Privacy Policy

What we keep when you make a deal

• Deal details: the network, tokens, amounts, deadline, status and transaction hashes, plus the wallet addresses that receive the payout or a refund. Most of this ends up on a public blockchain anyway, where nobody can delete it.
• Crypto-for-cash deals also include:
  • The buyer's full name as entered, which is matched against the bank payment.
  • The seller's bank account details (IBAN, or account number with sort code or routing number), so the buyer knows where to pay.
  • The seller's Wise or Revolut email. The deal record keeps only a one-way hash of it. The address itself is used to give each of that seller's open deals a different amount, so payments can't be confused.
• The deal link: it contains the deal's details, so anyone you share it with can see them. Share it only with the other person in the deal.
• Referral codes: the code and the wallet that earns from it.
• Telegram: for deals proposed in a Telegram group, the group's ID and the wallet its admin set to receive the group's share of fees.
• Bank receipts emailed to verify@settlepact.com: we read the email to check that the bank really sent it and to match it to a deal. We don't keep the email itself. We keep a one-way fingerprint of the payment, so the same receipt can't be used twice.

The SettlePact Wise Payment Prover extension

A buyer in a crypto-for-cash deal can use this Chrome extension to prove their Wise payment from their own Wise login.

• Your Wise login: when you click "Prove payment", the extension reads this browser's wise.com cookies. They stay in the extension's memory and are used only inside the encrypted connection to wise.com. They are never saved, never sent to SettlePact, and our proof server can't read them: it only passes the encrypted connection through.
• What the proof reveals to our proof server and to SettlePact:
  • The transfer's number, status, amount, currency and date.
  • The receiving account's Wise ID and its IBAN, or its account number with sort code or routing number.
  Nothing else from your Wise account is revealed, including your balance, other payments and personal details.
• What it sends to settlepact.com: the deal ID, to ask for a proof ticket, and then the finished proof with a signature that ties it to that deal.
• On settlepact.com pages, the extension only tells the deal page that it's installed, and opens the prover when you click the deal's prove button.
• It has no analytics, loads no code from the internet, and only works on wise.com and settlepact.com.
• The use of information received by the extension adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements.

Stored only in your browser

The website keeps your list of deals and your settings (such as dark mode) in your browser's local storage. That data stays on your device, and we never receive it. Clearing your browser data removes it.

Who else handles data

• Cloudflare hosts the website, the database and our email address. It processes every request, including your IP address. We use IP addresses briefly to limit abuse and don't store them.
• Blockchain nodes (such as publicnode.com) answer our questions about deposits. Transactions themselves are public on their network.
• CoinGecko supplies market prices to your browser.
• KyberSwap finds the route for instant swaps. It sees the swap's tokens and amount, the deal's vault and your receiving wallet.
• Google Fonts delivers the site's fonts to your browser.
• WalletConnect (Reown) is used only if you choose to connect a phone wallet with it.
• Telegram is involved only if you use our Telegram bot.

We don't sell or rent data, use it for advertising, or share it with anyone else unless the law requires it.

How long we keep it

We keep deal records so deals can settle or refund, and so we can answer questions about them later. Once a deal is finished, you can ask us to delete its record from our database. Anything already on a blockchain can't be deleted by anyone.

Your choices and contact

To ask what we hold about you, or to have a finished deal's record deleted, email privacy@settlepact.com with the deal link or deal ID. If this policy changes, the date at the top changes with it.