Privacy

Privacy Policy

Last updated · 2026

01What we collect

What we collect.

Identity: email address (via Privy), display name, optional avatar.

Profile data you provide: bio, skills, country, hourly rate, portfolio links.

Contract data: titles, descriptions, milestones, acceptance criteria, amounts, deliverable files and links, dispute evidence.

On-chain: your Stellar wallet address (public), escrow transaction hashes (public).

02What we don't collect

What we don't collect.

We never see or store private keys. Privy holds your embedded wallet credentials with no Sunvasi access. We do not track you across other sites.

03Who sees what

Who sees what.

Your profile is visible to the people you invite via funding links.

Your contracts and milestones are visible to the freelancer, the client, and the AI arbitrator (only if a dispute is filed).

On-chain data (your wallet address, escrow contract address, transaction hashes) is globally visible on the Stellar network — that's how non-custodial escrows work.

04Third parties

Third parties.

We use: Supabase (database + storage), Privy (auth + wallets), Cloudinary (file uploads), Google Gemini (AI arbitration), Resend (transactional email), Trustless Work (escrow infrastructure), Stellar (settlement layer).

Each provider has its own privacy policy. We share with them only what they need to provide their service.

05Retention

Retention.

Profile + contract data lives until you delete it (or, for funded contracts, until the escrow is resolved on-chain — then we retain a record of the verdict for auditability).

Disputes and AI arbitration tool-call logs are retained indefinitely so both parties can audit decisions.

06Your rights

Your rights.

You can edit your profile, delete unfunded contracts, and request export or deletion of your data by emailing privacy@sunvasi.app. On-chain records cannot be erased.

07Contact

Contact.

Privacy questions: privacy@sunvasi.app.