Privacy Policy

What we collect

• Email address and name (from sign-up or social login)
• Agreement data you create (titles, descriptions, party emails)
• Wallet addresses you connect (note: wallet addresses are pseudonymous identifiers — transactions associated with a wallet address are permanently recorded on the public blockchain and viewable by anyone)
• Terms of Service acceptance records, including the timestamp and version of Terms you accepted
• Usage data (pages visited, features used — anonymized)
• Error reports via Sentry — includes the page URL, browser type, and an anonymized internal user identifier. No email addresses, wallet addresses, or payment data are included in error reports.
• Payment data (handled entirely by Stripe; we do not store card details)
• Service page data you create (titles, descriptions, pricing, delivery estimates, milestones)
• Quote request submissions from clients (email address, description, budget range, timeline) — collected without requiring a MyPact account
• Public profile information (handle, display name, bio) — visible to anyone when you create a public service page
• Service page view counts (deduplicated by IP address, no personally identifiable information stored)

What we will never collect

• Private keys
• Wallet balances or contents
• Transaction history outside of MyPact

How we use your data

• To run the service (create agreements, send invite emails)
• To communicate with you (transactional emails, billing)
• To improve the product (anonymous usage analytics)

Who we share it with

• Stripe — billing (subject to Stripe's privacy policy)
• MailerSend — transactional emails only (invite notifications, magic links)
• Vercel — hosting and infrastructure
• The Ethereum blockchain — on-chain records (agreement data, wallet addresses, signatures) are public by design
• Privy — embedded wallet and authentication services for users who sign in with email or social login. Privy holds encrypted key shards for embedded wallets (subject to Privy's privacy policy)
• Coinbase — on-ramp/off-ramp for purchasing crypto with a card. Coinbase may require identity verification (KYC) under their own terms (subject to Coinbase's privacy policy)
• Neon — managed PostgreSQL database hosting. Stores account data, agreement records, and workspace information (subject to Neon's privacy policy)
• Sentry — error monitoring and performance tracking. Receives anonymized error reports (no email, wallet, or payment data included)
• Other workspace members — if you are a member of a shared workspace (Team tier), your name and email address are visible to other members of that workspace
• Service page owners — if you submit a quote request on a service page, your email address and request details are shared with the freelancer who owns that service page
• Search engines — public service pages (handle, display name, service titles and descriptions) may be indexed by search engines. You control this via visibility settings.

We do not sell your data.

Your rights

Depending on where you live, you may have the following rights regarding your personal data:

• California (CCPA): right to know, delete, and opt out of sale of personal information
• EU / UK (GDPR): right to access, rectify, erase, restrict processing, and data portability

To exercise any of these rights, email legal@mypact.net. Note that on-chain records cannot be deleted — that is a property of the blockchain, not a choice we make.

Cookies

We use cookies and similar technologies to run the service, protect your account, and (if you opt in) analytics and error reporting. The cookie banner lets you reject non-essential categories, manage toggles, or accept all. You can reopen choices anytime via Cookie settings in the footer. For details, see our Cookie Policy.

Data retention

We retain your account data while your account is active and for 90 days after deletion, except where longer retention is required by law. Quote request data is retained until the service page owner deletes their account or the service page is deleted. On-chain records are permanent and cannot be removed by MyPact. To request deletion of a quote request you submitted, email legal@mypact.net.

Contact

For privacy questions or to exercise your rights, email legal@mypact.net.