Legal
Privacy Policy
We collect what we need to run a safe marketplace — and nothing for advertising. This policy explains what that is, why, and the choices you have.
Last updated
Draft — have counsel review before launch.
This document is a working draft and is not yet a final privacy policy.
The short version
- We use your information to run your account, process orders and payouts, prevent fraud and support you.
- We don't sell your personal information and we don't use advertising trackers.
- Card and bank details are handled by Stripe; we never store full card or bank numbers.
- You can access, correct or delete your information, subject to records we must keep by law.
Information we collect
You give us
- Account details: email address, password (stored hashed by our authentication provider), username, display name, and optional profile details such as a photo, bio and general location.
- Orders: shipping name and address, items purchased, and messages with sellers or buyers.
- Selling: listings, photos and descriptions; shipping and tracking details. Identity and bank details for payouts are provided directly to Stripe during onboarding.
- Trade-ins: the items you submit, your contact and shipping details, and how you choose to be paid.
- Support and claims: what you send us, including photos and evidence.
Collected automatically
- Technical data: IP address, browser and device type, and request logs kept by our hosting providers for security and troubleshooting.
- Activity on the site: things like listings you save and actions on your account, used to provide features you request.
From others
- Stripe tells us payment and payout status, limited verification status, and fraud signals. We receive the last four digits and brand of a card, not the full number.
- Other members may provide information about you through ratings, reviews, messages, reports or claims.
How we use it
- To create and secure your account and keep you signed in.
- To show listings, process purchases, calculate tax, pay sellers and handle trade-ins and store credit.
- To send transactional messages: order confirmations, shipping updates, claim updates and security notices.
- To prevent fraud, enforce our reproduction policy and Terms, and resolve disputes and claims.
- To provide support and improve the site.
- To meet legal obligations, such as tax reporting and responding to lawful requests.
If we ever send marketing email, it will be opt-in or easy to unsubscribe from, and transactional messages will stay separate.
How we share it
We share information only as needed to run the marketplace:
| Who | Why |
|---|---|
| Stripe | Payment processing, seller onboarding and identity verification (Stripe Connect), payouts, fraud prevention and tax calculation. Stripe's use is governed by the Stripe Privacy Policy. |
| Supabase | Our database, user authentication and file storage (including listing photos). |
| Netlify | Hosting and delivering the website, including server logs. |
| Other members | Your public profile, listings, ratings and reviews are visible to everyone. When you buy, the seller receives your name and shipping address to fulfill the order. When you sell, the buyer sees your username and the tracking you provide. |
| Legal & safety | When required by law, to respond to valid legal process, or to protect the rights and safety of our members, the public or Jay's. |
| Business transfers | If Jay's is involved in a merger, acquisition or sale of assets, subject to this policy. |
Our service providers process data on our behalf under contract and may not use it for their own purposes. We don't sell personal information or share it for cross-context behavioral advertising.
Cookies
We use only the cookies needed to run the site: authentication cookies that keep you signed in and protect your session. Your cart is saved in your browser's local storage on your device. We don't use advertising cookies, ad pixels or third-party ad trackers. Stripe may set its own cookies on its checkout pages for fraud prevention.
How long we keep it
- Account information: for as long as your account is open.
- Order, payout, tax and claim records: for as long as needed for accounting, tax and legal obligations, even after an account is closed.
- Listing photos and messages: while needed for the transaction and any claim, then deleted or retained with the order record.
- Records of policy violations: as long as needed to prevent banned users from returning.
Your rights and choices
Depending on where you live — including under the California Consumer Privacy Act (CCPA/CPRA) and similar state laws — you may have the right to:
- Know and access the personal information we have about you;
- Correct inaccurate information (you can edit most of it in Dashboard → Settings);
- Delete your information, subject to records we must keep;
- Get a copy of your information in a portable format;
- Opt out of the sale or sharing of personal information — we don't do either;
- Not be discriminated against for exercising these rights.
To make a request, contact us from the email on your account. We'll verify your identity before acting on it, and you may use an authorized agent where the law allows.
Security
We use encryption in transit, access controls on our database, and payment processing through Stripe so card and bank numbers never touch our servers. No system is perfectly secure; please use a strong, unique password and tell us if you notice anything suspicious.
Children
Jay's Retro Exchange is for adults 18 and over. We don't knowingly collect information from children under 13. If you believe a child has given us information, contact us and we'll delete it.
Changes
We'll update this policy as the service changes and post the new date at the top. For material changes, we'll notify you on the site or by email.
Contact
Questions or requests about privacy: support@jaysretroexchange.com or our contact page.