Privacy Policy

1. Introduction

HS&C Marketplace ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Platform.

By using the Platform, you consent to the data practices described in this policy. If you do not agree with this policy, please do not use the Platform.

2. Information We Collect

Information You Provide:

• Account information (username, email, password)
• Profile information (display name, seller details)
• Payment information (processed by Stripe)
• Shipping addresses
• Product listings and descriptions
• Reviews and ratings
• Communications with support

Information Automatically Collected:

• Device information (IP address, browser type, operating system)
• Usage data (pages visited, features used, time spent)
• Cookies and similar tracking technologies
• Log data (access times, error logs)

Information from Third Parties:

• Payment information from Stripe
• Authentication data from OAuth providers (GitHub, Google)
• Public information from social media (if you connect accounts)

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Platform
• Process transactions and send transaction notifications
• Create and manage your account
• Facilitate communication between buyers and sellers
• Send administrative information and updates
• Respond to your inquiries and provide customer support
• Detect, prevent, and address fraud and security issues
• Analyze usage patterns and improve user experience
• Send marketing communications (with your consent)
• Comply with legal obligations

4. How We Share Your Information

We may share your information in the following circumstances:

With Other Users:

When you make a purchase, your shipping address is shared with the seller to fulfill your order. When you sell, buyers can see your display name and any public seller information.

With Service Providers:

• Payment processors (Stripe)
• Hosting providers (Vercel)
• Email service providers
• Analytics services
• Customer support tools

For Legal Reasons:

We may disclose information if required by law, court order, or government request, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

Business Transfers:

If HS&C is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

5. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to:

• Maintain your session and keep you logged in
• Remember your preferences and settings
• Analyze site usage and performance
• Provide personalized content and recommendations

You can control cookies through your browser settings. Note that disabling cookies may limit functionality of the Platform.

6. Data Security

We implement industry-standard security measures to protect your information:

• Encryption of data in transit (HTTPS/TLS)
• Encryption of sensitive data at rest
• Secure password hashing (bcrypt)
• CSRF protection on all forms
• Regular security audits
• Limited employee access to personal data

However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security of your information.

7. Data Retention

We retain your information for as long as your account is active or as needed to provide services. We may retain certain information after account closure for:

• Completing transactions and resolving disputes
• Complying with legal obligations
• Preventing fraud and abuse
• Enforcing our agreements

8. Your Privacy Rights

Depending on your location, you may have the following rights:

• Access your personal information
• Correct inaccurate or incomplete information
• Request deletion of your information
• Object to or restrict processing of your information
• Data portability (receive your data in a structured format)
• Withdraw consent for marketing communications
• Opt out of the sale of personal information

To exercise these rights, please contact us at privacy@hscmarketplace.com. We will respond within 30 days of receiving your request.

9. Children's Privacy

The Platform is not intended for children under 18. We do not knowingly collect information from children. If we discover we have collected information from a child, we will delete it immediately.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your own. These countries may have different data protection laws. By using the Platform, you consent to such transfers.

11. Third-Party Links

The Platform may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any information.

12. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information we collect and how we use it
• Right to delete personal information
• Right to opt out of the sale of personal information
• Right to non-discrimination for exercising your rights

We do not sell personal information as defined by CCPA. To exercise your rights, contact us at privacy@hscmarketplace.com.

13. European Privacy Rights (GDPR)

If you are in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR):

• Right of access to your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restriction of processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent
• Right to lodge a complaint with a supervisory authority

14. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. Material changes will be communicated via email or prominent notice on the Platform. Your continued use after changes are posted constitutes acceptance of the updated policy.

15. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us: