 2026

1. Introduction

DevEscrow ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our non-custodial contract facilitation platform and related services (collectively, the "Service"). DevEscrow does not custody, hold, or control user funds — all funds are managed by publicly deployed smart contracts on the Base blockchain. By using the Service, you consent to the practices described in this Privacy Policy.

2. Information We Collect

2.1 Information You Provide

  • Discord Account Data: When you log in via Discord OAuth, we receive your Discord user ID, username, avatar, and email address (if authorized).
  • Transaction Data: Contract details including amounts, descriptions, and participant information.
  • On-Chain Wallet Data: Your public on-chain wallet addresses and transaction history as recorded on the Base blockchain. We do not custody funds or maintain internal wallet balances on your behalf.
  • Dispute Evidence: Screenshots, links, and descriptions submitted by parties during dispute resolution.
  • Communications: Messages sent through our Discord bot or support channels.

2.2 Information Collected Automatically

  • IP Address: Collected when you access the Service and during payment processing for regulatory compliance.
  • Device Information: Browser type, operating system, and device identifiers.
  • Usage Data: Pages visited, features used, timestamps, and referring URLs.
  • Cookies: Session cookies for authentication and security purposes.

2.3 Information from Third Parties

  • Wallet Onramp Providers: When you purchase USDC via your wallet's built-in purchase flow (e.g. Coinbase Smart Wallet), the wallet provider processes your payment information directly in compliance with AML regulations. We do not receive or store your payment card details or bank account information.
  • Blockchain Data: Public blockchain data related to USDC transfers and smart contract interactions on the Base network, including transaction hashes, wallet addresses, and contract events. This data is publicly available to anyone and is not private information.

3. How We Use Your Information

We use the information we collect to:

  • Provide, operate, and maintain the Service
  • Facilitate contract transactions between buyers and sellers via smart contracts
  • Verify your identity and prevent fraud
  • Comply with anti-money laundering (AML) and sanctions regulations for platform safety
  • Monitor for suspicious or unauthorized activity on our platform
  • Calculate and maintain trust scores
  • Send transaction notifications via Discord
  • Facilitate dispute resolution between buyers and sellers
  • Improve and optimize the Service
  • Respond to your inquiries and support requests
  • Comply with legal obligations and law enforcement requests

4. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

  • Transaction Counterparties: Your Discord username is shared with the other party in a contract transaction so both parties can identify each other.
  • Wallet Providers: Your wallet address is shared with your chosen wallet provider when purchasing USDC, as required for their regulatory compliance.
  • Service Providers: We use third-party services for hosting (Fly.io, Vercel), database (Supabase), and blockchain interaction (Base network RPC providers). These providers process data on our behalf under contractual obligations to protect your information.
  • Public Blockchain: When you interact with the DevEscrow smart contract, your wallet address and transaction details are recorded on the Base blockchain and are publicly visible. This is inherent to blockchain technology and is not within our control.
  • Legal Requirements: We may disclose your information if required by law, regulation, legal process, or governmental request, including to comply with AML regulations, sanctions screening, or law enforcement requests.
  • Safety and Security: We may disclose information to protect the rights, property, or safety of DevEscrow, our users, or the public.

5. Data Security

We implement appropriate technical and organizational measures to protect your information, including:

  • Encryption of data in transit (TLS/HTTPS)
  • Encrypted storage of sensitive data
  • Authenticated API endpoints with JWT tokens
  • Rate limiting to prevent abuse
  • CORS protection to prevent unauthorized access
  • Regular security reviews and updates

No method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee its absolute security. We do not store private keys, seed phrases, or wallet credentials. Users are solely responsible for the security of their own wallets.

6. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. Transaction records are retained for a minimum of 5 years to comply with record-keeping requirements. On-chain transaction data is permanently recorded on the Base blockchain and cannot be deleted by any party. You may request deletion of your off-chain account data by contacting us, subject to our legal obligations to retain certain records.

7. Your Rights

Depending on your jurisdiction, you may have the following rights:

  • Access: Request a copy of the personal information we hold about you.
  • Correction: Request correction of inaccurate or incomplete information.
  • Deletion: Request deletion of your personal information, subject to legal retention requirements. Note that on-chain data cannot be deleted.
  • Portability: Request a machine-readable copy of your data.
  • Objection: Object to certain processing of your information.

To exercise any of these rights, contact us at support@devescrow.com.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States. These countries may have different data protection laws. By using the Service, you consent to the transfer of your information to these countries. We take appropriate safeguards to ensure your information remains protected in accordance with this Privacy Policy.

9. Children's Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected information from a child under 18, we will take steps to delete that information.

10. Third-Party Services

The Service integrates with third-party services including Discord, Coinbase, and the Base blockchain network. These services have their own privacy policies that govern their collection and use of your information:

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a new "Last updated" date. Your continued use of the Service after any changes constitutes acceptance of the updated Privacy Policy.

12. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at support@devescrow.com or through our Discord server.