Privacy Policy

1. Introduction

PrimeLot Cards ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our marketplace platform. Please read this policy carefully.

By using PrimeLot Cards, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our platform.

2. Information We Collect

2.1 Information You Provide Directly

We collect information that you provide directly to us, including:

• Account Information: Email address, password, display name
• Profile Information: Profile picture, bio, seller tier status
• Shipping Information: Name, address, phone number for order fulfillment
• Payment Information: Processed securely through Stripe (we do not store card details)
• Listings: Card descriptions, images, pricing for items you list
• Communications: Messages sent through our platform, support inquiries
• Transaction Data: Purchase history, sales records, offers made and received

2.2 Information Collected Automatically

When you access our platform, we automatically collect certain information:

• Device Information: IP address, browser type, operating system
• Usage Data: Pages viewed, time spent on pages, navigation paths
• Analytics: We use Google Analytics to understand how users interact with our platform
• Cookies and Tracking: See our Cookie Policy for details
• Location Data: General location based on IP address for currency display

2.3 Information from Third Parties

We may receive information from:

• Stripe: Payment processing information and transaction verification
• Authentication Providers: If you sign up through third-party services
• Public Sources: Information about card values or market trends

3. How We Use Your Information

We use the information we collect to:

• Create and manage your account
• Process transactions and send order confirmations
• Facilitate communication between buyers and sellers
• Calculate and display seller tier status
• Send transactional emails (order updates, tracking information)
• Provide customer support and respond to inquiries
• Detect and prevent fraud, abuse, and security incidents
• Improve and optimize our platform
• Comply with legal obligations
• Send marketing communications (with your consent)
• Analyze usage patterns and user behavior

4. How We Share Your Information

4.1 With Other Users

When you list items for sale or make purchases, certain information is shared with other users:

• Sellers can see buyer shipping information for order fulfillment
• Buyers can see seller display names, profile pictures, and seller tier badges
• Your public profile (display name, bio, tier) is visible to all users

4.2 With Service Providers

We share information with trusted third-party service providers:

• Stripe: Payment processing
• XCover: Shipping insurance provider for Canada and USA shipments
• Supabase: Database hosting and authentication
• Resend: Email delivery service
• Vercel: Website hosting and infrastructure
• Google Analytics: Usage analytics and platform insights
• Cloud Storage: Image hosting for listings and profiles

4.3 For Legal Reasons

We may disclose your information if required to:

• Comply with legal obligations, court orders, or government requests
• Enforce our Terms of Service
• Protect our rights, property, or safety
• Investigate fraud or security issues
• Prevent illegal activities

4.4 Business Transfers

If PrimeLot Cards is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.

5. Data Retention

We retain your information for as long as necessary to provide our services and comply with legal obligations:

• Account Data: Retained while your account is active
• Transaction Records: Retained for 7 years for tax and legal purposes
• Communications: Retained for customer service and dispute resolution
• Deleted Accounts: Personal data deleted within 30 days, transaction records retained as required by law

6. Your Privacy Rights

Depending on your location, you may have the following rights:

6.1 Access and Portability

You can access most of your information through your account settings. You may request a copy of your data in a portable format.

6.2 Correction

You can update your profile information, shipping address, and other account details at any time through your settings.

6.3 Deletion

You may request deletion of your account and personal data. Note that we may retain certain information as required by law or for legitimate business purposes.

6.4 Marketing Opt-Out

You can unsubscribe from marketing emails by clicking the "unsubscribe" link in any marketing email or by updating your email preferences in your account settings.

6.5 Do Not Track

Some browsers have a "Do Not Track" feature. Our platform does not currently respond to Do Not Track signals.

7. Data Security

We implement appropriate technical and organizational measures to protect your information:

• Encryption of data in transit (HTTPS/TLS)
• Secure password hashing
• Regular security audits
• Access controls and authentication
• Secure hosting infrastructure

However, no method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

8. Children's Privacy

Our platform is not intended for users under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

9. Canadian Privacy Rights (PIPEDA)

PrimeLot Cards complies with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA). As a Canadian user, you have the following rights:

• Right to know why we collect your personal information
• Right to know how your information is used and disclosed
• Right to access your personal information
• Right to correct inaccurate information
• Right to withdraw consent (where applicable)
• Right to file a complaint with the Privacy Commissioner of Canada

We collect personal information only for identified purposes and obtain your consent where required. You may withdraw consent at any time, subject to legal or contractual restrictions.

10. United States Privacy Rights

If you are a resident of California or other U.S. states with privacy laws, you may have additional rights:

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed (we do not sell your data)
• Right to opt-out of the sale of personal information
• Right to deletion of personal information
• Right to non-discrimination for exercising your rights

11. European Privacy Rights (GDPR)

If you are in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR):

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent

Please note that PrimeLot Cards primarily serves Canadian and U.S. markets. If you are in the EEA and wish to use our services, please contact us to discuss applicable protections.

12. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to improve your experience. For detailed information about our use of cookies, please see our Cookie Policy.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through a prominent notice on our platform. Your continued use after changes are posted constitutes acceptance of the updated policy.

14. Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us:

• Email: support@primelot.cards
• Support Page: Available through our website

We will respond to your request within 30 days.