Privacy policy

What we collect

Account details (name, email), addresses, orders and messages, and the listings you create. Sellers additionally provide batch codes and, for companies, registration evidence.

How sensitive data is handled

Listing batch codes and company registration evidence are stored privately. Batch codes are never returned in any public API response or rendered on any public page; buyers only ever see a public-safe verification mark. Company registration evidence is used solely for verification and is not shown publicly.

Processors

We use Stripe for payments and payout KYC, Supabase for authentication and data storage, and an email provider for notifications. Identity verification for payouts happens inside Stripe's hosted onboarding; we do not store your identity documents.

Cookies and sessions

We use a secure, httpOnly session cookie to keep you signed in. We do not store session state in your browser's local storage.

Your rights

You can access, correct or delete your personal data. Contact us to exercise these rights. See also our terms of use.