Privacy Policy

Last Updated: December 23, 2025

1. Information We Collect

We collect different types of information to provide and improve our services:

1.1 Information You Provide Directly

• Account Information: Name, email address, password, phone number (optional)
• Profile Information: Profile photo, bio, location (for organizers)
• Payment Information: Credit/debit card information, billing address (processed securely through Stripe—we do NOT store full card numbers)
• Identity Verification: For organizers, we may collect government-issued ID, business documentation, or other verification materials
• Communications: Messages, support requests, reviews, and other content you submit through the platform

1.2 Information Collected Automatically

• Device Information: IP address, browser type, operating system, device identifiers
• Usage Data: Pages visited, time spent on pages, click patterns, referral sources, search queries
• Location Data: General location based on IP address (not precise GPS location)
• Cookies and Tracking: We use cookies and similar technologies to track activity and improve user experience (see Section 6)

1.3 Information from Third Parties

• Payment Processor (Stripe): Transaction data, payment status, fraud-prevention information
• Authentication Providers: If you sign in with Google or other OAuth providers, we receive basic profile information (name, email, profile picture)
• Analytics Services: Aggregated analytics data from third-party services to understand platform usage

2. How We Use Your Information

We use your information for the following purposes:

2.1 Provide and Improve Services

• Create and manage your account
• Process reservations and payments
• Facilitate co-buy deals between organizers and co-buyers
• Display your profile information to other users (as appropriate)
• Provide customer support and respond to inquiries
• Improve platform functionality and user experience
• Develop new features and services

2.2 Communication

• Send transactional emails (reservation confirmations, payment notifications, etc.)
• Notify you about deal updates and status changes
• Send important service announcements and policy updates
• Send promotional emails about new features or deals (you can opt out—see Section 7)
• Respond to your questions, feedback, and support requests

2.3 Security and Fraud Prevention

• Verify user identity and prevent fraudulent accounts
• Detect and prevent fraudulent transactions or abuse
• Monitor platform security and prevent unauthorized access
• Enforce our Terms of Service and other policies

2.4 Analytics and Research

• Analyze usage patterns and trends
• Conduct research to improve services
• Generate aggregated, anonymized statistics (no personal identification)

2.5 Legal Compliance

• Comply with legal obligations and regulatory requirements
• Respond to lawful requests from law enforcement or government authorities
• Protect our rights, property, and safety, and that of our users

3. How We Share Your Information

We do NOT sell your personal information to third parties. We may share your information in the following limited circumstances:

3.1 With Other Users

• Organizers: When you reserve spots, the organizer can see your name and contact information to coordinate pickup/delivery
• Co-Buyers: Other participants in a deal may see your first name and trust tier rating (if you're an organizer)
• Public Profiles: Organizer profiles are public and display name, photo, location, tier rating, and reviews

3.2 With Service Providers

• Payment Processing: Stripe processes all payments and stores payment card information (not us)
• Email Services: Third-party email providers to send transactional and marketing emails
• Hosting and Infrastructure: Cloud service providers (Supabase, Vercel) to host our platform
• Analytics: Analytics providers to understand platform usage (data is anonymized where possible)

All service providers are bound by confidentiality agreements and may only use your data to provide services to us.

3.3 For Legal Reasons

We may disclose your information if required by law or if we believe it's necessary to:

• Comply with legal obligations, court orders, or subpoenas
• Enforce our Terms of Service or other agreements
• Protect the rights, property, or safety of Co-Buy Liquidation Deals, our users, or the public
• Detect, prevent, or address fraud, security, or technical issues

3.4 Business Transfers

If Co-Buy Liquidation Deals is involved in a merger, acquisition, bankruptcy, or sale of assets, your information may be transferred to the new entity. We will notify you via email and/or prominent notice on the platform before your information is transferred and becomes subject to a different privacy policy.

