Privacy Policy
Last Updated: December 28, 2025
DealShield ("we," "us," or "our") is committed to protecting your privacy. As a decentralized, open-source marketplace (dApp) built on the Solana blockchain, we prioritize minimal data collection and decentralization. However, to enable successful physical product deliveries in peer-to-peer transactions, we collect limited personal information related to shipping.
This Privacy Policy explains how we collect, use, store, share, and protect your information. By using DealShield, you consent to the practices described herein. We comply with applicable privacy laws, including the General Data Protection Regulation (GDPR) where relevant.
1. Information We Collect
We collect only the data necessary for platform functionality and transaction fulfillment:
- Wallet Information: Your public Solana wallet address (used for authentication and on-chain transactions). This is pseudonymous and publicly visible on the blockchain.
- Shipping and Delivery Information (Provided by Buyers): When purchasing a physical product, buyers must provide their full name, shipping address (including location details), and phone number. This is required for the seller to fulfill and ship the order successfully.
- Listing and Transaction Data: Product descriptions, images (stored on decentralized storage like IPFS/Arweave), prices, and on-chain escrow details (public on Solana).
- Optional Information: Any additional details you voluntarily provide (e.g., notes for sellers).
- Automatically Collected Data: Limited anonymized usage data (e.g., via privacy-respecting analytics) for platform improvement—no IP logging or tracking tied to wallets.
We do not collect or store payment details (handled directly by your wallet and the Solana blockchain), emails (unless optionally provided), or other unnecessary personal data.
2. How We Collect Information
- Directly from You: Shipping details are entered by buyers during checkout and shared directly with the seller for fulfillment.
- On-Chain: Transaction and escrow data is recorded publicly on Solana.
- Off-Chain (Minimal): Shipping information is stored temporarily in our lightweight database (e.g., Supabase/PostgreSQL) to facilitate order tracking.
3. How We Use Information
We use collected information solely for:
- Enabling transaction fulfillment (e.g., providing shipping details to sellers for delivery).
- Operating the platform (e.g., displaying orders in your dashboard).
- Resolving disputes (if initiated via community DAO).
- Improving usability (anonymized analytics only).
- Complying with legal obligations.
Shipping information is used exclusively for delivery purposes and is not used for marketing, profiling, or any other secondary purpose.
4. Data Sharing and Disclosure
- With Sellers: Buyers' name, shipping address, and phone number are shared directly with the seller upon escrow funding, solely for order fulfillment and shipping.
- No Third-Party Sharing: We do not sell, rent, or share your information with marketers, advertisers, or unrelated parties.
- Service Providers: Limited access may be granted to infrastructure providers (e.g., database hosting, IPFS storage) under strict confidentiality.
- Legal Requirements: We may disclose information if required by law, to protect rights/safety, or in response to valid requests.
- On-Chain Data: Blockchain transactions are public and immutable.
To enhance privacy, we encourage the use of features like Zero-Knowledge proofs (via Light Protocol) for shielding sensitive details where possible.
5. Data Storage and Retention
- Storage: On-chain data is permanent on Solana. Off-chain shipping data is stored securely and minimally.
- Retention: Shipping information is retained only as long as needed for the transaction (e.g., until confirmation or dispute resolution, typically up to 30 days post-delivery). It is then deleted automatically.
- Security: We implement reasonable measures (e.g., encryption, access controls) to protect off-chain data. However, no system is 100% secure—use at your own risk.
6. Your Rights and Choices
Under laws like GDPR (if applicable), you have rights including:
- Access, correction, or deletion of your data.
- Objection to processing or restriction.
- Data portability.
To exercise rights or request deletion of shipping data post-transaction, contact us via community channels (e.g., X or Discord). Note: On-chain data cannot be deleted due to blockchain immutability.
You control your wallet and can disconnect anytime.
7. International Data Transfers
As a global platform, data may be processed in various jurisdictions. We ensure appropriate safeguards for transfers.
8. Children's Privacy
DealShield is not intended for users under 18. We do not knowingly collect data from children.
9. Changes to This Policy
We may update this Policy. Significant changes will be notified via the platform or community. Continued use constitutes acceptance.
For questions or concerns, reach us via our community channels.