Privacy Policy

1. Information We Collect

Account data: When you sign up via GitHub OAuth (through Clerk), we receive your username, email address, and avatar. We do not access your private repositories or code.

Payment data: Payment information is processed by Stripe. We do not store credit card numbers on our servers.

Usage data: We use PostHog for analytics, which collects page views, session data, and anonymized interaction events.

2. How We Use Your Information

• Authenticate your identity and manage your account
• Process transactions and facilitate asset transfers
• Verify product ownership (GitHub, DNS, analytics)
• Communicate about bids, deals, and transfers
• Improve the platform through anonymized analytics

3. Third-Party Services

We share data with the following services as needed:

• Clerk — Authentication and user management
• Stripe — Payment processing
• Supabase — Database hosting
• OpenRouter / OpenAI — AI-powered product analysis (product URLs and public metadata only)
• PostHog — Analytics
• Resend — Transactional email delivery
• Vercel — Hosting

4. Data Retention

We retain account and transaction data for as long as your account is active or as needed to fulfill legal obligations. You can request deletion of your account and associated data by contacting us.

5. Cookies

We use essential cookies for authentication (Clerk session) and analytics (PostHog). No third-party advertising cookies are used.

6. Your Rights

You may request access to, correction of, or deletion of your personal data at any time by emailing us. If you are in the EU/EEA, you have additional rights under GDPR, including data portability and the right to restrict processing.

7. Security

We use industry-standard security measures including encrypted connections (TLS), secure credential storage, and access controls. Sensitive transfer content (e.g., environment variables) is stored encrypted in our database and only visible to transaction participants.

8. Changes

We may update this policy from time to time. We will notify users of material changes via email or platform notification.