Introduction
We respect your privacy and collect as little data as possible to run the service. This policy explains what we collect, why, and how we protect it.
Data we collect
- Account details: name, email address, password (encrypted), and profile photo if you add one.
- The RIP number you link to your account, and the picture of the crossed cheque if you upload one for verification (stored privately).
- Deal descriptions: the item, the delivery destination, the amount, and optionally the platform and the recipient’s name.
- The transaction number (External ID) and the times of each payment stage.
- The referral code you signed up with, if any, and for referral program members: their commissions and payouts.
- For guest senders: full name, an encrypted device identifier and IP address to lock the payment to their device.
- Technical data: login records, notification subscriptions and basic browser information.
How we use it
- Comparing the two deal descriptions and showing the RIP number to the sender only after a match.
- Preventing transaction numbers from being reused and locking each payment to one device.
- Sending notifications and emails about your payments and your account.
- Fighting fraud and improving the accuracy of the verification and the platform’s performance.
The automated verifier (AI)
Only the deal descriptions (without the RIP number, email address or account details) are sent to an AI model at an external provider to be compared. We never use these descriptions for marketing.
Data sharing
We never sell your data. We only share it with providers essential to running the service: hosting, email, notifications, payment through Slick-Pay, and the verification model. The sender sees the recipient’s RIP number after a match, and the recipient sees the sender’s name. We only hand over a registered user’s identity to the competent authorities upon a legal request.
Signing in with Google
When you sign in with Google, we only receive your name, email address and account identifier, and we never access any other data in your account.
Visitor statistics
We use Google Analytics on public pages only (the website, the blog, and the login and sign-up pages) to measure the number of visitors and the most visited pages, using cookies. It never runs on payment links, receipts or inside your account, and we never send it any data about your payments.
Security
We use HTTPS for all connections, encrypt passwords and the RIP numbers stored in payments, and offer two-factor authentication. Every administrator view of an uploaded cheque is logged.
Retention
We keep your account data as long as your account is active. Records of completed payments and transaction numbers are kept to fight fraud and prevent receipts from being reused, even after the account is deleted, once separated from your identity.
Your rights
You have the right to access, correct and export your data, and to request its deletion. You can export your payment and credit history from the payments page, and request deletion through the data deletion page.
Contact us
For any privacy question, write to us through the contact page or at mail@el-b.com.