Privacy Policy

1. Information We Collect

We collect information that you provide directly, information generated by your use of the platform, and limited information from third-party services.

Account information. When you create an account, we collect your name, email address, phone number, and password. If you register as a shipper, we also collect your service area and bio. If you provide address information in your profile, we collect that as well.

Transaction data. When you create or participate in contracts, we collect the details of those transactions, including contract titles, item descriptions, item prices, the roles of each party (buyer, seller, shipper), contract status, condition completion history, signatures, and activity logs.

Documents and uploads. If you upload documents to the platform — such as titles, registrations, proof of ownership, verification photos, or checklist images — we collect and store those files.

Payment information. Payments on Sekura are processed by Stripe. Sekura does not collect, store, or have access to your full credit card numbers, bank account numbers, or other sensitive financial data. Stripe handles all payment data in accordance with PCI-DSS standards. We receive limited transaction information from Stripe, such as confirmation of payment success or failure.

Usage data. We collect information about how you use the platform, including pages visited, actions taken (such as creating contracts, funding, signing), timestamps, and the sequence of your interactions.

Device and browser information. We automatically collect technical information such as your IP address, browser type and version, operating system, and device type. This is used for security, session management, and troubleshooting.

2. How We Use Your Information

We use the information we collect for the following purposes:

• Provide the platform service. To create and manage your account, facilitate contracts between parties, process conditions, hold and release funds, and generate Bills of Sale.
• Process transactions. To manage fund deposits, contract-based fund commitments, releases, and refunds through our payment processor (Stripe).
• Communicate with you. To send transactional emails (contract invitations, funding confirmations, completion notifications, cancellation requests), account security alerts, and platform updates.
• Prevent fraud and abuse. To detect and prevent fraudulent transactions, unauthorized account access, and violations of our Terms of Service.
• Improve the platform. To understand how users interact with Sekura, identify issues, and improve features and usability.
• Legal compliance. To comply with applicable laws, regulations, legal processes, and government requests, and to maintain transaction records as required by tax and financial reporting laws.

3. Information Sharing and Disclosure

Sekura does not sell your personal information to advertisers, data brokers, or any third parties.

We share information only in the following limited circumstances:

With the other party in a transaction. When you participate in a contract, the other party can see your name, your role (buyer, seller, or shipper), and your activity on the contract (such as when you signed, funded, or completed conditions). This is necessary for the transaction to function. The other party does not see your email address or account balance unless you choose to share them. We do not display phone numbers to other users by default — except where a Shipper has been assigned to a Contract, in which case the Shipper's phone number is shown to the Buyer and Seller on that Contract (and the Buyer's and Seller's phone numbers are shown to the Shipper) so that the parties can coordinate pickup and delivery directly. This exception applies only while the Shipper is assigned to the Contract.

With shippers. If a shipper is assigned to a contract, they can see the contract title, item type, verification checklist, and the names of the buyer and seller. Shippers can also see pickup and delivery address information that the parties provide within the contract.

With Stripe. We share necessary information with Stripe to process payments, including your name, email, and transaction amounts. Stripe's use of your data is governed by Stripe's Privacy Policy.

With Resend. We use Resend to deliver email notifications. Resend receives your email address and the content of emails we send you (such as contract invitations and status updates). Resend does not use your data for any purpose other than email delivery.

With law enforcement. We may disclose your information if required by law, subpoena, court order, or government request, or if we believe in good faith that disclosure is necessary to protect the safety of any person, prevent fraud, or protect Sekura's legal rights.

In a business transfer. If Sekura is acquired, merges with another company, or sells substantially all of its assets, your information may be transferred as part of that transaction. We will notify you of any such change.

4. Data Security

We take reasonable measures to protect your information from unauthorized access, loss, misuse, and alteration.

• Encryption in transit. All data transmitted between your browser and our servers is encrypted using HTTPS (TLS).
• Secure storage. Your data is stored on secure servers with access controls and monitoring.
• Password hashing. Your password is stored using industry-standard one-way hashing. We cannot see or recover your password.
• Payment security. All payment data is handled by Stripe, which maintains PCI-DSS Level 1 compliance. Sekura never stores credit card numbers or bank account details.

While we implement these safeguards, no system is 100% secure. We cannot guarantee absolute security of your data. You are responsible for maintaining the confidentiality of your account credentials and for any activity that occurs under your account.

