Privacy Policy

P2PFather is built with a privacy-first, security-driven philosophy for peer-to-peer digital asset trading. We operate under a strict minimal-data processing framework. We do not sell user data, run invasive ad trackers, or collect unnecessary personal information beyond what is strictly required to execute escrow transactions, prevent fraud, and facilitate safe P2P settlement.

To eliminate security risks and protect our community members, our platform enforces the following guarantees:

• No Invasive Web Tracking: We do not track you across third-party websites or deploy third-party advertising cookies.
• No Server Storage of Raw ID Documents: When you complete identity verification, your physical identity documents and biometric scans are verified through our certified compliance partner (Didit Protocol) using bank-grade encryption; raw images of your identity documents are never stored directly on P2PFather application servers.
• No Selling of User Data: Your contact numbers, wallet addresses, and trading records are never sold, rented, or commercialized.

We process and store only the parameters necessary to manage your account, match trading orders, secure smart contract escrows, and conduct dispute mediation:

• Authentication & Account Identifiers: Your Telegram User ID, username, and/or WhatsApp Phone Number to authenticate your web dashboard and bot sessions, deliver real-time trade notifications, and send one-time login codes (OTPs).
• Wallet Addresses: Your custodial wallet index and connected external wallet addresses to monitor on-chain deposit, escrow, and withdrawal balances across supported blockchains.
• Payment Handles (UPI & Bank Details): Your UPI ID, bank account name, or payment address to enable ad creation and peer-to-peer fiat settlement. These details are stored in our secure database and are shared only with your active trade counterparty during an open order.
• KYC Verification Status: For users who complete identity verification, we store the verification status (VERIFIED, UNVERIFIED, or UNDER REVIEW), Didit Session ID, and verification timestamp to display your "Verified Trader" badge.
• Dispute Evidence: Chat records, transaction UTR numbers, and payment receipt screenshots submitted voluntarily during an arbitration to allow admins to resolve disputed trades fairly.

To combat scams, prevent fraudulent banking disputes, and foster a safe trading ecosystem, P2PFather offers optional Identity Verification (KYC):

• Verification Partner: Identity verification workflows are powered by Didit Protocol (didit.me), an enterprise-grade, privacy-preserving identity verification provider.
• Document & Biometric Verification: During KYC, Didit securely processes your government-issued ID (e.g. Passport, Driving License, National ID) and a 3D liveness selfie check to verify proof of personhood.
• Encryption & Privacy: All biometric and document transmissions are encrypted in transit (TLS 1.3) and at rest (AES-256) by Didit in full compliance with global data protection standards (including GDPR).
• Verified Trader Badge: Once verified, your profile displays the green Verified Trader badge, giving your trading counterparties greater trust and safety during peer-to-peer transfers.

When you lock or release tokens inside our P2P Escrow smart contracts, transactions are broadcast to public blockchain networks (e.g., Base, BSC, Polygon).

Blockchain records—including public wallet addresses, smart contract interaction hashes, token amounts, and timestamps—are permanently public, immutable, and accessible by anyone on global block explorers. P2PFather does not have the ability to modify, censor, or purge on-chain records.

To deliver reliable service, P2PFather interfaces with trusted third-party providers:

• Didit Protocol: Encrypted biometric verification and automated identity validation (Didit Privacy Policy).
• WhatsApp Business API (Meta): Automated dispatch of trade notifications and one-time verification passcodes.
• Telegram Messenger: Telegram Bot and Telegram Mini App interfaces operate within Telegram's infrastructure.
• Blockchain RPC Providers: Node infrastructure for decentralized smart contract interaction.

• Session Security: All web and bot communication uses HTTPS/WSS encryption and SHA-256 HMAC verification.
• Profile Management: You can edit or delete your saved UPI payment details anytime directly from your profile settings on the Web Dashboard or Mini App.
• Account Unlinking: You may unlink your Telegram or WhatsApp accounts at any time from your account settings.
• Data Deletion Requests: You may request the deletion of your off-chain profile data by contacting our support team via Telegram or WhatsApp.

P2PFather provides a non-custodial smart contract escrow and order matchmaking software interface. We do not hold fiat currency (INR/AED/USD) and are never party to the direct banking or UPI transfers between buyers and sellers.

Important Notice: You are solely responsible for cross-verifying the identity of your trade counterparty, verifying that bank account holder names match verified profiles, and validating genuine bank credit before releasing escrow. P2PFather and its developers are not responsible for any bank account freezes, Cyber Cell inquiries, third-party payment fraud, or financial disputes arising from peer-to-peer fiat payments. All trades are conducted at your own risk.