PRIVACY
POLICY

Account information: Email address, username, display name, and password (stored encrypted).

Profile information: Optional bio, location, phone number, and avatar.

Transaction data: Bids placed, items purchased, listings sold, and payment details (processed by Stripe — we do not store raw card numbers).

Usage data: Pages visited, search queries, watchlist activity, and device/browser information via Vercel Analytics.

Communications: Messages sent through the Platform, including listing inquiries.

• To operate the auction platform and process transactions
• To send transactional emails (outbid alerts, auction results, listing approvals)
• To verify seller identity and prevent fraud
• To improve the Platform through aggregated analytics
• To communicate material updates to our Terms or policies

We do not sell your personal data to third parties.

We use the following services which may process your data:

• Supabase — database, authentication, and file storage
• Stripe — payment processing and seller payouts
• Resend — transactional email delivery
• Vercel — hosting and anonymous analytics

Each service has its own privacy policy. We select providers who maintain strong data protection standards.

We retain account data for as long as your account is active. Transaction records are retained for 7 years for tax and legal compliance. You may request deletion of your account and non-transactional data at any time.

We use session cookies solely to maintain your login state. We do not use advertising or tracking cookies. Vercel Analytics uses privacy-preserving, cookieless measurement.

• Access: Request a copy of the data we hold about you
• Correction: Update inaccurate information via your profile settings
• Deletion: Request account deletion (subject to legal retention requirements)
• Portability: Request your bid and transaction history in machine-readable format

To exercise any of these rights, email privacy@bringthelowboy.com.

All data is transmitted over TLS. Passwords are hashed using industry-standard algorithms. We conduct regular security reviews and limit employee access to personal data on a need-to-know basis.

We may update this policy from time to time. Material changes will be communicated via email. Continued use of the Platform constitutes acceptance of the updated policy.

Privacy questions? Email privacy@bringthelowboy.com.