Your agreement with her is contractually binding, based on your description. You don't have no reason to withhold her deposit, but why do you have her despoit?