Account & Security

Profile & display name

Your profile is what the other party sees when they open a deal with you. It includes your display name, profile photo, trust level, and review history.

Updating your profile

Go to Settings → Profile. You can:

• Upload a profile photo (JPG, PNG, WebP, or GIF, max 5MB)
• Change your display name
• Change your email address (requires verification of the new email)

Profile photos are public — visible on your profile page and in deal chats. Choose something recognizable.

Trust profile

Your public profile at app.getholdy.com/profile/[yourId] shows your completed deals, trust level, average rating, dispute rate, and recent reviews. It’s designed to give counterparties confidence. You can’t edit the stats — they’re calculated automatically from your real activity.

Password & login

Changing your password

Settings → Change password. Passwords must be at least 8 characters. We show a strength indicator — aim for “Strong” (mix of uppercase, lowercase, digits, and symbols, 12+ chars).

Forgot password

On the login page, click “Forgot password?” — we’ll email a reset link valid for 24 hours.

Account security best practices

• Use a unique, strong password (we recommend a password manager)
• Don’t share account credentials with anyone
• Be skeptical of emails asking you to “verify” your account — we’ll only ever email you from @getholdy.com addresses
• Always access Holdy via app.getholdy.com directly, not through links in suspicious messages

Two-factor authentication (2FA) is on our roadmap and coming soon.

Data & privacy

We take your data seriously. Full details in our Privacy Policy, but the essentials:

What we collect

• Account: name, email, password hash
• Transactions: deal titles, amounts, deliverables, file uploads
• Messages + dispute evidence you submit
• Technical: IP, browser type for security purposes

What we don’t do

• We don’t sell your data to anyone
• We don’t use tracking cookies or advertising networks
• We don’t store your payment card details — Stripe handles all of that

Where your data lives

All user data is stored in the EU (AWS Frankfurt, via Supabase). Stripe payment processing happens via their Irish entity with EU data residency.

Your GDPR rights

You can request access, correction, export, or deletion of your personal data. Email privacy@getholdy.com and we’ll respond within 30 days.

Deleting your account

You can delete your Holdy account at any time from Settings → Delete account.

Before deleting

You’ll need to resolve all active transactions first. Deals in paid, delivered, or disputed status block deletion until they’re completed, refunded, or cancelled.

What gets deleted immediately

• Your profile, display name, email, password
• Profile photo and any avatar files
• All uploaded files (deliveries, evidence, chat attachments) from closed deals
• Your personal session/login

What’s retained (legally required)

Financial records of your past transactions are kept for 7 years to comply with Dutch tax law (Art. 52 AWR). This includes invoice records, dispute outcomes, and deal history — but they’re pseudonymized where possible.

Can I recover a deleted account?

No — deletion is permanent. You can sign up again with the same email, but past deals, trust level, and reviews won’t carry over.