This policy explains what we collect and how we use it. We aim to collect only what the service needs to work.
1. What we collect
Account data (name, e-mail, password hash), content you create (listings, messages, reviews), transaction records (orders, balance movements, payouts), and technical data (IP address, approximate location, device/user-agent, and cookies needed for sign-in and security).
2. How we use it
To operate your account, process purchases and escrow, prevent fraud and abuse, provide support, meet legal obligations, and improve the service. We do not sell your personal data.
3. Sharing
We share data only as needed to run the service: with the payment provider to process top-ups and payouts, and with counterparties to the extent a transaction requires (for example, a delivery contact you provide at checkout). All outbound requests leave through a privacy-preserving egress proxy.
4. Cookies
We use strictly-necessary cookies for your session, security (CSRF) and language preference, and an optional "remember me" cookie you control. First-party, privacy-respecting analytics may be used to understand aggregate usage.
5. Retention and security
We keep data while your account is active and as long as needed for accounting and legal reasons. Passwords are hashed, sensitive tokens are stored hashed, and access is restricted. No system is perfectly secure, but we take reasonable measures to protect your data.
6. Your rights
You can access, export (Account → Privacy & data) and correct your information, and close your account, which removes your personal details while retaining records we must keep for accounting. To exercise other rights, contact us.
7. Contact
Questions about privacy? Contact [email protected].
This document is a baseline draft and not legal advice.