4. Data Security

We take data security seriously and implement industry-standard measures to protect your information:

4.1 Technical Safeguards

• Encryption: All data transmitted between your browser and our servers is encrypted using TLS/SSL
• Secure Storage: Data is stored on secure servers provided by Supabase, which implements enterprise-grade security measures
• Access Controls: Strict internal access controls limit who can view your data
• Authentication: Passwords are hashed and salted (never stored in plain text)

4.2 Payment Security

Payment information is handled by Stripe, a PCI DSS Level 1 certified payment processor (the highest level of security certification). We never store your full credit card numbers on our servers. We only store tokenized payment references provided by Stripe.

4.3 Limitations

While we implement strong security measures, no method of transmission or storage is 100% secure. We cannot guarantee absolute security. You are responsible for keeping your account credentials confidential and notifying us immediately of any unauthorized access.

5. Your Rights and Choices

You have the following rights regarding your personal data:

5.1 Access and Portability

• Access: Request a copy of the personal information we hold about you
• Portability: Request your data in a structured, machine-readable format

5.2 Correction and Deletion

• Update: Update your account information at any time through your profile settings
• Delete: Request deletion of your account and associated data (subject to legal retention requirements)

Note: We may retain certain information as required by law or for legitimate business purposes (e.g., transaction records for tax compliance).

5.3 Marketing Communications

• Opt-Out: Unsubscribe from promotional emails by clicking the "unsubscribe" link in any marketing email
• Transactional Emails: You cannot opt out of transactional emails (reservation confirmations, payment notifications) as they're essential to the service

5.4 Cookie Management

You can manage cookie preferences through your browser settings. Note that disabling cookies may limit platform functionality.

6. Cookies and Tracking

We use cookies and similar tracking technologies to enhance your experience:

6.1 Types of Cookies We Use

• Essential Cookies: Required for authentication, security, and basic platform functionality
• Functional Cookies: Remember your preferences and settings
• Analytics Cookies: Help us understand how users interact with the platform
• Marketing Cookies: Track conversions and measure ad effectiveness (if applicable)

6.2 Third-Party Tracking

We may use third-party analytics services (e.g., Google Analytics, Plausible) to understand platform usage. These services may use cookies and collect data according to their own privacy policies.

6.3 Do Not Track

Some browsers have a "Do Not Track" feature. Currently, there is no industry standard for how to respond to Do Not Track signals, so our platform does not respond to them.

7. Data Retention

We retain your information for as long as necessary to:

• Provide services to you and fulfill transactions
• Comply with legal obligations (tax records, financial reporting)
• Resolve disputes and enforce agreements
• Prevent fraud and abuse

When you delete your account, we delete or anonymize your personal information within 30 days, except for data we must retain for legal or regulatory reasons. Transaction records may be retained for up to 7 years for tax compliance.

8. International Data Transfers

Co-Buy Liquidation Deals is based in the United States. If you access the platform from outside the U.S., your information may be transferred to, stored, and processed in the U.S. where our servers and service providers are located. By using the platform, you consent to the transfer of your information to the U.S., which may have different data protection laws than your country.

9. GDPR Compliance (EU Users)

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):

9.1 Legal Basis for Processing

• Contract Performance: Processing necessary to provide services under our Terms of Service
• Legitimate Interests: Fraud prevention, security, analytics
• Consent: Marketing communications (you can withdraw consent anytime)
• Legal Obligations: Compliance with laws and regulations

9.2 Your GDPR Rights

• Right to access your personal data
• Right to rectification (correction) of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent
• Right to lodge a complaint with a supervisory authority

To exercise these rights, contact us at privacy@cobuy-liquidation.com.

10. Children's Privacy

Our platform is not intended for children under 18 years of age. We do not knowingly collect personal information from children. If we learn that we have collected information from a child under 18, we will delete it immediately. If you believe a child has provided us with personal information, please contact us at privacy@cobuy-liquidation.com.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page
• Send you an email notification (if we have your email address)
• Display a prominent notice on the platform

We encourage you to review this Privacy Policy periodically. Your continued use of the platform after changes are posted constitutes acceptance of the updated policy.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or how we handle your personal information, please contact us:

• Email: privacy@cobuy-liquidation.com
• Support: support@cobuy-liquidation.com
• Mail: Co-Buy Liquidation Deals, [Your Address]

We will respond to your inquiry within 30 days. For GDPR-related requests, we will respond within 30 days as required by law.