Privacy Policy

01 / What we collect

We collect what the marketplace needs to run, and not much else:

• ·Account data: display name, email address, and a hashed password. We never store passwords in readable form.
• ·Transaction data: your listings, bids, purchases, sales, shipping addresses, and the photos and videos you upload to listings.
• ·Payment references: your card is captured and stored by Stripe, our payment processor. We keep only references (such as card brand and last four digits) so you can recognize your own card. Full card numbers never touch our servers.
• ·Seller identity: sellers receiving payouts complete identity verification directly with Stripe. That information goes to Stripe, not to us.
• ·Operational data: server logs (IP address, pages requested, timestamps) kept for security and debugging.

02 / What we use it for

Running the marketplace: showing listings, processing bids and sales, holding and releasing escrow, generating shipping labels, sending the transactional emails a sale requires (outbid notices, receipts, shipping and payout confirmations), preventing fraud, and meeting legal obligations. We do not send marketing email, and we do not use your data to build advertising profiles.

03 / Who we share it with

Only service providers the marketplace runs on, and only what each one needs:

• ·Stripe processes payments and seller payouts and verifies seller identities.
• ·Shippo generates shipping labels, which requires the names and addresses on a shipment.
• ·Amazon Web Services hosts the site, the database, and uploaded media.
• ·Resend delivers our transactional email.
• ·We disclose data to law enforcement only when legally required, and we notify you unless the law forbids it. We do not sell personal data to anyone.

04 / What other members see

Your display name, your listings, your seller rating and sales count, and your bids (shown with your display name) are visible to other members. Your email address, real name, and addresses are not shown publicly. A buyer and seller in a completed transaction see what shipping requires: the label carries the buyer’s address, purchased through our platform account rather than exchanged directly.

05 / Cookies

One cookie: your session, so you stay signed in. It is httpOnly and essential to the service. We run no third-party advertising or tracking cookies.

06 / Retention and deletion

Account data lives as long as your account does. Transaction records (orders, escrow ledger, the listing snapshot a buyer purchased against) are retained after account closure because they document completed financial transactions. Email addresses that bounce or complain go on a permanent suppression list so we never mail them again.

To close your account or request deletion of data we are not legally required to keep, contact us at the address below. We will confirm within 30 days what was deleted and what was retained and why.

07 / Security

All traffic is encrypted in transit. Passwords are hashed with a modern algorithm (Argon2id). Card data is handled entirely by Stripe under their PCI compliance. Escrow funds sit with our regulated payment processor, not in a bank account we operate by hand. No system is breach-proof; if a breach affects your data we will tell you promptly.

08 / Contact

Privacy questions and deletion requests: write to OpticBroker, LLC at privacy@opticbroker.com. If we change this policy in a way that matters, the new version appears here with a new date.