Legal
Privacy Policy
Last updated: November 4, 2026
This Privacy Policy explains what data Fides Deal collects, why we collect it, how we use and share it and the choices you have. It applies to the public website and to the contract workspace, including messaging, file sharing, milestone approvals and payments.
Data we collect
Account and profile: name, username, email address, password (stored hashed), role, avatar and the profile details you choose to add.
Contracts and work: the terms of your contracts, milestone schedules, approvals and rejections, messages, files, notes and the evidence you attach to an audit ticket.
Payments: amounts, status, payout method and the identifiers needed to process a payment. Card data is processed by Stripe; we do not receive or store full card numbers.
Technical data: IP address, device and browser type, pages and actions in the platform, timestamps, security logs and the theme you choose, which is stored in your browser.
How we use data
- Provide and operate the service: accounts, contracts, messaging, file sharing and notifications.
- Process payments, hold funds and release or pay out according to milestone approvals and audit decisions.
- Verify accounts, prevent fraud and keep the platform secure.
- Resolve audit tickets and support requests.
- Send service, security and contract notifications by email and in the system notification center.
- Comply with legal obligations and enforce our Terms.
- Understand how the product is used so we can improve it.
What we do not do
We do not sell personal data. We do not use the content of your contracts, messages or files for advertising.
How we share data
With your counterparty: your profile, the terms of the contract, messages, files, approvals and the evidence you attach to the contract.
With auditors: the evidence of an audit ticket when either party opens one.
With service providers that host and operate the platform: Supabase (database, authentication and storage), Stripe (payments), Cloudflare R2 (file storage), Resend (email delivery) and Vercel (hosting and infrastructure). They process data only as needed to provide their service.
With authorities or third parties when the law requires it, when it is necessary to protect rights or safety, or in connection with a business transfer.
International transfers
Our providers may process data in countries other than yours. Where required, we rely on appropriate safeguards for those transfers.
Retention
We keep personal data while your account exists and afterwards for as long as needed for legal, tax, accounting, fraud prevention and audit records.
Backups may keep deleted data for a limited period before they are overwritten.
Security
We use encryption in transit, access controls and server-side authorization so that each contract is only visible to the parties involved and to the people who review an audit ticket.
No system is completely secure. Keep your credentials private and contact us if you detect unusual activity or a possible security issue.
Your rights
Depending on where you live, you may have the right to access, correct, delete, restrict or object to the processing of your personal data, to request a portable copy and to withdraw a consent you gave.
You can exercise these rights through the support channel in your account. We may ask for information to verify your identity before acting on a request.
You can also lodge a complaint with the data protection authority that applies to you.
Cookies and local storage
We use the cookies and local storage needed to keep you signed in and to remember your theme preference. The platform does not use advertising cookies.
Children
Fides Deal is not directed to people under 18 and we do not knowingly collect data from them.
Changes to this policy
We may update this Privacy Policy. Material changes will be announced in the platform or by email, and the date at the top shows the current version.
Contact
Questions about this Privacy Policy can be sent through the support channel available in your account.