VeriEscrowTrustless Protocol
Last updated: January 7, 2026

Privacy Policy

How we collect, use, and protect your information

Non-Custodial
GDPR Compliant
AES-256 Encrypted

Non-Custodial Platform

As a non-custodial platform, we do not have access to, control over, or custody of your digital assets at any time. Your funds are held exclusively by smart contracts on public blockchains.

1. Introduction

Elysium Media FZCO ("we", "us", "our"), operating under the brand VeriEscrow, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our non-custodial escrow platform.

This policy applies to all users of the VeriEscrow platform, including our website, smart contract interfaces, and related services.

2. Data Controller

The data controller responsible for your personal data is:

Elysium Media FZCO

Dubai Digital Park, Dubai Silicon Oasis

United Arab Emirates

License No. 58510

TRN: 104956612600003

For privacy inquiries: [email protected]

Data Protection Officer: [email protected]

3. Information We Collect

We collect different types of information depending on how you interact with our platform:

Information You Provide

  • Account information: email address, username, password (hashed)
  • Profile data: name, company name (if applicable)
  • KYC information: government ID, proof of address (when required by regulations)
  • Communication data: messages, support tickets, feedback
  • Transaction details: escrow parameters, milestone descriptions

Information Collected Automatically

  • Device information: browser type, operating system, device identifiers
  • Usage data: pages visited, features used, time spent on platform
  • Log data: IP address, access times, referring URLs
  • Blockchain data: public wallet addresses you connect

Blockchain Information

When you interact with our smart contracts, transaction data is recorded on public blockchains. This includes wallet addresses, transaction amounts, and timestamps. This data is publicly visible and immutable—we cannot modify or delete it.

4. How We Use Your Information

We use your information for the following purposes:

Service Provision

  • Create and manage your account
  • Facilitate escrow transactions and smart contract interactions
  • Process payments and fees
  • Provide customer support

Legal and Compliance

  • Comply with KYC/AML regulations
  • Prevent fraud, money laundering, and illegal activities
  • Respond to legal requests and court orders
  • Enforce our terms of service

Platform Improvement

  • Analyze usage patterns to improve user experience
  • Develop new features and services
  • Conduct research and analytics
  • Debug and fix technical issues

Communication

  • Send transaction notifications and updates
  • Respond to your inquiries
  • Send important security alerts
  • Marketing communications (with your consent)

5. Legal Basis for Processing

Under GDPR and similar regulations, we process your data based on:

Contract Performance

Processing necessary to provide our services and fulfill our contractual obligations to you.

Consent

Where you have given explicit consent for specific processing activities, such as marketing communications.

Legitimate Interests

Processing necessary for our legitimate business interests, including fraud prevention, security, and platform improvement.

Legal Obligation

Processing required to comply with applicable laws, including KYC/AML requirements.

6. Information Sharing and Disclosure

We do not sell your personal information. We may share your data with:

Service Providers

Third-party vendors who assist us in operating the platform, including cloud hosting, analytics, KYC verification, and customer support services. These providers are contractually obligated to protect your data.

Legal Requirements

Government authorities, regulators, or law enforcement when required by law or to protect our legal rights.

Business Transfers

In connection with a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

With Your Consent

We may share your information with other parties when you explicitly consent to such sharing.

7. Data Retention

We retain your personal data only as long as necessary for the purposes outlined in this policy:

Account data: Retained while your account is active and for 5 years after closure for legal compliance
Transaction records: Retained for 7 years as required by financial regulations
KYC documents: Retained for 5 years after the end of the business relationship
Server logs: Retained for 90 days for security purposes
Marketing preferences: Until you withdraw consent
Blockchain data: Permanent and immutable—we cannot delete information recorded on public blockchains

8. Your Rights

Depending on your jurisdiction, you may have the following rights:

Right of Access

Request a copy of the personal data we hold about you.

Right to Rectification

Request correction of inaccurate or incomplete personal data.

Right to Erasure

Request deletion of your personal data, subject to legal retention requirements.

Right to Restriction

Request that we limit how we use your data in certain circumstances.

Right to Data Portability

Receive your data in a structured, machine-readable format.

Right to Object

Object to processing based on legitimate interests or for direct marketing.

Right to Withdraw Consent

Withdraw consent for processing activities based on consent at any time.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

9. Data Security

We implement robust security measures to protect your information:

Encryption: All data in transit uses TLS 1.3; sensitive data at rest is encrypted using AES-256
Access controls: Role-based access with multi-factor authentication for staff
Infrastructure: Secure cloud hosting with SOC 2 Type II certified providers
Monitoring: 24/7 security monitoring and intrusion detection systems
Audits: Regular security audits and penetration testing
Training: Regular security awareness training for all employees

In the event of a data breach that poses a risk to your rights, we will notify you and relevant authorities within 72 hours as required by GDPR.

10. International Data Transfers

As a global platform, your data may be transferred to and processed in countries outside your jurisdiction:

Safeguards

  • Standard Contractual Clauses (SCCs) approved by the European Commission
  • Data processing agreements with all third-party processors
  • Adequacy decisions where applicable
  • Your explicit consent for specific transfers

Our primary data processing occurs in the United Arab Emirates. For EEA users, we ensure appropriate safeguards for any data transfers outside the EEA.

11. Cookies and Tracking

We use cookies and similar technologies to enhance your experience:

Essential cookies: Required for platform functionality (always active)
Functional cookies: Remember your preferences and settings
Analytics cookies: Help us understand how users interact with our platform
Marketing cookies: Used for targeted advertising (only with consent)

You can manage cookie preferences through your browser settings or our cookie consent banner. For detailed information, see our Cookie Policy.

View our full Cookie Policy

12. Children's Privacy

Our platform is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected data from a minor, please contact us immediately and we will take steps to delete such information.

13. Third-Party Links and Services

Our platform may contain links to third-party websites or integrate with external services (such as blockchain networks and wallet providers). We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal information.

14. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified via email or platform notification at least 30 days before taking effect. Your continued use of the platform after changes constitutes acceptance of the updated policy.

We encourage you to periodically review this policy to stay informed about how we protect your information.

15. Contact Us

For any privacy-related questions or concerns:

General inquiries: [email protected]

Privacy inquiries: [email protected]

Data Protection Officer: [email protected]

Elysium Media FZCO, Dubai Digital Park, Dubai Silicon Oasis, United Arab Emirates

You also have the right to lodge a complaint with your local data protection authority.

Acknowledgment

By using VeriEscrow, you acknowledge that you have read and understood this Privacy Policy. You understand that as a non-custodial platform, certain blockchain transaction data is publicly visible and permanent.