Privacy
Privacy Policy
Last updated · 2026
01 — What we collect
What we collect.
Identity: email address (via Privy), display name, optional avatar.
Profile data you provide: bio, skills, country, hourly rate, portfolio links.
Contract data: titles, descriptions, milestones, acceptance criteria, amounts, deliverable files and links, dispute evidence.
On-chain: your Stellar wallet address (public), escrow transaction hashes (public).
02 — What we don't collect
What we don't collect.
We never see or store private keys. Privy holds your embedded wallet credentials with no Sunvasi access. We do not track you across other sites.
03 — Who sees what
Who sees what.
Your profile is visible to the people you invite via funding links.
Your contracts and milestones are visible to the freelancer, the client, and the AI arbitrator (only if a dispute is filed).
On-chain data (your wallet address, escrow contract address, transaction hashes) is globally visible on the Stellar network — that's how non-custodial escrows work.
04 — Third parties
Third parties.
We use: Supabase (database + storage), Privy (auth + wallets), Cloudinary (file uploads), Google Gemini (AI arbitration), Resend (transactional email), Trustless Work (escrow infrastructure), Stellar (settlement layer).
Each provider has its own privacy policy. We share with them only what they need to provide their service.
05 — Retention
Retention.
Profile + contract data lives until you delete it (or, for funded contracts, until the escrow is resolved on-chain — then we retain a record of the verdict for auditability).
Disputes and AI arbitration tool-call logs are retained indefinitely so both parties can audit decisions.
06 — Your rights
Your rights.
You can edit your profile, delete unfunded contracts, and request export or deletion of your data by emailing privacy@sunvasi.app. On-chain records cannot be erased.
07 — Contact
Contact.
Privacy questions: privacy@sunvasi.app.