Privacy policy

What we collect

• Account data — email address or other sign-in identifier, your public @handle, and profile details you choose to add.
• Transaction data — the transactions you create or join, amounts, delivery method, deadlines, status history and receipts.
• Delivery evidence — carrier and tracking details, shipping proof and handoff photos you upload.
• Dispute data — structured responses, evidence and settlement offers.
• Device data — a push notification token, registered when you install the app and sign in, whether or not you allow notifications, plus standard technical logs.
• Website analytics - aggregate, cookie-free page counts on wepayguard.com, measured with Cloudflare Web Analytics. No cookies are set, no cross-site tracking, and no advertising profiles. Cloudflare processes this data on our behalf and we do not receive anything that identifies you individually.
• App analytics - the Play Store build of the Android app includes Google Firebase Analytics, which records in-app events, a per-installation identifier and device and app version details, and derives an approximate region from your IP address. We use it to see which parts of the app people reach and where they get stuck. It is not used for advertising, and we do not build advertising profiles.

Why we collect it

To run transactions and escrow, to enforce deadlines and decide disputes under the published rules, to keep the audit records that protect both parties, to notify you when the other party acts, and to meet legal and anti-fraud obligations.

Who we share it with

The other party to a transaction sees your public handle, the transaction details and the evidence submitted in it. Beyond that, data is shared only with the infrastructure and payment providers required to operate the service — Google Firebase and Google Cloud for authentication, database, storage and hosting, and Stripe, our payment provider, for payments, payouts, seller identity verification and fraud prevention - and with authorities where the law requires it. We do not sell personal data.

How we protect it

Your data is held in Google Cloud and Firebase in the United States, encrypted in transit and at rest by those services. Access to production data is limited to the operator of the service and to the service accounts the application runs as, each granted only the permissions its own job needs. Delivery and dispute evidence sits in a private bucket whose rules deny public reads outright: the app can open an individual file only through a short-lived signed link, and the server issues that link only after checking that you are a party to that transaction. Every change that moves money or decides a dispute is written to an append-only audit record that cannot be edited afterwards. Card details never reach our servers - card data is entered on Stripe's own hosted payment pages and is handled by Stripe. No system is perfectly secure; if we become aware of a breach that puts your data at risk, we will tell you. Security questions and reports go to privacy@wepayguard.com.

How long we keep it

Transaction, receipt and audit records are retained for as long as required for financial, legal and dispute purposes. Profile data is retained while your account is open. You can delete your account at any time, and deletion is immediate, but it does not delete the completed transaction, audit and financial records that the other party and our legal obligations rely on. See how account deletion works for the full retention schedule.

Your rights

You can delete your account at any time - see how to delete your account for the in-app path and what deletion does and does not remove. For any other request, including access to or correction of your personal data, write to privacy@wepayguard.com. Depending on where you live you may also have rights to portability, to object to processing, and to complain to a supervisory authority.

Children

WePayGuard is not intended for anyone under 18.

Changes

Any change is dated at the top of this page, and the current version is always one tap away in the app under Profile → Legal → Privacy policy. We do not send a notification when this page changes, so check the date above if it matters to you. If a change materially reduces the protection of data we already hold about you, we will ask for your consent before applying it to that data rather than relying on this page alone.