Privacy Policy

1. Information We Collect

We collect information you provide directly to us, such as when you create an account, place a bid, make a purchase, or contact us for support.

Personal Information:

• Name, email address, phone number
• Billing and shipping addresses
• Payment information (processed securely through Stripe)
• Identity verification documents for KYC compliance
• Communication preferences and notification settings

Usage Data:

• Browsing history and auction viewing patterns
• Bidding activity and transaction history
• Search queries and filters applied
• Device information, IP address, and browser type
• Session duration and interaction events
• Performance metrics and error logs

2. How We Use Your Information

We use the information we collect to:

• Process transactions and manage your bids and purchases
• Send notifications about auctions, bids, outbid alerts, and account activity
• Verify identity and prevent fraud through our security systems
• Provide customer service and respond to inquiries
• Generate personalized recommendations using AI
• Monitor platform performance and detect errors
• Analyze user behavior to improve features and user experience
• Send marketing communications (with your consent)
• Comply with legal obligations and enforce our Terms of Service
• Maintain comprehensive audit trails for compliance and disputes

3. Telemetry and Analytics

We collect comprehensive telemetry data to improve platform reliability and user experience:

• Event tracking for user actions (page views, button clicks, form submissions)
• Bidding behavior and conversion funnel analytics
• Performance latency and error rate monitoring
• Session activity and engagement metrics
• Component render times and interaction tracking
• Workflow state transitions and audit trails

All telemetry data is anonymized where possible and used solely for platform improvement and security monitoring.

4. Information Sharing

We do not sell, trade, or rent your personal information to third parties. We may share information with:

• Service Providers: Payment processors (Stripe), email delivery services, and cloud infrastructure (Supabase)
• Logistics Partners: Verified fulfillment providers for shipping and delivery coordination
• Legal Authorities: When required by law or to protect our rights and users
• Business Transfers: In the event of a merger, acquisition, or sale of assets

All third-party service providers are contractually obligated to protect your data and use it only for specified purposes.

5. Data Security

We implement comprehensive security measures to protect your personal information:

• End-to-end encryption for sensitive data transmission
• Secure authentication with optional multi-factor authentication
• Row-level security (RLS) policies on all database tables
• Rate limiting to prevent brute force attacks
• Real-time fraud detection and pattern analysis
• Regular security audits and penetration testing
• Automated security monitoring and alert systems
• PCI-DSS compliant payment processing through Stripe

While we use industry-standard security measures, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security but continuously work to improve our protections.

6. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Maintain your login session and remember preferences
• Track auction watchlists and recently viewed items
• Analyze usage patterns and measure ad effectiveness
• Provide personalized content and recommendations
• Detect and prevent fraudulent activity

You can control cookies through your browser settings. However, disabling cookies may limit your ability to use certain features of our Platform.

7. Your Rights

You have the right to:

• Access: Request a copy of your personal information
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your account and associated data
• Portability: Receive your data in a machine-readable format
• Opt-Out: Unsubscribe from marketing communications
• Object: Object to certain types of data processing
• Restrict: Request restriction of processing under certain circumstances

To exercise these rights, contact us at privacy@bidz.com. We will respond within 30 days of receiving your request.

8. Data Retention

We retain your information for as long as necessary to:

• Provide our services and maintain your account
• Comply with legal, tax, and accounting obligations
• Resolve disputes and enforce our agreements
• Maintain audit trails for compliance and security

Transaction records and audit logs are retained for 7 years as required by law. Telemetry data is typically retained for 2 years for analysis and platform improvement.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure that such transfers comply with applicable data protection laws and that your data receives adequate protection through standard contractual clauses and security measures.

10. Children's Privacy

Our Platform is not intended for users under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child, we will take steps to delete that information promptly.

11. California Privacy Rights (CCPA)

California residents have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected, used, shared, or sold
• Right to delete personal information held by businesses
• Right to opt-out of sale of personal information (we do not sell your data)
• Right to non-discrimination for exercising CCPA rights

12. GDPR Compliance (European Users)

For users in the European Economic Area (EEA), we process your data based on lawful grounds including consent, contract performance, legal obligations, and legitimate interests. You have rights under GDPR including access, rectification, erasure, data portability, and the right to lodge a complaint with a supervisory authority.

13. Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. Material changes will be notified via email and prominently displayed on the Platform. The "Last updated" date at the top indicates when the policy was last revised.

14. Contact Us

If you have questions about this Privacy Policy or how we handle your data, please contact us at:

Email: privacy@bidz.com
Data Protection Officer: dpo@bidz.com
Support: support@bidz.com