Privacy Policy, The Lot
Draft for legal review. Last updated: [DATE]
Who we are
The Lot is operated by [LEGAL ENTITY], [ADDRESS]. Contact: privacy@[DOMAIN].
What we collect
You give us:
- Account: email, username, display name, password (hashed by our auth provider. We never see it).
- Profile: bio, city, style tags, sizes, favourite brands, avatar.
- Listings: photos and descriptions of clothing you list.
- Looking For: brands, categories and keywords you are hunting.
- Shipping address: full postal address, used solely to buy shipping labels.
- Messages you send to other users.
Collected automatically:
- Device and app version, crash reports, coarse usage analytics.
- IP address (security and abuse prevention).
From third parties:
- Stripe: payment status and the last four digits of a card. We never receive or store full card numbers.
- Our carrier partner: parcel tracking events.
What is public
Your username, display name, avatar, bio, city, style tags, listings, Looking For list, follower counts, completed-swap count, rating and reviews.
Your street address is never public. It is stored separately from your profile, is technically unreadable by other users, and is transmitted only to the shipping carrier when a label is purchased. Other users see your city only.
Why we use it
| Purpose | Legal basis (GDPR) |
|---|---|
| Running your account and closet | Contract |
| Finding mutual matches | Contract |
| Buying shipping labels | Contract |
| Processing payments | Contract |
| Fraud, abuse and safety | Legitimate interests |
| Tax and accounting records | Legal obligation |
| Product analytics | Legitimate interests / consent where required |
We do not sell your personal information, and we do not use your data for third-party advertising.
Who we share it with
- Stripe, payments. Stripe's privacy policy.
- [CARRIER/EasyPost], name and address, to produce a shipping label.
- Supabase, hosting and database, as our processor.
- [ANALYTICS/CRASH PROVIDER],
[DECIDE]. - Law enforcement, where legally required.
How long we keep it
- Account data: until you delete your account.
- After deletion: profile is anonymised within 14 days; listings, Looking For, saved items and address are deleted.
- Retained longer: transaction and payment records for 7 years (tax and chargeback obligations), and safety records where we must prevent a banned user returning.
Your rights
Access, correction, deletion, portability, objection, and withdrawal of consent. You can delete your account in the app under Profile → Settings → Delete account. To exercise other rights, email privacy@[DOMAIN]; we respond within 30 days.
California residents (CCPA/CPRA): you have the rights above and the right not to be discriminated against for exercising them. We do not sell or share personal information as those terms are defined.
EEA/UK residents: you may lodge a complaint with your supervisory authority. Our transfer mechanism for data leaving the EEA is [DECIDE: SCCs].
Children
The Lot is not for anyone under [DECIDE: 13 / 16 / 18]. We do not knowingly collect data from children. Contact us to report an underage account.
Note: shipping physical goods between users raises real safety questions for minors. This is a business decision with legal consequences, not a formality.
Security
Encryption in transit and at rest; row-level authorisation so users can only reach their own records; addresses isolated from profile data; payment card data handled exclusively by Stripe. No system is perfectly secure.
Changes
We will notify you in-app of material changes.