Privacy Policy

1. Information We Collect

Account Information

When you register, we collect your name, email address, and password (stored as a one-way hash). Organizers additionally provide business name, phone number, and payout information required by Stripe Connect.

Transaction Information

We record purchase history, bid history, and payout records. Payment card details are never stored on our servers \u2014 they are transmitted directly to Stripe and handled under their PCI-compliant infrastructure.

Location Information

Listings for estate sales, yard sales, auctions, and flea markets include organizer-provided addresses, which we geocode and store as latitude/longitude coordinates to power map features. We do not continuously track your device location.

Content You Upload

Organizers upload item photos, which we store via Cloudinary. We may pass uploaded images through automated analysis services to generate suggested item descriptions; those descriptions are saved only if the Organizer accepts them.

Usage Data

We automatically collect browser type, device type, IP address, pages visited, search queries, and referring URLs via server logs. This data is used for analytics, performance monitoring, and fraud prevention.

Cookies and Local Storage

We use session cookies for authentication, local storage to maintain UI preferences, and push notification tokens if you opt in. We do not use third-party advertising cookies. You can disable cookies in your browser settings, but some Platform features may not function correctly.

2. How We Use Your Information

• To create and manage your account
• To process purchases, payouts, and refunds
• To display sale listings and map locations
• To send transactional emails (purchase confirmations, payout notices, sale reminders)
• To send weekly curator emails and deal alerts if you subscribe (you can unsubscribe at any time)
• To send push notifications for sales you follow (if you grant permission)
• To detect fraud and enforce our Terms of Service
• To monitor Platform performance via Sentry error tracking
• To improve the Platform through aggregate analytics
• To comply with legal obligations

3. How We Share Your Information

We do not sell your personal information. We share information only in the following circumstances:

• Stripe: Payment information is shared with Stripe to process transactions. Stripe may collect additional information during Stripe Connect onboarding per their own Privacy Policy.
• Cloudinary: Item photos are stored and served via Cloudinary's CDN.
• Sentry: Error and performance data (which may include anonymized request details) is sent to Sentry for monitoring.
• Auto-Tagging Services: If auto-tagging is enabled, item photos may be sent to automated analysis services for label generation. No personally identifiable information is included in these requests.
• Organizer/Buyer transactions: When a purchase is made, the Organizer receives the Buyer's name and order details sufficient to fulfill the transaction.
• Legal requirements: We may disclose information if required by law, subpoena, or to protect the rights, property, or safety of FindA.Sale, our users, or the public.

4. Data Retention

We retain account information for as long as your account is active. Transaction records are retained for a minimum of seven years to comply with financial recordkeeping requirements. You may request deletion of your account by contacting support@finda.sale; we will delete personal data that we are not legally required to retain within 30 days.

5. Security

We implement industry-standard security measures including encrypted connections (HTTPS/TLS), hashed passwords, JWT-based authentication, and restricted database access. We monitor for unusual activity via Sentry. No system is perfectly secure; if you believe your account has been compromised, contact us immediately at support@finda.sale.

6. Your Rights and Choices

• Access and correction: You can view and update most account information in your profile settings.
• Email opt-out: You can unsubscribe from marketing emails via the unsubscribe link in any such email or via /unsubscribe. Transactional emails (purchase receipts, payout notices) cannot be disabled while your account is active.
• Push notifications: You can revoke notification permission at any time in your browser or device settings.
• Account deletion: Contact support@finda.sale to request account deletion.
• Michigan residents: If you are a Michigan resident, you may have additional rights under applicable state law. Contact us with any such requests.

7. Children's Privacy

FindA.Sale is not directed to children under 18. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected such information, please contact us and we will delete it promptly.

8. Third-Party Links

The Platform may contain links to third-party websites (e.g., Stripe's dashboard). We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies.

9. Changes to This Policy

We may update this Privacy Policy periodically. When we do, we will post the revised Policy with an updated effective date. For material changes, we will notify registered users by email at least 14 days before the change takes effect.

10. Contact Us

Privacy questions or requests? Email us at support@finda.sale or use our contact form.