PRIVACY POLICY & AI PROCESSING DISCLOSURE

Operated by: Mirdain Group LLC (mirdaingroup.com)

1. ELIGIBILITY (18+ U.S. RESIDENTS ONLY)

Handshake is available strictly to individuals who are at least 18 years of age and reside in the United States. We do not knowingly collect personal information from anyone under 18. If we learn that an account belongs to a person under 18, we will promptly terminate the account and delete associated personal data.

2. DATA WE COLLECT

Account Data: Email address, authentication UID, unique @handle, Cred score, Token balance, AI disclosure consent version/timestamp, referral metadata, and notification preferences.
Agreement & Dispute Data: Plain-English agreement proposals, generated agreement terms, participant UIDs and @handles, timestamps, status history, written dispute statements, and optional proof/evidence photos uploaded by participants.
Device, Push & Diagnostic Data: Firebase Cloud Messaging (FCM) registration tokens for push notifications and crash/error telemetry logs used to maintain service reliability.

3. HOW WE PROTECT YOUR PRIVACY (PUBLIC VS. PRIVATE PROFILES & DISCOVERABILITY)

Private Account Record (/users/{uid}): Your private user document (email address, push notification tokens, referral metadata, AI consent record, and blocked user list) is strictly restricted to your authenticated account and backend security rules and is never exposed to other users.
Public Profile Mirror (/public_profiles/{uid}) & Handle Registry (/handles/{handle}): Your @handle, Cred score, completed deal count, and discoverability flag are stored in a public profile mirror that any authenticated Handshake user can read by direct lookup (e.g., if they already know your @handle or UID, or share an agreement or invite link with you).
What the "Discoverable via Search" Toggle Controls: Turning Discoverable via Search OFF removes your profile from @handle search/autocomplete results and public profile list queries so strangers cannot browse for you when drafting a new deal. Turning Discoverability OFF does not hide your @handle, Cred score, or completed deal count from authenticated users who already share an agreement with you or look up your exact @handle or UID directly.

4. ARTIFICIAL INTELLIGENCE (GOOGLE GEMINI) DISCLOSURE

Handshake uses Google Gemini AI models strictly on our backend after you accept the in-app AI Processing Disclosure for two functions:

Agreement Drafting: Converting your plain-English deal description into structured agreement terms.
Final In-App Dispute Mediation: Reviewing agreement terms, participant written statements, and uploaded dispute evidence photos to issue a final in-app Token and Cred ruling (not legal arbitration; affects only non-monetary in-app Tokens and Cred).

What Is Shared with Gemini: Plain-English agreement text, participant @handles, written dispute statements, and uploaded proof/evidence photos. Your email address, authentication credentials, and device push tokens are never sent to the AI model.

[PENDING PAID-TIER / VERTEX AI CONFIGURATION VERIFICATION — DRAFT]: Requests to Google Gemini are transmitted from our backend via Google's paid Cloud / Gemini API. Under Google's Paid Services data-use terms, Google does not use prompts, agreement text, or uploaded evidence photos submitted through paid APIs to train its foundation models, and retains API inputs only temporarily (up to 55 days for Gemini API abuse/safety monitoring, or 0-day/opt-out abuse logging where configured via Vertex AI) before deletion.

5. THIRD-PARTY SERVICE PROVIDERS (PROCESSORS)

We share data only with infrastructure processors necessary to operate Handshake:

Google Firebase / Google Cloud Platform: Authentication, Cloud Firestore database, Cloud Storage for agreement evidence photos, Cloud Functions backend compute, and Firebase Cloud Messaging (push notifications).
Google Gemini (Google Cloud / AI Studio): Automated agreement formatting and in-app dispute mediation as described in Section 4.
Resend: Transactional email delivery (such as account support, verification, and operational alerts sent from mirdaingroup.com).

We do not sell your personal information or share it with third-party advertising networks.

6. DATA RETENTION & ACCOUNT DELETION

You may permanently delete your account at any time via Settings → Delete Account inside the Handshake app (provided you have no active or disputed agreements in flight) or by emailing info@mirdaingroup.com.

Deleted Immediately Upon Account Deletion: Your Firebase Authentication record (email and credentials), private user profile (/users/{uid}), notification history, public profile mirror (/public_profiles/{uid}), reserved @handle (/handles/{handle}), and any unaccepted PENDING proposals you created.
Retained Records & Retention Windows: To preserve counterparty history, Cred integrity, anti-fraud accounting, and Trust & Safety compliance, finalized agreement records, associated dispute evidence photos, immutable ledger audit entries (which contain your internal UID and token/Cred deltas, not your email), abuse reports, and error logs are retained for limited periods after account deletion. See our Account & Data Deletion page for the complete retention schedule.

7. CALIFORNIA (CCPA / CPRA) & U.S. STATE PRIVACY RIGHTS

Depending on your state of residence (including California), you have the right to:

Right to Know / Access: Request details about the categories and specific pieces of personal information we have collected about you.
Right to Delete: Request deletion of your personal information, subject to statutory exceptions (such as maintaining security, preventing fraud, and preserving transactional integrity for counterparties).
Right to Correct: Request correction of inaccurate personal information.
No Sale or Sharing: Mirdain Group LLC does not "sell" or "share" (for cross-context behavioral advertising) personal information as defined under the CCPA/CPRA.
Non-Discrimination: We will not discriminate against you for exercising any privacy rights.

To exercise your privacy rights, email info@mirdaingroup.com from the email address associated with your Handshake account.

8. CONTACT US

Mirdain Group LLC
Privacy & Trust Inquiries: info@mirdaingroup.com
Account Deletion Instructions: https://handshake.mirdaingroup.com/delete-account