Privacy Policy.

This Privacy Policy applies to all visitors, registered users, buyers, and sellers who access or use the Platform. It covers information collected through the Site, our contact and newsletter forms, seller application forms, checkout flows, and any other interactions you have with the Platform.

This policy does not apply to third-party websites or services that may be linked from our Platform. Those services operate under their own privacy policies, which we encourage you to review.

Information You Provide Directly

We collect information you voluntarily provide to us, including:

• Account Information: Email address when you register or sign in via our authentication system (powered by Supabase).
• Contact Form Submissions: Name, email address, subject, and message when you submit our contact form.
• Newsletter Signups: Email address and the page from which you signed up.
• Seller Applications: Name, email address, business name, product types you intend to sell, and any message included in your seller application.
• Purchase Information: When you make a purchase, our payment processor Stripe collects your payment details. We receive a confirmation of payment and purchase details but do not receive or store your full card number, CVV, or other raw payment credentials.

Information Collected Automatically

When you visit the Platform, we may automatically collect:

• IP Address: Your IP address, used to support our dynamic pricing system (countdown timer pricing) and for security and fraud prevention purposes.
• Device & Browser Information: Browser type and version, operating system, device type, and screen resolution.
• Usage Data: Pages visited, time spent on pages, links clicked, referral source, and other browsing behavior on the Platform.
• Cookies & Similar Technologies: See Section 5 for details.

We use the information we collect for the following purposes:

• To process and fulfill your purchases and deliver purchased digital products
• To create and manage your account
• To respond to your contact form inquiries and support requests
• To send you newsletter emails if you have subscribed (you may unsubscribe at any time)
• To review and process seller applications
• To display personalized pricing based on your session (dynamic pricing system)
• To detect, prevent, and investigate fraud and security incidents
• To analyze usage patterns and improve the Platform's functionality and content
• To comply with legal obligations, including responding to lawful requests from authorities
• To enforce our Terms of Service and other policies

We do not sell your personal information to third parties for their own marketing purposes.

We do not share, rent, or sell your personal information except in the following circumstances:

Service Providers

We share information with trusted third-party service providers who assist us in operating the Platform, subject to confidentiality obligations:

• Stripe: Payment processing. Stripe receives your payment information directly and is subject to its own privacy policy and PCI DSS compliance requirements.
• Supabase: Database storage and user authentication. Your account data, form submissions, and Platform data are stored on Supabase's infrastructure.
• Vercel: Website hosting and deployment. Vercel may process request logs and IP addresses as part of serving the Site.

Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court, government agency, or law enforcement) when we believe in good faith that disclosure is necessary to comply with a legal obligation, protect our rights or property, prevent fraud or illegal activity, or protect the safety of our users or the public.

Business Transfers

If the Company is involved in a merger, acquisition, asset sale, or similar transaction, your information may be transferred as part of that transaction. We will provide notice before your personal information is transferred and becomes subject to a different privacy policy.

With Your Consent

We may share your information for any other purpose with your explicit consent.

What Are Cookies

Cookies are small text files placed on your device by a website. We use cookies and similar tracking technologies (such as local storage and session storage) to operate and improve the Platform.

Types of Cookies We Use

• Essential Cookies: Required for the Platform to function. These include session cookies for authentication and security.
• Functional Cookies: Used to remember your preferences and settings, such as cookie consent status.
• Analytics Cookies: Used to understand how visitors interact with the Platform, including which pages are most visited and how users navigate the Site.

Managing Cookies

You can control cookies through your browser settings. Most browsers allow you to refuse new cookies, delete existing cookies, or be notified when new cookies are set. Note that disabling cookies may affect the functionality of the Platform.

Our Platform displays a cookie consent notice on your first visit. By continuing to use the Platform after dismissing the notice, you consent to our use of cookies as described in this policy.

We retain your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

• Account Data: Retained for the duration of your account and for a reasonable period afterward to comply with legal obligations and resolve disputes.
• Contact Form Submissions: Retained until the inquiry has been resolved and for a reasonable archival period thereafter.
• Newsletter Subscriptions: Retained until you unsubscribe or request deletion.
• Transaction Records: Retained for the period required by applicable tax and financial regulations (typically 7 years).
• IP Address / Pricing Timer Data: Retained for the duration of the applicable pricing session and purged automatically thereafter.

When information is no longer needed, we will securely delete or anonymize it.

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request that we correct inaccurate or incomplete information.
• Deletion: Request that we delete your personal information, subject to certain legal exceptions.
• Opt-Out of Marketing: Unsubscribe from newsletter or marketing emails at any time by using the unsubscribe link in any email we send or by contacting us directly.
• Data Portability: Request a copy of your personal data in a structured, machine-readable format where technically feasible.
• Restriction: Request that we restrict the processing of your personal information in certain circumstances.

To exercise any of these rights, please contact us through the Contact page. We will respond to your request within a reasonable timeframe and in accordance with applicable law. We may need to verify your identity before fulfilling certain requests.

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), including:

• Right to Know: The right to request disclosure of the categories and specific pieces of personal information we have collected about you, the sources from which it was collected, and the purposes for which it was used.
• Right to Delete: The right to request deletion of your personal information, subject to certain exceptions.
• Right to Correct: The right to request correction of inaccurate personal information.
• Right to Opt-Out of Sale or Sharing: We do not sell or share your personal information with third parties for cross-context behavioral advertising.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.

To submit a California privacy rights request, please contact us through the Contact page. We will respond within 45 days as required by applicable law.

The Platform is operated from the United States. If you are located outside of the United States, please be aware that any information you provide to us will be transferred to, processed, and stored in the United States, where data protection laws may differ from those in your country.

By using the Platform, you consent to the transfer of your information to the United States and its processing in accordance with this Privacy Policy.

We do not currently offer services specifically targeted at residents of the European Economic Area (EEA), United Kingdom, or other jurisdictions with specific data transfer requirements. If you are located in such a jurisdiction and have questions about your data, please contact us.

The Platform is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If we become aware that we have inadvertently collected personal information from a child under 13, we will take steps to delete such information as soon as practicable.

If you are a parent or guardian and believe your child has provided personal information to us without your consent, please contact us through the Contact page and we will take appropriate action.

The Platform requires all users to be at least 18 years of age (see our Terms of Service), further limiting the likelihood of data collection from minors.

We implement reasonable technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• HTTPS encryption for all data transmitted between your browser and the Platform
• Row-level security policies on our database (Supabase)
• Payment processing exclusively through Stripe, which maintains PCI DSS compliance and handles all sensitive card data
• Limited access to personal data on a need-to-know basis

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security. You provide your information at your own risk.

In the event of a data breach that affects your rights and freedoms, we will notify affected users as required by applicable law.

The Platform may contain links to third-party websites, products, or services that are not owned or controlled by us. This Privacy Policy applies only to our Platform.

We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party websites or services. We strongly advise you to review the privacy policy of every site you visit.

We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date at the top of this page. For material changes, we may provide additional notice, such as a notice on the Site or an email to registered users.

Your continued use of the Platform after any changes to this Privacy Policy constitutes your acceptance of the revised policy. We encourage you to review this page periodically to stay informed about how we protect your information.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: