Privacy Policy

We collect what we need to run a peer-to-peer delivery marketplace: your sign-in email (held by our auth provider), the profile you choose to share, and the order records the marketplace needs to function. Escrow itself lives on the Solana blockchain, which is public by design. We don’t sell your data.

Sign-in is handled by our third-party wallet provider. This provider holds your email address and manages the embedded Solana wallet created for your account; Chord Express’s servers verify tokens issued by that provider to authenticate your requests but do not store your password (there isn’t one) or your wallet’s keys. The provider processes this data under its own privacy policy.

Our application database stores:

• Profile - the name, optional bio, location, handle, and avatar you provide. Other users see your first name and last initial.
• Order context - request details and metadata (item links, prices, notes), offer and trip information, and meetup/check-in records.
• Messages - in-app chat between the parties to an order, kept so disputes can be reviewed.
• Reviews - ratings and review text you post about completed orders.

Private order context (chat, order details) is readable only by the parties to the order - and by the platform arbiter if a dispute is escalated. Public surfaces (published request listings, reviews) are visible to other users by design.

Escrow creation, acceptance, settlement, venue attestations, and related transactions are recorded on the Solana blockchain under your wallet address. Blockchain data is public, replicated worldwide, and cannot be edited or deleted by Chord Express or anyone else. Anyone who links your wallet address to your identity can see your on-chain transaction history. Don’t put anything in an on-chain memo you wouldn’t want public.

• Operating the marketplace: matching, escrow, notifications, venue check-ins.
• Trust and safety: dispute review, fraud prevention, enforcing our terms.
• Service improvement: aggregate, non-identifying usage analysis.

We do not sell personal data or use it for third-party advertising.

Data is shared only with:

• your counterparty on an order (the information needed to complete it);
• a partner venue, when you use one for a handover (names/order reference for the check-in);
• service providers that run the platform - our third-party wallet provider (authentication), our database provider (storage), and Solana RPC infrastructure providers that relay transactions;
• payment providers, when you add funds - MoonPay (card purchases; it collects payment details and runs its own identity checks under its own privacy policy) or Peer (bank payments on Peer’s own site);
• authorities, if the law requires it.

Off-chain data is kept while your account is active and for as long as needed for dispute resolution and legal obligations. You can ask us to delete your off-chain profile and messages; on-chain records cannot be deleted by anyone (see section 4).

Writes to our database go through authenticated server routes tied to your verified wallet-provider session; anonymous write access is disabled, and row-level security restricts what each account can read. No system is perfectly secure - report suspected issues to us immediately.

You can edit your profile at any time, sign out from Settings, and request account deletion via support. Questions about this policy? Reach us through the in-app support channels.