Privacy Policy

1. Information We Collect

We collect information you provide directly to us, including:

• Account information: Name, email address, phone number, and password
• Profile information: Display name, bio, location (city, state, ZIP code)
• Farm information: Farm name, description, location, and website
• Verification documents: Government-issued ID photo and selfie (see Data Retention below)
• Listing and animal information: Descriptions, photos, prices, breeds, and other details you provide
• Messages: Communications between users on the platform
• Payment information: Processed securely through Stripe; we never store credit card numbers

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Process identity verification requests
• Facilitate communication between buyers and sellers
• Send you transactional notifications (messages, sale updates, verification status)
• Send you optional marketing emails (only with your consent; you can opt out anytime)
• Detect and prevent fraud or abuse
• Comply with legal obligations

3. Information Sharing

We do not sell your personal information. We may share information in the following cases:

• Service providers: Stripe (payments), Resend (email delivery), Supabase (database hosting), and Vercel (application hosting)
• Public information: Your display name, farm profile, and listings are visible to other users
• Legal requirements: When required by law, subpoena, or legal process
• With your consent: When you explicitly choose to share information

4. Data Retention

We retain your data for as long as necessary to provide our services:

5. Data Security

We implement appropriate security measures to protect your personal information, including:

• Encryption in transit (HTTPS/TLS) and at rest
• Row-level security on all database tables
• CSRF protection on all form submissions
• Rate limiting to prevent abuse
• Multi-factor authentication support
• Immediate deletion of sensitive verification documents after review

However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

6. Your Rights

Under applicable privacy laws (including CCPA for California residents), you have the right to:

• Access: View your personal information through your account settings
• Export: Download a copy of all your data (Settings → Privacy → Download My Data)
• Correct: Update inaccurate information through your profile settings
• Delete: Delete your account (Settings → Security → Delete Account), which anonymizes your personal data, deactivates listings, and anonymizes your messages
• Opt out: Disable marketing emails at any time (Settings → Notifications)

We do not discriminate against users who exercise their privacy rights. To exercise any of these rights, use the tools in your account settings or contact us at the email below.

7. Account Deletion

When you delete your account:

• Your personal information (name, phone, bio) is anonymized
• Your display name is replaced with "Deleted User"
• All active listings are deactivated
• Farm profiles are anonymized and made private
• Messages you sent are replaced with a placeholder
• Your conversations are anonymized
• You are signed out of all sessions

Your farm and animal data are preserved in an anonymized state so that other users who interacted with your farm retain context for their own records. If you wish to reactivate your account in the future, contact support.

8. Cookies & Tracking

We use cookies and similar technologies to:

• Essential cookies: Maintain your login session and CSRF tokens (required)
• Preference cookies: Remember your settings and preferences
• Analytics: Understand how our service is used to improve it

You can manage cookie preferences through our cookie banner. We do not use third-party advertising trackers.

9. Third-Party Services

We use the following third-party services:

• Stripe: Payment processing (Stripe Privacy Policy)
• Resend: Email delivery
• Supabase: Database and authentication hosting
• Vercel: Application hosting

10. Children's Privacy

Foldtender is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If we learn we have collected information from a child under 18, we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. Continued use of Foldtender after changes constitutes acceptance of the updated policy.