Privacy Policy

This Privacy Policy explains what information Monie Safe ("Monie Safe," "we," "us") collects, how we use and share it, how long we keep it, and the rights available to you — including rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CCPA"), and, where applicable, the EU/UK General Data Protection Regulation ("GDPR"). By using Monie Safe, you agree to the collection and use of information as described here.

1. Information we collect

The categories of personal information we collect, and why, are:

• Identifiers — name, email address, password (stored as a salted, irreversible hash — we never store or can retrieve your plain-text password), and account role.
• Commercial and financial information — job budgets, bid amounts, escrow amounts, fee amounts, and transaction/ledger history. Full card numbers and bank account details are handled directly by our payment processor, Stripe, and are never transmitted to or stored on our servers.
• Project and communication content — job descriptions, project location (city and state), messages between parties, and photos you upload (job listing, work-in-progress, completion, or dispute evidence).
• Contract and signature records — the text of your escrow agreement, your electronic signature image, and the IP address, device/browser identifier, and timestamp captured at the moment you sign, which we retain as required to prove a valid electronic signature under the U.S. ESIGN Act.
• Professional/licensing information — for contractors, license number and verification status; for attorneys, bar-related bio and fee information.
• Internet and device activity — IP address, browser type, and access timestamps, collected automatically for security, fraud prevention, and the signature record described above.

We do not knowingly collect sensitive personal information such as government ID numbers, precise geolocation, health information, or biometric identifiers.

2. How we use your information

We use personal information to: create and administer accounts; match consumers, contractors, and attorneys for a project; generate, display, and legally execute escrow agreements; process payments and payouts; verify contractor licenses; send transaction and security emails (such as password resets); respond to support requests; detect and prevent fraud or abuse; and comply with our legal and tax obligations. We do not use personal information for third-party advertising.

3. Legal basis for processing (EEA/UK users)

If you are located in the European Economic Area, the UK, or Switzerland, we process your personal information on the following legal bases under GDPR: performance of a contract with you (to provide the platform and execute your escrow agreement); our legitimate interests (fraud prevention, platform security, and service improvement), balanced against your rights; compliance with a legal obligation (recordkeeping, tax, and law enforcement requests); and, where applicable, your consent (for example, optional communications).

4. Who we share information with

We do not sell personal information, and we do not share it with third parties for cross-context behavioral advertising. We share information only as follows:

• Other parties on your transaction — the consumer, contractor, attorney, and escrow agent assigned to a job can see the information needed to complete that job (relevant names, contract terms, messages, photos).
• Service providers (processors) — Stripe (payment processing and payouts), Resend (transactional email delivery), and Vercel/Neon (hosting, database, and file storage). Each acts on our instructions under its own data processing terms and is contractually restricted from using your data for its own purposes.
• Legal and safety reasons — if required by law, subpoena, or court order, or to protect the rights, property, or safety of Monie Safe, our users, or the public.
• Business transfers — if Monie Safe is involved in a merger, acquisition, or sale of assets, personal information may be transferred as part of that transaction, subject to this Policy.

5. International data transfers

Monie Safe's infrastructure and personnel are located in the United States. If you access Monie Safe from outside the United States, your information will be transferred to and processed in the United States, which may not have the same data protection laws as your home country. Where required, we rely on our service providers' standard contractual clauses or equivalent safeguards for such transfers.

6. How long we keep your data

We retain personal information only as long as necessary for the purposes described in this Policy:

• Active account data — retained while your account is active, and for up to 3 years after account closure in case of reactivation, fraud investigation, or legal claims.
• Signed contracts, signature records, and transaction/ledger history — retained for a minimum of 7 years after the transaction, consistent with standard U.S. financial recordkeeping practice, to serve as the legal record of the agreement and satisfy tax and audit obligations.
• Support and dispute communications — retained for up to 5 years after resolution.
• Marketing or optional-consent data — retained until you withdraw consent, then deleted or anonymized within 30 days.

When retention is no longer necessary, we delete or anonymize the data, except where a longer period is required by law.

7. Your privacy rights — California residents (CCPA)

If you are a California resident, you have the right to:

• Know what personal information we have collected, used, disclosed, and (if applicable) sold about you, and the categories and specific pieces of that information.
• Delete personal information we have collected from you, subject to certain exceptions (such as completing a transaction, legal compliance, or fraud prevention).
• Correct inaccurate personal information we maintain about you.
• Opt out of the sale or sharing of personal information — Monie Safe does not sell or share personal information as those terms are defined under the CCPA, so no opt-out action is required.
• Limit the use of sensitive personal information — we do not use sensitive personal information for purposes beyond what CCPA permits without an opt-out.
• Non-discrimination — we will not deny you goods or services, charge different prices, or provide a different level of service because you exercised a privacy right.

To exercise these rights, email privacy@moniesafe.com from the email address on your account. We will verify your identity before fulfilling the request and will respond within the time required by law (generally 45 days, extendable once by an additional 45 days for complex requests). You may also designate an authorized agent to submit a request on your behalf.

8. Your privacy rights — EEA/UK/Swiss residents (GDPR)

If GDPR applies to you, you have the right to:

• Access the personal information we hold about you;
• Rectify inaccurate or incomplete information;
• Erase your personal information ("right to be forgotten"), subject to our legal recordkeeping obligations described in Section 6;
• Restrict or object to certain processing, including processing based on legitimate interests;
• Receive your data in a portable format, where processing is based on consent or contract and carried out by automated means; and
• Withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing before withdrawal.

To exercise these rights, email privacy@moniesafe.com. You also have the right to lodge a complaint with your local data protection supervisory authority. Monie Safe's primary establishment is in the United States; we have not designated a formal EU or UK representative, which we will address before actively marketing to or operating in the EEA/UK at scale.

9. Cookies

Monie Safe uses a strictly necessary session cookie to keep you signed in. We do not currently use advertising, analytics, or third-party tracking cookies. If that changes, we will update this Policy and, where required by law, request your consent first.

10. Security

Passwords are hashed with a salted algorithm and are never stored or logged in plain text. Data is transmitted over encrypted (HTTPS/TLS) connections. Access to production data is restricted to what is needed to operate the platform. No method of storage or transmission is 100% secure, and we cannot guarantee absolute security; if we become aware of a breach affecting your personal information, we will notify affected users and applicable regulators as required by law.

11. Children's privacy

Monie Safe is not directed to, and is not intended for use by, anyone under 18. We do not knowingly collect personal information from children. If we learn we have collected information from a child under 18, we will delete it.

12. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version here with a new "Last updated" date, and where changes are material, we will provide additional notice (such as an email or in-app notice) before they take effect.

13. Contact

General questions: support@moniesafe.com
Privacy rights requests: privacy@moniesafe.com

This document is a detailed template drafted to reflect Monie Safe's actual data practices and to address CCPA and GDPR principles, and does not constitute legal advice. It does not by itself guarantee legal compliance — that also depends on Monie Safe's operational practices (for example, having a working process to fulfill deletion/access requests, and data processing agreements in place with Stripe, Resend, and Vercel/Neon). Monie Safe should have this policy, and its underlying practices, reviewed by a licensed attorney before relying on it for real users.