Privacy Policy

1. Overview & Commitment

Veylora Bridge AI (“we,” “our,” or “the Platform”) is committed to protecting the privacy of clients, freelance contractors, and platform evaluators. This Privacy Policy outlines how we collect, process, store, and safeguard your personal information and financial transaction identifiers when you use our autonomous milestone escrow and automated proof-of-work verification services.

2. Information We Collect

• Account Identifiers: Your name, email address, account password hash, and authenticated provider identifiers (such as Google OAuth profile data).
• Payment & Transaction Metadata: PayPal transaction IDs, Order IDs, Capture IDs, and PayPal account email addresses. Note: We do not process, store, or have access to raw credit card numbers or banking credentials; all fund authorization and capture occurs directly through PayPal’s secure Orders v2 API infrastructure.
• Project & Contract Data: Contract scope summaries, milestone allocations, acceptance criteria specifications, and deliverable notes.
• Verification Evidence: Deployment URLs, GitHub repository URLs, automated test execution logs, screenshots captured by our headless Playwright runner, and SHA-256 cryptographic hash trees.

3. How Information is Used

We use collected information strictly to:

• Orchestrate conditional PayPal kickoff advance payments and milestone escrow releases.
• Execute automated Playwright test suites against contractor deployment endpoints to verify acceptance criteria.
• Maintain immutable, tamper-evident SHA-256 audit logs of all contract lifecycle events.
• Facilitate neutral AI analysis and administrator triage during dispute resolution proceedings.
• Communicate critical account notifications, milestone sign-offs, and payment receipts.

4. Third-Party Services & PayPal Integration

Our application integrates directly with:

• PayPal REST API v2: For payment intent authorization, order capture, and disbursement escrow operations. Your transactions are subject to PayPal’s Privacy Statement and User Agreement.
• Google Authentication: For federated single sign-on access.

5. Cryptographic Audit Streams & Immutability

To eliminate payment ghosting and retroactive contract tampering, milestones and verification runs are recorded into a cryptographic event stream. Each audit record contains a SHA-256 hash chaining back to the preceding state. These hashes are public to contract participants but do not expose raw passwords or financial account credentials.

6. Data Retention & Rights

You maintain the right to access, review, and request deletion of your personal account information at any time, subject to legal retention obligations for settled financial transactions and audit verification records.