Who we are
BM Escrow operates the escrow service at bmescrow.com and is the controller of the personal data described here. Contact us using the details on the contact page.
What we collect
Because you give it to us
- Account — email address and password (stored only as a hash). A display name, handle, Telegram username and country if you choose to add them.
- Deals — titles, descriptions, terms, amounts, the messages you post on a deal and any evidence you attach to a dispute.
- Wallet addresses — payout and refund addresses you supply.
- Support — the contents of tickets and replies.
- Verification — identity documents, but only in the circumstances set out on the acceptable use page, and never for an ordinary deal.
Because the service generates it
- Deal timeline — an append-only record of who did what and when on each deal. Both parties to a deal can see it; this is deliberate and is what makes a dispute decidable.
- Blockchain data — transaction ids, sending and receiving addresses, amounts and confirmation counts observed on public networks.
- Technical — IP address and browser user agent in server and authentication logs, kept for security and abuse investigation.
What we do not collect
- Card numbers or bank details — we never touch fiat payment instruments.
- Your private keys or seed phrases. We will never ask for them.
- Advertising or cross-site tracking data. There is no advertising network on this site and no third-party analytics beacon.
Why we are allowed to use it
- To perform our contract with you — running a deal, matching deposits, sending payouts, resolving disputes.
- Legal obligation — anti-money-laundering checks, sanctions screening, record keeping and lawful requests.
- Legitimate interests — preventing fraud and abuse, keeping the service secure, and defending ourselves in a claim.
- Consent — for anything optional, which you can withdraw.
Who sees it
- Your counterparty — your display name or handle, and everything you post on a deal you share. Not your email address, unless you put it in a message.
- Our staff — only where needed to run or adjudicate a deal. Privileged access requires a second authentication factor and is logged.
- Infrastructure providers — hosting and the managed database and authentication service, acting on our instructions under contract.
- Public blockchains — anything you send on-chain is public by nature and permanent. We cannot alter or delete it.
- Authorities — in response to a lawful request, where we are required to.
We do not sell personal data, and we do not share it for advertising.
How long we keep it
- Account — while your account is open, and then as long as needed for our legal obligations.
- Deal and settlement records — retained after completion for the period financial-record law requires of us, because they evidence who was paid what.
- Verification documents — only for the retention period the applicable regulation sets.
- Technical logs — a short rolling window, unless retained for a specific investigation.
Your rights
Depending on where you live, you may have the right to access the data we hold about you, correct it, delete it, restrict or object to our use of it, receive it in a portable form, and complain to your data protection authority.
Two honest limits. We cannot delete a completed deal's settlement record while we are legally required to keep it. And we cannot delete anything from a public blockchain — no one can.
To exercise a right, write to us from the address on your account. We respond within the period the applicable law allows.
Security
Data is encrypted in transit and at rest. Access to a deal is restricted at the database level to its parties. Payout signing keys are held in server-side secrets and never reach a browser. Privileged actions require a second factor and are written to an audit log. The security page describes the model, including its limits.
Cookies
We set cookies that keep you signed in and protect forms against cross-site request forgery. They are necessary for the service to function and there is no advertising or analytics cookie to consent to. Your colour theme preference is kept in your browser's local storage and never sent to us.
Changes
If we change this notice materially we will say so on the site. The date at the top always reflects the current version.