Privacy Policy

1. Data We Collect

We collect the following data when you use DigitalP2P:

• Email address — for account creation, verification, and password resets
• Username — for display in trades and offers
• Trade history — records of your completed, canceled, and disputed trades
• Chat messages — trade-related communications between counterparties
• IP address — temporarily logged for security and abuse prevention

2. Data We Do Not Collect

DigitalP2P is designed with privacy in mind. We do not collect:

• Government-issued IDs or identity documents
• Selfies or biometric data
• Bank account details or financial statements
• Location data beyond IP-based country detection
• Browser cookies for tracking or advertising

3. Analytics

We use Plausible Analytics, a privacy-friendly analytics tool that does not use cookies, does not collect personal data, and is compliant with GDPR, CCPA, and PECR. Plausible provides aggregate traffic data (page views, referrers, countries) without identifying individual users. No cookie banner is required.

4. How We Use Your Data

Your data is used exclusively to:

• Operate and maintain the trading platform
• Facilitate escrow-protected trades between users
• Resolve trade disputes when they arise
• Send transactional emails (verification, password reset)
• Prevent fraud and abuse of the platform

5. Data Sharing

We do not sell, rent, or share your personal data with third parties for marketing purposes. Data may be shared only with: your trade counterparty (limited to username and trade details), law enforcement when legally required, and infrastructure providers necessary to operate the service (hosting, email delivery).

6. Data Retention

Account data is retained while your account is active. Trade records are retained for a minimum of 2 years for dispute resolution purposes. You may request account deletion at any time through our support channel — we will delete your personal data within 30 days, subject to legal retention requirements.

7. Security

We protect your data using industry-standard encryption (TLS in transit, AES-256 at rest), secure authentication (JWT tokens with short expiry), and infrastructure hosted on AWS with access controls and monitoring.

8. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Export your trade history
• Withdraw consent for optional data processing

9. Changes to This Policy

We may update this Privacy Policy periodically. We will notify users of material changes through the platform or via email. Continued use after changes constitutes acceptance.

10. Contact

For privacy-related questions or data requests, contact us through our Telegram support channel at @DigitalP2PBot.