Privacy Policy

• Account: your email address and a password handled by our authentication provider. We never see or store your password in readable form.
• Transactions: the orders you make or receive, amounts, statuses, and the messages and files exchanged in Transaction Rooms, including pre-sale questions about a listing.
• Listings and reviews: what you publish as a seller or reviewer, which is public by design.
• Payout details: if you sell, the bank account you link. Account details are held by our payment processor; we keep only a reference, the bank name and the last four digits. For stablecoin payments, the wallet address you provide.
• Dispute evidence: images you attach to a dispute, visible only to the two parties and our review team.
• Security and fraud signals: hashed fingerprints of your network address and device, used to detect duplicate accounts and referral abuse. We store the hash, not the raw value.
• Usage: listing page views are counted using salted hashes that cannot be reversed or linked across days.
• Optional: your Telegram chat, if you link it to receive alerts.

• To run escrow: hold, release and refund payments, deliver files and resolve disputes.
• To keep the marketplace safe: review listings, investigate reports and prevent fraud.
• To contact you about your account and orders, by email, in-app notifications and, if you opted in, Telegram.
• To meet legal obligations and enforce our Terms of Service.

When you create or edit a listing, its title, description and package details are sent to Google’s Gemini service to check them against our safety rules. Only the listing text is sent, not your account details. An administrator can review and override the result.

We do not sell your personal data. We use these service providers to operate Adscreed:

• Supabase: database, authentication, file storage and server functions.
• Paystack: card and bank payments and seller payouts.
• Resend: sending transactional email.
• Cloudflare: hosting and delivery of the website.
• Google (Gemini): automatic safety review of listing text and drafting of blog content.
• Telegram: only if you link your account to it.

In an order, the other party sees what they need to complete it, such as your public name and the messages you send. Stablecoin payments are recorded on a public blockchain, which is outside our control. We may disclose information when the law requires it or to protect users from fraud.

• Transaction, dispute and audit records are kept for as long as needed to resolve disputes and meet legal and accounting obligations.
• In-app notifications are deleted after 90 days.
• Security fingerprints are deleted after 90 days.
• Records of failed emails are deleted after 30 days.
• If you ask us to delete your account, we remove or anonymise what we are not required to keep.

We use browser storage only to keep you signed in and to remember small preferences. We do not run advertising or cross-site tracking cookies, and the share buttons on blog posts are plain links that load nothing from social networks.

You can ask us to give you a copy of your data, correct it, or delete your account, and you can object to or restrict some uses. Email [email protected] from your account’s email address and we will respond. You can switch off Telegram alerts at any time, and unlink your payout account in Settings.

Depending on where you live, you may also have the right to complain to your data protection authority.

Data is encrypted in transit. Access to your records is limited by database access rules so users only see their own orders, and sensitive actions run on the server. No system is perfectly secure; if we learn of a breach affecting you, we will tell you as the law requires.

Adscreed is not for anyone under 18, and we do not knowingly collect their data.

If we change this policy in a way that matters, we will update the date above and tell you in the app. Questions: Contact Support.