Privacy Policy

1. What we collect

• Deal room data: the display name you choose, the transaction title, description, amount and currency, the side you are on, and every message you post.
• Technical data: data necessary to serve the site securely, such as your request metadata and timestamps.
• Verification data: where a transaction requires it, identity or source-of-funds information that you provide to us.

We do not ask for a real name to open or join a room. Do not post more personal data in a room than the transaction actually requires.

2. Why we process it and on what basis

• To perform the service (Art. 6(1)(b) GDPR): creating the room, admitting the counterparty, recording terms, handling the release.
• To comply with legal obligations (Art. 6(1)(c)): record keeping, responding to lawful requests, anti-money-laundering checks where applicable.
• Legitimate interests (Art. 6(1)(f)): preventing fraud and abuse, evidencing concluded transactions, defending legal claims.

3. Who can see it

Deal room content is visible only to the two parties to that room and to pokz. We do not sell personal data and we do not use it for advertising. We use technical service providers to host the site and the database; they process data on our instructions under a processing agreement. We disclose data to authorities only where legally required.

4. International transfers

Where a service provider processes data outside the European Economic Area, that transfer is covered by an adequacy decision or by Standard Contractual Clauses.

5. How long we keep it

• Deal rooms that never reached the terms stage: deleted after 12 months.
• Completed transactions, including the message record and any decision: retained for 5 years from completion so that the transaction can be evidenced.
• Verification records, where collected: retained for the period required by applicable anti-money-laundering law.

6. Your rights

You have the right to access your data, to rectification, to erasure, to restriction of processing, to object to processing based on legitimate interests, and to data portability. Requests relating to a specific transaction should quote the deal reference. Some data cannot be erased before the retention period ends where we need it to evidence a concluded transaction or to meet a legal obligation.

You also have the right to lodge a complaint with the Portuguese data protection authority (Comissão Nacional de Proteção de Dados) or the supervisory authority where you live.

7. Security

Traffic to this site is encrypted in transit. Deal room content is stored in a database that is not reachable directly from a browser: every read and write passes through our own server-side checks, which verify the private access key in your room link first. Access keys are unguessable random values.

8. Cookies and storage

We use only what is strictly necessary to operate the site and to keep you in your deal room. We do not use advertising or cross-site tracking cookies.

9. Changes

We may update this policy. Material changes affecting a live transaction will be posted in the affected deal rooms.