Privacy

What we hold

• Your XRPL address, and the loans made to it: amounts, dates, states and the transactions behind them. Straid cannot run a loan without these.
• Screening results for that address: whether it was allowed, by which provider and why, so that a refusal can be explained and audited.
• The country your request comes from, taken from a header our network layer adds, used to apply the geographic block.
• Your network address, used in memory to rate limit requests. It is not written to our database.
• Technical logs of errors and operations, kept short term for running the service.

We do not ask for your name, email, documents or identity for borrowing today. If that changes, because the law requires it, we will say so before it applies to you.

What is public no matter what we do

Every escrow, payout and repayment is a transaction on the XRP Ledger. Addresses, amounts and times are visible to anyone, permanently, and neither Straid nor you can delete them. Your loan page links to the public record of your own transactions.

What we do not do

• No advertising, no third party analytics, no tracking pixels, no profiling.
• No selling or sharing of data for anyone else's marketing.
• No cookies for tracking. Your sign in is kept by your browser for the tab you are using and disappears when you close it.
• Fonts are served from our own domain, so opening the site does not call out to anyone else.

Who else sees anything

• Your wallet provider, when you sign. Straid sends it the transaction to sign; what it does with that is governed by its own policy.
• Our hosting and network providers, which carry the traffic and run the servers.
• A screening provider, which is asked whether an address is on a sanctions or risk list.
• Authorities, where the law requires it of us.

How long

Loan records and screening results are kept while the loan exists and afterwards for as long as we are required to keep records of a financial transaction. Technical logs are kept for a short period. On chain data is permanent and outside anyone's control.

Your rights, and how to use them

If you are in the EU or the UK you can ask what we hold about you, ask for it to be corrected, ask for it to be deleted where we are not required to keep it, and complain to your data protection authority. Write to [email protected] from a channel we can tie to your address, or sign a message from the wallet in question, and we will answer.

We cannot delete anything from the XRP Ledger, and we cannot delete records we must keep to show that a loan happened.

See also the terms of use.