Privacy policy

Everything in this list is something BuyAve stores today. Nothing else is collected.

• Your account — email address, phone number, the handle you choose, and your role.
• Your public profile — display name and an approximate location, so shoppers can see roughly how far away something is.
• Pickup and delivery addresses — a seller’s exact pickup point, and a buyer’s delivery address when something is shipped.
• Transactions — orders, payments, refunds, payouts and the ledger entries behind them.
• Auction bids, including the maximum you set.
• Messages between you and the other party to a listing.
• Saved listings and saved searches, when you create them.
• Sessions and devices, so you can stay signed in and sign out everywhere.
• Moderation and audit records — what was done to an account or a listing, and by whom.

We do not collect a date of birth, a government identifier, your contacts, or any advertising identifier.

BuyAve does not verify seller identity today and holds no identity documents or tax identifiers, because no payment processor is connected and no seller can be paid. When that changes, sellers who pass the volume thresholds in federal marketplace rules will be asked for identity and tax information, and this list will say so before it is collected.

There is none. Neither the website nor the app contains an analytics, attribution or advertising SDK, and no advertising identifier is read. We do not sell or share personal information for advertising, and we do not track you across other companies’ sites or apps.

Our own measurements record how the marketplace performs — how long a search took, whether a payment was applied — using a fixed set of fields that cannot carry your identity.

One cookie on the website: a sign-in token, marked so that page scripts cannot read it. It expires when your session does. In the app, the same token is kept in the device’s secure storage. There are no advertising, measurement or third-party cookies.

Location, if you allow it, to show what is nearby and to place a seller’s pickup area. The reading is rounded to roughly a kilometre on your device before it is sent, and the precise coordinate is never stored. Decline it and you can type a location instead.

Camera, only to read a buyer’s pickup code at handover — you can always type the code instead. No image from the scanner is stored. Photo library, only for the pictures a seller chooses to attach to a listing.

Your pickup code is stored only as a one-way hash and shown to you once. A bidder’s maximum and a seller’s hidden reserve never appear in any public response. A seller’s exact pickup address is excluded from every public listing, which is enforced by tests rather than by convention.

Today: nobody. No payment processor, identity provider, carrier or tax service is connected, and no personal data has ever been sent to one.

Before BuyAve handles real money that will change, and this section must list each provider by name and say what it receives: an identity provider for sign-in, a payment processor for charges, payouts and seller verification, a carrier for deliveries, a tax service, object storage for photographs and shipping labels, and a hosting provider whose logs carry request identifiers but not your identity.

BuyAve operates in the United States and stores data there. We do not sell personal information, and we do not share it for advertising.

Your account data is kept while your account is open. When you close it, the list in the next section is erased immediately.

The rest is kept because a completed transaction is a record two people and the tax authorities have an interest in. Orders, payments, refunds, payouts, the money ledger, bids, the evidence behind a handover or delivery, and the audit trail that explains them are append-only at the database level — they cannot be altered or deleted by anyone, including us. We keep them for as long as financial, tax and dispute obligations require.

Pending — Specific periods for each category, confirmed against the obligations that actually apply. The rule above is what the software does; how long “as long as required” is has not been established.

You can close your account from the website or the app. What happens is not a promise here; it is what the software does.

Erased immediately: your profile and display name, approximate location, saved listings, saved searches, saved addresses, blocks, undelivered notifications, the link to your sign-in provider, and every session. Your email, phone and handle are cleared from the account record and the handle is released for reuse. Listings still on sale are withdrawn.

Retained: orders, the money ledger, transfers, refunds, the audit trail, and the evidence behind a completed handover or delivery. These are financial records that both parties and the law have an interest in.

In a retained order, a closed account appears as Former member rather than a name.

Closure is refused while something is open — an active order either way, a payout in flight, a seller balance, an unresolved dispute or refund, or a live auction carrying your bid. The refusal names each thing to finish.

Whatever else applies to you, these work today:

• Take a copy — download everything we hold about you as a single file, from your account, without asking anyone.
• Correct it — your profile is editable at any time. A completed transaction is not, by design.
• Delete it — close your account, with the limits described above.

Pending — Which privacy regimes this policy is written to satisfy, the statutory rights that follow, and the deadlines for responding to a request.

BuyAve requires buyers and sellers to be at least 18. Parent-authorized minor accounts are not allowed. We record an adult eligibility declaration, its timestamp, and the eligibility and Terms versions. This is self-attestation, not verified age; this flow does not collect a date of birth or an identity document.

Credible age concerns restrict buying, bidding, selling and sending messages pending further review. Contact support@buyave.com to report an underage account; do not send identity documents by email.

Pending — The detailed underage-data response, retention and stronger age-check procedures must be finalized before public launch.

Sign-in tokens are stored only as hashes, and we never see your password — sign-in is handled by an identity provider. Pickup credentials are stored only as keyed hashes. Shipping labels and other private documents are served only through authenticated, short-lived links and never from a public address. Operator actions that change anything require a stated reason and are written to an append-only audit log.

Pending — Breach notification obligations and deadlines. Note for whoever assesses this: no alerting is configured today, so detection depends on somebody looking.

Write to support@buyave.com. For how the marketplace itself works, see How BuyAve works.

Pending — The operating company’s legal name and registered address, and whether a dedicated privacy contact or representative is required.