Privacy Policy

We collect the minimum we need to run an escrow, and we do not sell it. We do not hold your private keys, we do not ask for your seed phrase, and we never will. We do not run advertising, so we have nothing to gain from a profile of you.

One thing to be clear about up front, because it is not obvious to everyone: the Solana blockchain is public. Every escrow, every amount, and every wallet address involved is visible to anyone who looks, permanently, whether or not you have an account with us. That is a property of the chain, not a choice we made, and it is not something we can delete for you later.

Account data. Your email address, your display name, your handle, and an avatar if you upload one. Email is how we reach you about an escrow and how you recover an account.

Wallet addresses. The public Solana addresses you connect or link for payout. A public address is a public address, and linking one to your account tells us that this address belongs to this person.

Escrow metadata. Titles, descriptions, amounts, fee rates, timeout windows, statuses, transaction signatures, the notes thread on an escrow, and any evidence uploaded during a dispute.

Technical data. Basic logs needed to keep the service up and to investigate abuse: IP address, browser and device type, and timestamps. Preferences such as your theme are kept locally in your own browser rather than sent to us.

• Private keys, seed phrases, or recovery phrases. Nobody at Nexrow will ever ask you for one, and any message that does is an attack.
• Card numbers or bank account details. We do not touch fiat rails.
• Government identity documents, unless a future regulatory obligation forces it, in which case we will say so before collecting anything.
• Advertising identifiers, cross-site trackers, or third party marketing pixels.
• The contents of your work. Nexrow holds the escrow, not the deliverable.

When you sign in with a wallet, we send your wallet a short message to sign. Your wallet signs it locally and returns the signature. We verify the signature against your public address, which proves you control the key without the key ever leaving your wallet.

Signing that message is not a transaction. It moves nothing, costs nothing, and approves no spending. A signing request from Nexrow that asks you to approve a transfer during sign in is not from Nexrow.

• To create, fund, track, and settle escrows, which is the service you asked for.
• To email you about things that happened to your money, and about anything else only if you opted in.
• To decide disputes, using the evidence and statements both sides submitted.
• To detect and stop fraud, abuse, and attacks on the service.
• To meet legal obligations that apply to us.

We do not sell personal data, we do not rent it, and we do not share it with data brokers.

Running Nexrow means talking to a handful of other systems. Each one sees only what it needs to do its job:

• Solana RPC providers. Reading and broadcasting on-chain state means an RPC node sees your IP address alongside the requests your client makes.
• Wallet providers, such as Phantom or Solflare. Your relationship with your wallet is with them, under their privacy policy, not ours.
• Infrastructure and database hosting, which stores the account and escrow data described above.
• Email delivery, which receives your address and the contents of the notifications you asked for.
• Error and performance monitoring, which receives technical logs.

We will also disclose data where we are legally required to, for example in response to a valid court order. Where we are allowed to tell you that this happened, we will.

Account data is kept while your account is open. Delete your account and we remove your profile, your email, your linked wallet records, and your notification preferences.

Escrow records tied to a settled escrow are retained for up to seven years after settlement, because they are the record of a financial agreement between two people and either of them may later need it. Dispute evidence is retained for two years after the dispute closes. Technical logs are retained for 90 days.

On-chain data cannot be deleted by anyone, including us. Deleting your Nexrow account removes the link between you and an address in our systems. It does not, and cannot, remove the transaction from Solana.

Depending on where you live, you may have the right to access the personal data we hold about you, to correct it, to delete it, to object to or restrict how we use it, to receive a portable copy, and to complain to your local data protection authority.

Most of this you can do yourself in Settings. For anything you cannot, email us and we will respond within 30 days. We will not charge you for exercising a right, and we will not treat you differently for having exercised one.

If a change to this policy materially affects how we use your data, we will tell you in the app and by email before it takes effect.