Privacy Policy

We care about protecting your data. Summary:

• Data we collect: basic account info, listings, messages, reports.
• Why we collect it: to run the service, enable buyer/seller communication, and review reports.
• Who accesses data: the user, and admins within their permissions and scope.
• When admins see messages: only on reports/disputes per the review policy.
• Reports: handled by the authorized moderation team.
• Business documents: handled confidentially and not shared outside the review team.
• On account deletion: sensitive data is disabled per retention policy.
• Listings/messages/reports after deletion: per the retention policy.
• Personal data protection: Supabase with RLS and transport encryption.

Admin access follows the Role + Permission + Scope model.