Your privacy matters at Reflexed

1. Information we collect

• Account data: email, username, password (hashed), and profile details.
• Transaction data: listings, sales, purchases, payouts, and related financial information (via Stripe).
• Device & usage data: IP, browser type, device identifiers, and activity logs for security and performance.
• Media data: photos, EXIF/RAW files, and metadata you upload with listings.
• Communications: messages, support requests, and feedback you submit.

2. How we use information

• Facilitating transactions: enabling buying, selling, payments, and shipping.
• Trust & safety: fraud prevention, authentication, dispute resolution, and enforcing policies.
• Improvement: analyzing usage, fixing bugs, and enhancing features.
• Legal compliance: tax, reporting, and regulatory requirements.
• Marketing: with consent, sending updates, promotions, and announcements.

3. Sharing of data

• Payment processors: Stripe handles card/bank details and tax reporting.
• Shipping providers: carriers receive delivery details for fulfillment.
• Service providers: cloud hosting, analytics, and security vendors under contract.
• Legal authorities: if required by law, subpoena, or to enforce our rights.
• Other users: only the information necessary to complete a transaction (e.g., shipping address after purchase).

4. Data security

We use industry-standard encryption, hashed passwords, and secure infrastructure. Access is role-limited, logs are monitored, and sensitive actions may require 2FA.

5. Your rights

• Access: request a copy of your personal data.
• Correction: update inaccurate information in Settings.
• Deletion: request account deletion (may be limited by law/transaction history).
• Portability: request export of your data where technically feasible.
• Opt-out: manage email preferences and marketing consents.

6. Cookies & tracking

Reflexed uses cookies, pixels, and similar technologies to enable essential site functions, analyze performance, remember preferences, and deliver relevant marketing (with consent where required). You can manage cookie settings in your browser or through our in-app controls.

7. Data retention

We retain personal data for as long as necessary to provide services, comply with legal obligations, resolve disputes, and enforce agreements. Transaction and tax-related data may be stored for up to 7 years, even if you delete your account.

8. Children’s privacy

Reflexed is not directed to children under 13, and we do not knowingly collect personal data from them. If we become aware of such collection, we will delete it promptly. Users under 18 must have parental or guardian consent to use the service.

9. Third-party links

Our site may contain links to third-party websites or services. We are not responsible for their privacy practices. We encourage you to review the privacy policies of those third parties before providing personal data.

10. International users

Reflexed operates primarily in the United States. If you access from outside, note your data may be transferred and processed in the U.S. and subject to U.S. law.

11. GDPR/CCPA rights

• Right to know: request categories and specific pieces of data we collect.
• Right to delete: request erasure of data, subject to legal exceptions.
• Right to opt-out of sale/share: Reflexed does not sell personal data, but you may request limits on sharing for advertising.
• Right to non-discrimination: you will not be penalized for exercising your rights.
• EU/EEA users: you may contact our Data Protection Officer and supervisory authority for concerns.

12. Policy updates

We may update this Privacy Policy from time to time. Material changes will be notified in-app or by email. Continued use of Reflexed after updates indicates acceptance.

13. Contact us

For questions, requests, or concerns, contact us at privacy@reflexed.co.