Privacy Policy

Information We Collect

Registration: Name, email, phone number (required), password (hashed). Optional: mailing address, profile photo, Google account info.

Listings: Title, description, photos, price, location (zip/city/state), vehicle details. Photos are stripped of EXIF data (GPS, camera info) before storage.

Messages: Conversation content between buyers and sellers on the platform.

Search & Browsing: Search queries, viewed listings, favorites, saved searches. Used for personalization and analytics.

Payments: Wallet transactions are processed via Square. We do not store card numbers — Square handles payment security.

Location: Zip code for listing location (city/state derived). Exact coordinates are never stored or displayed. Browser geolocation only if you opt in.

Technical: IP address (hashed for analytics), browser type, device info for security and rate limiting.

Phone Number & SMS

A US phone number is required to create an account. We use your phone number to:

• Verify your identity during registration via a one-time SMS code
• Send one-time verification codes for password resets and phone number changes
• Send marketing text messages only if you opt in (you can opt out anytime by replying STOP)

SMS verification is provided by Twilio, Inc., a third-party communications provider. When we send a verification code, your phone number is transmitted to Twilio to deliver the message. Twilio processes this data under their Privacy Policy. We do not store verification codes — they are generated and managed by Twilio.

Your phone number is stored in our database in E.164 format. It is never displayed to other users, shared with third parties (except Twilio for SMS delivery), or used for advertising. You can update your phone number in Account Settings. If you delete your account, your phone number is permanently removed.

How We Use Your Data

• Display listings and facilitate buyer-seller communication
• Process wallet payments and track transactions
• Send email and SMS notifications (customizable in settings)
• Verify your identity via phone during registration and password reset
• Prevent fraud, enforce TOS, and maintain platform security
• Improve search results and platform experience

Public vs. Private Information

Public: First name + last initial, listing content, seller reviews, general location (city/state).

Private (admin only): Full name, email, phone, mailing address, IP address. Never shared with other users.

Data Retention

Accounts: retained while active. Listings: active 60 days, images deleted 30 days after expiration. Analytics: raw data 90 days, aggregated summaries permanent. You may request account deletion by contacting us.

Contact

Privacy questions? [email protected]