Privacy Policy
Last updated: 29 June 2026
1. What We Collect
- Wallet address (public key) — required to provide the escrow service. This is public information on the Solana blockchain.
- Display name, bio, skills, hourly rate — optional, provided by you in Settings. Shown on your public profile.
- Email address — optional. Collected only if you provide it for notifications. Never shared or sold.
- IPFS file URLs — stored when you upload deliverables. The files themselves are stored on IPFS (a decentralised network).
- Transaction data — all blockchain transactions are public by nature on the Solana network.
2. What We Do NOT Collect
- Your private key — we never ask for it and have no way to access it
- Payment card information
- Government ID or identity documents
- Location data or IP addresses (beyond what web servers log by default)
- Browsing history outside of FreelancePay
3. How We Use Your Data
- To provide and improve the escrow service
- To send email notifications about your escrows (if you opt in)
- To display your public profile (display name, skills, completed jobs, ratings)
- We never sell, rent, or share your personal data with third parties for marketing
4. Data Storage
- Profile data — stored in our PostgreSQL database hosted by Supabase (European region)
- File uploads — stored on IPFS via Pinata; content-addressed and permanent by design
- Blockchain data — permanently public on the Solana blockchain; cannot be deleted
- Authentication session — one httpOnly cookie (“fp_auth”) stored in your browser, expires in 7 days
5. Your Rights
- Delete your profile — email us and we will remove your off-chain data (display name, email, bio, skills) within 30 days
- Blockchain data — transaction history on the Solana blockchain is permanent and cannot be deleted by anyone
- Request your data — email us for a copy of all data we hold about your wallet address
- Opt out of email — use the unsubscribe link in any notification email, or update settings in your account
6. Third-Party Services
FreelancePay uses the following third-party services:
- Pinata — IPFS file storage
- Supabase — PostgreSQL database hosting
- Resend — transactional email delivery
- Solana Foundation — the underlying blockchain network
- Helius — Solana RPC provider
7. Cookies
We use one cookie:
- fp_auth — authentication session token, httpOnly, 7-day expiry. Required to stay logged in.
No tracking cookies. No advertising cookies. No analytics cookies.
8. Contact
For privacy requests: Ibrahiem61@icloud.com
University of Management & Technology (UMT), Lahore, Pakistan