Privacy Policy

1. Introduction

HoldVera, Inc. ("HoldVera," "we," "us," or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our escrow services.

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, phone number, password
• Identity Verification: Government-issued ID, date of birth, address, SSN/SIN (last 4 digits)
• Transaction Data: Payment information, transaction history, escrow details
• Communications: Messages, support tickets, feedback

2.2 Information Collected Automatically

• Device Information: IP address, browser type, operating system
• Usage Data: Pages visited, features used, time spent on platform
• Cookies: Session data, preferences, analytics
• Location Data: General geographic location based on IP address

3. How We Use Your Information

We use your personal information to:

• Provide, maintain, and improve our escrow services
• Verify your identity and prevent fraud
• Process transactions and send related notifications
• Respond to your inquiries and provide customer support
• Send administrative and promotional communications
• Comply with legal and regulatory requirements
• Analyze usage patterns to improve user experience
• Protect the security and integrity of our platform

4. Legal Basis for Processing

We process your personal data based on:

• Contract Performance: To provide our escrow services
• Legal Obligation: To comply with KYC/AML regulations
• Legitimate Interests: To prevent fraud and improve services
• Consent: For marketing communications (where required)

5. Information Sharing

We may share your information with:

5.1 Transaction Counterparties

When you participate in an escrow transaction, certain information is shared with the other party, including your name and transaction status.

5.2 Service Providers

We work with trusted third-party providers for payment processing, identity verification, cloud hosting, email delivery, and customer support.

5.3 Legal Requirements

We may disclose information when required by law, court order, or government request, or to protect our rights, property, or safety.

5.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

6. Data Security

We implement robust security measures including:

• 256-bit SSL/TLS encryption for data in transit
• AES-256 encryption for data at rest
• Multi-factor authentication options
• Regular security audits and penetration testing
• SOC 2 Type II compliance
• Employee access controls and training
• 24/7 security monitoring

7. Data Retention

We retain your personal data for as long as necessary to provide our services and comply with legal obligations. Generally:

• Account data: Duration of account plus 7 years
• Transaction records: 7 years from transaction completion
• Identity documents: Duration required by AML regulations
• Communication logs: 3 years

8. Your Rights

Depending on your location, you may have the right to:

• Access: Request copies of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data (subject to legal requirements)
• Portability: Receive your data in a machine-readable format
• Objection: Object to certain processing activities
• Restriction: Request limited processing of your data
• Withdraw Consent: Withdraw previously given consent

To exercise these rights, contact us at privacy@holdvera.site.

9. Cookies and Tracking

We use cookies and similar technologies to:

• Keep you logged in
• Remember your preferences
• Analyze site usage and performance
• Detect and prevent fraud

You can manage cookie preferences through your browser settings. Disabling cookies may affect site functionality.

10. International Transfers

Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place, including Standard Contractual Clauses and adequacy decisions.

11. Children's Privacy

Our Services are not intended for individuals under 18 years of age. We do not knowingly collect personal data from children. If we learn we have collected data from a child, we will delete it promptly.

12. California Privacy Rights (CCPA)

California residents have additional rights under the CCPA:

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to opt-out of the sale of personal information
• Right to non-discrimination for exercising privacy rights

HoldVera does not sell personal information to third parties.

13. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes via email or through our platform. Your continued use of our Services after changes constitutes acceptance.

14. Contact Us

For privacy-related inquiries, please contact:

If you are not satisfied with our response, you may have the right to lodge a complaint with a supervisory authority in your jurisdiction.