Privacy Policy & Security Standards

1. Overview & Data Philosophy

D'accord ("we", "our", or "the Protocol") operates an autonomous, milestone-based contract settlement network integrated with the PayPal Developer Platform. We believe in radical data minimization: our AI verification engines operate inside zero-retention ephemeral sandboxes, and financial credentials are never touched directly by our servers.

2. Data We Collect and Process

• Contract & Milestone Metadata: Deliverable descriptions, milestones, acceptance criteria, and cryptographic state hashes.
• Public Code Repositories & Artifacts: Git pull request URLs, CI build logs, and deploy status endpoints submitted voluntarily for automated verification.
• Payment Routing Tokens: PayPal Order IDs, Payout Batch IDs, and masked receiver emails necessary for transaction reconciliation via PayPal Sandbox and REST APIs. We never store or transmit raw credit card numbers or banking credentials.

3. Secure OAuth & PayPal Credentials Usage

All payments, escrow holds, and automated disbursements are executed via official, authenticated PayPal REST API endpoints (Orders v2 and Payouts v1). Sessions use TLS 1.3 cryptographic tunneling, and all webhooks are verified against PayPal root certificates using SHA-256 HMAC digital signatures.

4. Air-Gapped Code Inspection & AI Privacy

When code deliverables or build logs are submitted for milestone verification, they are inspected inside air-gapped memory buffers. Your proprietary source code is never used to train generalized foundation models, and all inspection memory is wiped immediately after generating the cryptographic verification receipt.

5. GDPR & CCPA Compliance

In accordance with European General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA) standards, users retain full rights to request audit logs, data deletion, or export of their contract transaction history at any time by contacting our security team.