Pythias. The handshake, enforced.

Pythias is facilitator-only deal infrastructure for private transactions. Pythias helps users document deal terms, coordinate consent-based verification, collect signatures, create deal records, and coordinate third-party escrow or payment workflows through licensed or specialized partners. Pythias does not hold, custody, pool, control, or move customer funds. Principal funds are handled by third-party providers such as Escrow.com, and Pythias may use Stripe only for Pythias platform fees or other payment flows approved by counsel.

This Privacy Policy explains what information Pythias collects, how it is used, how it is shared, and what choices users have.

Information We Collect

We collect information users provide directly, information generated by use of the service, and limited information from third-party providers when users authorize those connections.

Information users provide:

Name.
Email address.
Phone number, if provided.
Account login information.
Deal records and deal descriptions.
Counterparty names and email addresses.
Party-entered transaction terms.
Uploaded files or supporting documentation, if available in the product.
Electronic signatures, initials, signature timestamps, and signature audit metadata.
Communications, support requests, and feedback.

Verification and transaction metadata:

Plaid connection status and verification metadata.
Bank account verification results or tokens returned through Plaid.
Escrow.com transaction IDs, transaction status, party roles, milestone status, and related escrow workflow metadata.
Stripe payment status and payment metadata for Pythias platform fees, if used.
Email delivery metadata from Resend.
Login, account, device, browser, IP address, security, and audit log metadata.

Pythias does not collect or store bank login credentials. When a user connects a bank account through Plaid, the user enters bank credentials directly through Plaid or the financial institution. Pythias does not see or store those credentials.

Pythias does not perform a credit pull at launch. Pythias does not request, obtain, sell, or provide consumer credit reports unless the product is changed after attorney review and appropriate legal workflows are added.

How We Use Information

We use information to:

Create and manage Pythias accounts.
Create, display, and store deal records.
Track deal status and workflow history.
Support consent-based identity, account, and financial verification.
Coordinate Escrow.com escrow workflows where applicable.
Process Pythias platform fees through Stripe, if applicable.
Send account, transaction, security, verification, and support emails through Resend.
Generate and store signatures, audit trails, and verification records.
Provide customer support.
Improve security, reliability, and product functionality.
Prevent abuse, fraud, unauthorized access, and misuse.
Comply with legal obligations and enforce Pythias policies.

Third-Party Processors and Service Providers

Pythias uses the following third-party processors and infrastructure providers:

Plaid: consent-based bank account and financial verification. Pythias never sees bank login credentials.
Escrow.com: third-party licensed escrow services for principal funds where escrow is used.
Stripe: payment processing for Pythias platform fees or other counsel-approved payment flows.
Resend: transactional email delivery.
Supabase: database, authentication, storage, logs, and application backend services.
Vercel: application hosting, deployment, edge and network infrastructure, and related logs.

These providers process information according to their own terms and privacy policies. Users may need to interact with those providers directly to complete verification, escrow, or payment steps.

Money Movement and Escrow

Pythias does not hold or move customer funds. Pythias is not a bank, escrow company, money transmitter, lender, broker-dealer, debt collector, credit bureau, or law firm. When a transaction uses escrow, funds are handled by Escrow.com or another approved third-party provider. Pythias may store transaction IDs, status information, and workflow metadata so users can view the status of a deal inside Pythias.

Financial Verification

When users authorize financial verification through Plaid, Plaid may provide Pythias with verification results, account metadata, institution metadata, connection status, and related tokens or identifiers. Pythias uses this information to support first-party, consent-based verification in the deal workflow.

Pythias does not use Plaid to perform a consumer credit pull. Pythias does not receive bank login credentials.

Signatures and Records

Pythias may store electronic signatures, signature timestamps, IP address metadata, signer email addresses, and audit information. These records support deal history, internal workflow, and dispute prevention.

We may share information:

With counterparties in a deal when needed to create or manage the deal.
With Plaid, Escrow.com, Stripe, Resend, Supabase, Vercel, and other service providers needed to operate Pythias.
With professional advisors, attorneys, accountants, auditors, or compliance consultants.
In response to legal process, law enforcement requests, regulatory requests, or court orders.
To protect Pythias, users, counterparties, or the public from fraud, abuse, security threats, or legal claims.
In connection with a business transaction such as a merger, sale, financing, acquisition, or transfer of assets.

Pythias does not sell bank login credentials because Pythias never receives them. Pythias does not sell consumer credit reports.

Data Retention

We retain information for as long as reasonably needed to operate Pythias, maintain deal records, comply with legal obligations, resolve disputes, enforce agreements, and preserve audit trails. Some deal records, signatures, verification metadata, and transaction status records may be retained after an account is closed if retention is needed for legal, compliance, audit, fraud prevention, or dispute purposes.

Security

Pythias uses administrative, technical, and organizational safeguards designed to protect information. No system is perfectly secure. Users should protect their account credentials, use strong passwords, and notify Pythias promptly if they suspect unauthorized access.

User Choices

Users may:

Request access to certain account information.
Request correction of inaccurate account information.
Request deletion of certain information, subject to legal, compliance, audit, dispute, and recordkeeping limits.
Disconnect or decline Plaid verification where the product permits, although this may limit available workflows.
Contact Pythias about privacy questions at mark@pythias.app.

Children

Pythias is not intended for children under 18. Users must be old enough to enter legally binding agreements in their jurisdiction.

Changes to This Policy

Pythias may update this Privacy Policy from time to time. The updated version will be posted at https://pythias.app/privacy with a new effective date.

Contact

Pythias privacy contact: mark@pythias.app