1. Information we collect

When you use Rare Swap, we collect the following data to facilitate your transfer:

Sender email address
Recipient email address, phone number, or WhatsApp number
Transfer amounts and currency selections
IP address and browser user agent (for fraud prevention)

We do not collect passwords, banking details, or government-issued IDs during the sender flow. Recipient identity verification is handled by our payment partner during the cash-out process.

2. How we use your data

To create and manage transfers
To send claim notifications to recipients
To prevent fraud and comply with regulatory requirements
To improve our service

3. Data storage and security

Transfer data is stored in Supabase (hosted on AWS) with row-level security policies. Claim tokens are encrypted with AES-256-GCM. We do not store card details — all payment processing is handled by Coinbase.

4. Third-party services

We use the following third-party services:

Privy — Embedded wallet creation and authentication
Coinbase — Card payment processing and bank withdrawals
Twilio — SMS and WhatsApp delivery
Resend — Email delivery
Vercel — Application hosting
PostHog — Privacy-friendly analytics

5. Your rights

You can request deletion of your data at any time by contacting us at privacy@rareswap.com. We will remove all personal data within 30 days, subject to any legal retention requirements.

6. Contact

For privacy-related questions, email privacy@rareswap.com.