5. Data Retention

We retain your information for as long as necessary to provide our services and comply with legal obligations:

• Account data (name, email, phone, profile information) is retained while your account is active and for a reasonable period after account closure to handle any pending issues.
• Transaction records (contracts, conditions, activity logs, Bills of Sale) are retained for a minimum of seven (7) years after contract completion for legal, tax, and regulatory compliance purposes.
• Uploaded documents (titles, photos, verification images) are retained for the duration of the associated contract and the retention period described above.
• Usage data and logs are retained for up to twelve (12) months for security and troubleshooting purposes.

When you request account deletion, we will delete or anonymize your personal information, except where we are legally required to retain it (such as transaction records for tax compliance). See Section 6 for details on exercising your rights.

6. Your Rights

You have the following rights regarding your personal information:

• Access. You can view your account information, transaction history, and uploaded documents at any time through the platform.
• Correction. You can update your name, email, phone number, and address information through your account settings. If you need to correct information on a completed contract, contact us at privacy@sekuratrust.com.
• Deletion. You can request deletion of your account by contacting us at privacy@sekuratrust.com. We will delete or anonymize your personal information, subject to our legal retention obligations (see Section 5). You must complete or withdraw from all active contracts before requesting deletion.
• Data export. You can request a copy of your transaction history and account data by contacting us at privacy@sekuratrust.com. We will provide your data in a commonly used electronic format.
• Email preferences. You can opt out of marketing and promotional emails at any time by clicking the unsubscribe link in any marketing email. You cannot opt out of transactional emails (such as contract invitations, funding confirmations, and security alerts), as these are essential to the platform's operation.

To exercise any of these rights, contact us at privacy@sekuratrust.com. We will respond to requests within 30 days.

7. Cookies and Tracking

Sekura uses a minimal number of cookies, limited to what is necessary for the platform to function:

• Session cookies. Used to keep you logged in and maintain your session as you navigate the platform. These expire when you close your browser or after a period of inactivity.
• CSRF tokens. Used to protect against cross-site request forgery attacks. These are a standard security measure.

What we don't use:

• No third-party advertising or tracking cookies.
• No social media tracking pixels or widgets.
• No cross-site tracking of any kind.

Because we only use essential cookies, there is no cookie consent banner. If we add non-essential cookies in the future, we will update this policy and provide appropriate notice and consent mechanisms.

8. Third-Party Services

Sekura integrates with the following third-party services to operate the platform:

Stripe — Payment processing. Stripe handles all payment transactions, fund holding, and bank transfers. When you add funds or receive a payout, your financial data is processed by Stripe under their privacy policy and PCI-DSS compliance standards. Sekura does not store your payment card or bank account details. Stripe Privacy Policy.

Resend — Email delivery. Resend delivers transactional emails on our behalf (contract invitations, funding confirmations, completion notifications, etc.). Resend receives your email address and the content of emails sent to you. Resend Privacy Policy.

We do not use third-party analytics services, social media trackers, or advertising networks. If we add such services in the future, we will update this policy accordingly.

9. Children's Privacy

Sekura is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from individuals under 18. If we become aware that we have collected information from a person under 18, we will take steps to delete that information promptly.

If you are a parent or guardian and believe your child has provided personal information to Sekura, please contact us at privacy@sekuratrust.com so we can take appropriate action.

10. State-Specific Privacy Rights

California residents (CCPA/CPRA). If you are a California resident, you have additional rights under the California Consumer Privacy Act and the California Privacy Rights Act:

• Right to know. You can request that we disclose what personal information we have collected, used, shared, and sold (we do not sell personal information) about you in the preceding 12 months.
• Right to delete. You can request deletion of your personal information, subject to certain legal exceptions.
• Right to opt out of sale. Sekura does not sell personal information. There is nothing to opt out of.
• Right to non-discrimination. We will not discriminate against you for exercising your privacy rights.

Other state privacy laws. Residents of states with comprehensive privacy laws (such as Virginia, Colorado, Connecticut, and others) may have similar rights to access, correct, delete, and opt out. To exercise any state-specific privacy rights, contact us at privacy@sekuratrust.com. We will verify your identity before processing any request.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. When we make changes, we will update the "Last updated" date at the top of this page.

For material changes — such as new categories of data collection, new third-party sharing, or changes to your rights — we will notify you via email or an in-platform notification at least 14 days before the changes take effect.

Continued use of the platform after updated terms take effect constitutes your acceptance of the changes.

12. Contact Information

If you have questions about this Privacy Policy, want to exercise your privacy rights, or have concerns about how your data is handled, you can reach us at:

Entity: Sekura LLC, a Minnesota limited liability company
Privacy inquiries: privacy@sekuratrust.com
General support: support@sekuratrust.com
Website: sekuratrust.com

We will respond to privacy-related requests within 30 days.