This document is prepared for review by qualified counsel in the jurisdiction where the service operates. Where a signed escrow agreement covers a specific trade, that agreement governs the trade.
1.Who is responsible for your data
BridgeEscrow, registration number 28137600, of 1333 Buckeye Road, Ames, IA 50010, United States, is the controller of the personal data described in this policy. You can contact us about privacy at info@bridgescrow.com.
2.Data we collect
| Category | Examples |
|---|---|
| Account data | Full name, email address, password (stored only as a one-way hash), account role and status. |
| Identity data | Legal name, date of birth, nationality, country of residence, residential address, phone number, and an image of your passport or other identity document. |
| Escrow data | Trade amounts and rate, deposit and payout addresses, transaction hashes, Escrow Agreements, and your electronic signature, including a drawn signature image if you choose to draw one. |
| Signing evidence | The time of signing, the SHA-256 hash of the document signed, your session reference, IP address, and browser user agent. |
| Communications | Messages exchanged inside an escrow, dispute submissions and evidence, and emails with our team. |
| Technical data | IP address, device and browser information, sign-in history, and security logs. |
| Compliance data | Results of sanctions screening and blockchain-address risk checks, and review notes. |
We collect this data from you, from your Counterparty (for example, your email address when they invite you), from public blockchains, and from identity-verification and screening providers we use.
3.How we use your data
- to open and operate your account and your escrows, generate and store Escrow Agreements, and process deposits, releases, and refunds;
- to verify your identity and meet our anti-money-laundering, counter-terrorist-financing, and sanctions obligations;
- to detect and prevent fraud, abuse, and security incidents;
- to resolve disputes between escrow parties and to establish, exercise, or defend legal claims;
- to send you service messages, such as invitations, signature requests, deposit confirmations, and security alerts;
- to keep accounting and audit records required by law.
4.Legal bases
- Contract: to provide the escrow service you request.
- Legal obligation: for identity verification, sanctions screening, record keeping, and reports to authorities.
- Legitimate interests: to secure the platform, prevent fraud, and handle disputes, balanced against your rights.
- Consent: to show your passport to your invited Counterparty. You can withdraw consent for future escrows at any time.
6.Public blockchains
Bitcoin and TRON transactions are public and permanent. Deposit addresses, payout addresses, amounts, and transaction hashes can be seen by anyone and cannot be erased by us. We do not publish the link between those addresses and your identity.
7.International transfers
Our providers may process data outside your country. Where that happens we use appropriate safeguards, such as standard contractual clauses or transfers to countries recognized as providing adequate protection.
8.How long we keep data
| Data | Retention |
|---|---|
| Identity documents and verification records | 7 years after the end of our relationship, or longer if required by law or an ongoing investigation. |
| Escrow Agreements, signatures, and ledger records | 7 years after the escrow closes. |
| Escrow messages and dispute evidence | 7 years after the escrow closes. |
| Security and access logs | Up to 2 years, unless needed for an investigation. |
| Sign-in sessions | Up to 14 days, or until you sign out. |
9.How we protect data
Identity documents are encrypted with AES-256-GCM and kept in private storage. Every staff view of a document is written to an access log. Passwords are hashed, sessions are stored as hashes in HttpOnly cookies, staff accounts require multi-factor authentication, and access is limited by role.
10.Your rights
Depending on where you live, you may have the right to access your data, correct it, delete it, restrict or object to its processing, receive it in a portable format, and withdraw consent. Some rights are limited where we must keep data by law, for example identity and transaction records under anti-money-laundering rules.
To exercise a right, email info@bridgescrow.com. We may ask you to verify your identity first. You can also complain to your local data-protection authority.
12.Children
The service is for people aged 18 and over. We do not knowingly collect data from children and will delete it if we learn we have.
13.Changes to this policy
We will post any update on this page with a new “last updated” date and notify you by email of material changes.
Questions about this document?
Write to info@bridgescrow.com and include your escrow reference if it concerns a trade.