Privacy notice

The organization responsible for personal information is [LEGAL NAME OF OPERATOR], [BUSINESS ADDRESS]. Contact its privacy lead at [VERIFIED PRIVACY EMAIL]. The operator's identity and contact must be confirmed before launch.

Account data may include email address, display name, preferred language and currency, location and contact preferences. Profiles, listings and transactions may contain photos, descriptions, item attributes, offers, messages, reviews, reports, delivery choices, shipping addresses and tracking information. Some profile and listing information is public; private offers, messages and shipping addresses are not intended for public display.

We also process technical and security information needed for sign-in, session management, abuse prevention and service diagnostics. If you choose card-photo analysis, the submitted images are sent to an AI service for suggested listing details; review every suggestion before publishing.

We use this information to create and secure accounts; show listings and relevant search results; deliver private offers, messages and notifications; coordinate transactions and tracked shipping; prevent fraud and abuse; answer reports and support requests; and meet legal obligations. [VERIFY THE APPLICABLE GDPR LEGAL BASES, WHERE REQUIRED, BEFORE LAUNCH].

The current application uses Supabase for authentication, database and storage; Vercel for hosting and application services; Resend for transactional email through Supabase; Cloudflare Turnstile for anti-bot checks; Mapbox for location search and maps; and an AI model reached through Vercel AI Gateway for optional card-photo analysis. A shipping-rate provider may receive the sender's and recipient's delivery details when a quote is requested. Provider roles, locations and international-transfer safeguards must be verified before launch.

Other members see information needed to evaluate a listing and carry out an agreed transaction. We do not publish private delivery addresses as part of a listing.

We keep information only as long as needed for the relevant purpose, legal record-keeping and dispute handling. [INSERT VERIFIED RETENTION PERIODS FOR ACCOUNTS, LISTINGS, OFFERS, MESSAGES, SHIPPING DATA, SECURITY LOGS AND AI REQUESTS]. You can update certain profile details in your account. To ask for access, correction or deletion, contact [VERIFIED PRIVACY EMAIL]. Some records may need to be retained where the law requires it or to resolve an ongoing transaction.

Depending on where you live, you may have additional rights, including to object to or restrict processing or to complain to a privacy regulator. We will explain applicable rights and our response process after the operator and service territories are confirmed.

We use access controls and technical safeguards, but no online service can guarantee absolute security. We will update this notice when the service or its providers materially change and state the effective date of the final notice.