Privacy Policy

SpotlightSwap (“we,” “our,” or “us”) operates the SpotlightSwap marketplace platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, mobile application, and related services (the “Platform”). Please read this policy carefully. By using the Platform, you consent to the practices described herein.

1. Information We Collect

We collect information in the following categories:

Information You Provide

• Account information: name, email address, password, and profile details
• Seller verification: identity documents, bank account information (processed by Stripe)
• Listing content: photos, descriptions, measurements, and pricing
• Messages sent through our messaging system
• Shipping information: addresses provided for order fulfillment
• Support requests and correspondence

Information Collected Automatically

• Device information: browser type, operating system, device identifiers
• Usage data: pages visited, features used, search queries, listing views
• Log data: IP address, access times, referring URLs, error logs
• Cookies and similar technologies (see Section 5)

2. How We Use Your Information

• Provide, operate, and maintain the Platform
• Process transactions and send related notifications
• Facilitate communication between Buyers and Sellers
• Verify seller identity and prevent fraud
• Send account-related communications (order updates, receipts)
• Send marketing communications (with your consent; you can opt out at any time)
• Improve our Platform through analytics and usage patterns
• Enforce our Terms of Service and protect against unauthorized activity
• Respond to support requests and inquiries
• Comply with legal obligations

3. Information Sharing

We do not sell your personal information. We may share your information in the following circumstances:

• Transaction participants: Buyer and Seller information necessary to complete a transaction (e.g., shipping address shared with Seller)
• Service providers: Third-party services that help us operate the Platform (see Section 6)
• Legal requirements: When required by law, subpoena, or legal process
• Protection: To protect the rights, property, or safety of SpotlightSwap, our users, or the public
• Business transfers: In connection with a merger, acquisition, or sale of assets

4. Data Security

We implement industry-standard security measures to protect your personal information, including encryption in transit (TLS/SSL), secure server infrastructure, and access controls. Payment information is processed by Stripe, a PCI Level 1 certified payment processor, and is never stored on our servers. While we take reasonable measures to protect your information, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

5. Cookies & Tracking Technologies

We use the following types of cookies:

• Essential cookies: Required for the Platform to function (authentication, security, session management)
• Analytics cookies: Help us understand how users interact with the Platform (e.g., page views, traffic sources)
• Preference cookies: Remember your settings and preferences (e.g., theme, search filters)

You can control cookies through your browser settings. Disabling certain cookies may affect Platform functionality.

6. Third-Party Services

We use the following third-party services to operate the Platform:

• Stripe: Payment processing and seller identity verification. Stripe Privacy Policy
• Shippo: Shipping label generation and tracking. Shippo Privacy Policy
• Resend: Transactional email delivery. Resend Privacy Policy
• Vercel: Platform hosting and infrastructure. Vercel Privacy Policy

7. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate personal information
• Deletion: Request deletion of your personal information (subject to legal obligations)
• Portability: Request a machine-readable copy of your data
• Opt-out: Unsubscribe from marketing communications at any time

To exercise any of these rights, contact us at privacy@spotlightswap.com. We will respond within 30 days.

8. Children's Privacy

The Platform is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If we learn that we have collected information from a child under 13, we will take steps to delete that information promptly. If you believe we have collected information from a child under 13, please contact us immediately. Users between 13 and 18 may use the Platform only with the involvement of a parent or legal guardian.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by updating the “Last updated” date at the top of this page and, for significant changes, by sending an email notification. Your continued use of the Platform after changes are posted constitutes acceptance of the updated policy.

10. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at: