Privacy Policy

1. What we collect

• Account data: email, business name, business type, country, and registration number you provide at signup and onboarding.
• KYB documents: business registration certificate, tax ID, proof of address, and authorized representative ID, uploaded during business verification.
• Platform activity: listings, buying requests, messages, agreements, ratings, disputes, and invoices you create or participate in.
• Billing data: subscription plan, trial and billing status, and payment method details — payment card data itself is handled directly by Stripe and never touches our servers.
• Usage analytics: aggregate page views and feature usage, described further in Section 5.

2. How we use it

We use your data to operate the platform: verifying your business, running the marketplace and buying-board matching system, processing payments and subscriptions, generating invoices, mediating disputes, and sending you account and transactional notifications (matches found, messages, payment status, dispute updates). We do not sell your data.

3. Where it's stored

Account, business, and platform data is stored in Supabase (PostgreSQL), access-controlled with row-level security so businesses can only see their own data and counterparties' data they're actually transacting with. KYB documents are stored in a private file bucket accessible only to you and our admin reviewers via signed, time-limited URLs. Billing and payment data is processed by Stripe under its own privacy policy.

4. Blockchain records

When a paid agreement is confirmed, we write a cryptographic hash of the agreement terms and payment confirmation to the Ethereum Sepolia public testnet. This hash does not itself contain your business name, documents, or payment details — it's a one-way digest used to prove the agreement existed and was paid as recorded. Because it's written to a public testnet, the hash (not the underlying data) is publicly visible and permanent.

5. Analytics

We track aggregate, non-identifying usage events (which pages are viewed, which features are used) to understand how the platform is performing after launch. This data is stored in our own database and viewable only by admins in an internal dashboard.

6. Who can see your data

Your own team members with account access, our admin reviewers (for KYB approval, moderation, and dispute mediation), and counterparties you choose to transact with (limited to what they need — e.g. business name and rating on your public profile, not your registration documents). Stripe processes payment information as our payment processor.

7. Your choices

You can update your business profile at any time. To request deletion of your account and associated data, contact us at the address below — note that some records (e.g. completed transaction and invoice history) may be retained where required for accounting or legal purposes.

8. Contact

Questions about this policy can be sent to privacy@synergysphere.app.