Privacy Policy

1. Information We Collect

We collect the following categories of personal information:

• Account information: Name, email address, and (for sellers with two-factor authentication enabled) phone number.
• Location data: When you participate in a local meetup session, we temporarily collect your device's approximate location to enable PIN-based verification between buyer and seller. This data is only used during the active meetup session and is not stored after the session ends.
• Listing and transaction data: Items you list for sale, purchase history, and payment records associated with your email address.
• Device and usage data: Browser type, IP address prefix (salted daily — we never store your full IP), pages visited, and referring URLs. Used for traffic analytics only.
• Cookies and similar technologies: We use cookies to maintain login sessions and measure site traffic. See our Cookie Notice below.

2. How We Use Your Information

We use your information to:

• Process transactions between buyers and sellers
• Send order confirmations, meetup PINs, and support responses
• Facilitate local meetup verification sessions (location data only during active sessions)
• Measure and analyze site traffic and performance
• Detect and prevent fraudulent transactions

We do not sell your personal information. This is required to be stated under the California Consumer Privacy Act (CCPA).

3. Third-Party Sharing

We share information only with the following third parties, solely for the purposes listed:

• Stripe: Processes your payment. Stripe is a PCI-DSS Level 1 compliant payment processor. They hold your payment card information directly — we never see or store your card number.
• Meta (Facebook Pixel): We install the Meta Pixel on all pages. This may collect basic event data (page views, checkout starts, purchases) for analytics and advertising measurement. We do not share your name, email, or phone number with Meta.
• Polsia (our hosting and infrastructure provider): Handles site hosting, email delivery, and technical support. Subject to Polsia's own privacy practices.

We do not share your personal information with any other third parties, data brokers, or advertising networks.

4. Cookies and Similar Technologies

We use the following types of cookies:

• Essential cookies: Required for login sessions (seller dashboard) and checkout flow. Cannot be disabled without breaking core functionality.
• Analytics cookies: Measure page views and traffic sources. Data is aggregated and anonymized where possible.
• Marketing/remarketing cookies: Meta Pixel may set cookies for advertising measurement. You can opt out of interest-based advertising from Meta at facebook.com/settings.

5. Your Rights Under CCPA (California)

If you are a California resident, you have the following rights regarding your personal information:

• Right to Know: Request a copy of the personal information we have collected about you in the past 12 months.
• Right to Delete: Request that we delete your personal information, subject to certain exceptions (e.g., transaction records required for tax compliance).
• Right to Opt-Out of Sale: Opt out of the sale of your personal information. We do not sell personal information, so this right is not applicable to our current practices, but we honor your right to request this confirmation.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of these rights.

To exercise any of these rights, contact us at customersup_FLPU@proton.me with the subject "Privacy Rights Request." We will respond within 45 days.

Account suspension and fraud: We reserve the right to suspend or close accounts suspected of fraudulent activity, misrepresentation, or conduct that endangers other users — without prior notice. You have 45 days from the date of suspension to submit a written appeal. After 45 days, no response is guaranteed. See our Terms of Service, Section 13 for full details.

6. Your Rights Under GDPR (European Union)

If you are located in the European Economic Area, you have additional rights including the right to access, rectify, erase, restrict processing of, and port your personal data. Contact us at customersup_FLPU@proton.me to exercise these rights.

7. Data Retention

We retain your information for as long as your account is active or as needed to provide services. Transaction records are retained for at least 3 years for tax and dispute resolution purposes. Location data from meetup sessions is not retained after the session ends.

8. Security

We use industry-standard encryption (HTTPS/TLS) for all data in transit. Passwords are hashed using bcrypt. Payments are processed exclusively through Stripe, which handles all PCI compliance requirements. We do not store full credit card numbers.

9. Children's Privacy

FluxPulse Market is not intended for users under the age of 18. We do not knowingly collect personal information from minors. If we become aware that we have collected data from a minor, we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last updated" date above and, if required by law, notify you via email or a notice on our homepage.

11. Contact Us

For any privacy-related questions, requests, or concerns:

For data deletion requests, you can also use the embedded form below or email customersup_FLPU@proton.me with subject "Delete My Data" and include the email address associated with your account.

12. Request Deletion of Your Account

You have the right to request deletion of your FluxPulse account and all associated personal data, including your name, email, phone number (if provided), listing history, order records, and transaction history. This right is protected under the California Consumer Privacy Act (CCPA) and General Data Protection Regulation (GDPR).

Deleting your data will:

• Permanently remove your seller account
• Remove all your listings from the marketplace
• Remove all your order records
• Cancel any pending transactions
• Delete your transaction history

This action is IRREVERSIBLE. FluxPulse Market will retain any data required to be kept by law for a maximum of 7 years for tax and financial record purposes.