Privacy Policy
This Privacy Policy ("Policy") describes how MarkitMix, Inc. ("MarkitMix," "we," "us," or "our"), a Delaware corporation, collects, uses, and discloses information in connection with the MarkitMix marketplace and related websites and applications, including markitmix.shop (collectively, the "Services"). MarkitMix operates an online marketplace through which buyers purchase items by auction, fixed-price ("Buy It Now") listing, and offer, and through which sellers list items for sale and receive payment.
By accessing or using the Services, you acknowledge that you have read and understood this Policy. If you do not agree with it, you should not access or use the Services.
1. Information We Collect
1.1 Information You Provide to Us
- Account information. When you register for an account, including by email and password or through "Sign in with Google," we collect your name, email address, and authentication credentials. You may also provide a telephone number, display name, profile and cover images, and biographical information.
- Seller information. If you register as a seller, we collect the information required to verify your identity and remit payment to you. Identity and payout details, including bank account information, are collected and processed by our payment processor, Stripe. We also collect business details such as your store name.
- Transaction and fulfillment information. When you buy, sell, bid, make or accept offers, or arrange shipping or local pickup, we collect information relating to those transactions, including item details, prices, shipping and billing addresses, and pickup locations and times.
- Payment information. Payment card and bank account details are collected and processed by Stripe. We do not store complete card numbers. We retain limited information such as a payment-method token, the card brand and last four digits, and a Stripe customer or connected-account identifier.
- Content you submit. Photographs and descriptions of listings, reviews, comments, messages, and other materials that you post or transmit through the Services.
- Communications and support. When you contact customer support, submit a report, or message another user, we collect the contents of those communications. A report may include a diagnostic summary generated by your device, such as your browser, operating system, device type, screen dimensions, network status, the page in use, and recent actions, which assists us in identifying and resolving the issue.
- Location information. Where you provide it or enable the relevant feature, we collect location information such as a postal address or approximate geographic coordinates, which we use to facilitate local pickup and shipping and to present relevant listings.
1.2 Information We Collect Automatically
- Device and log information. When you use the Services, we automatically collect technical information, including your Internet Protocol (IP) address, device and browser type (user agent), application version, and server access logs, such as the resources accessed, timestamps, and a request identifier. We use this information to operate and secure the Services, to prevent fraud and abuse, and to diagnose technical problems.
- Usage information. Information about how you interact with the Services, including the listings you view, search for, favorite, bid on, or purchase, your recently viewed items, and your stated category preferences. We use this information to generate recommendations and personalize your experience.
- Notification identifiers. If you enable push notifications, we collect a device or browser notification token in order to deliver messages to you.
- Cookies and similar technologies. We use a limited number of strictly necessary cookies, including a secure session cookie, to authenticate you and operate the Services. Please see Section 5.
1.3 Information We Receive From Third Parties
- Authentication providers. If you sign in using Google, we receive basic profile information, such as your name and email address, from Google in order to create and authenticate your account.
- Payment and shipping providers. We receive transaction-related information from Stripe, such as payment and payout status, and from our shipping provider, Shippo, such as shipment tracking status, in order to complete and support your transactions.
2. How We Use Information
We use the information described in this Policy for the following purposes:
- to provide, operate, maintain, and improve the marketplace, including registering and administering accounts, listing items, conducting auctions and fixed-price sales, and processing bids and offers;
- to process payments and remit payouts to sellers through Stripe, and to calculate fees, taxes, refunds, and related amounts;
- to facilitate order fulfillment, including generating shipping labels and tracking through Shippo and coordinating local pickup, including the issuance and verification of pickup codes;
- to communicate with you, including by push notification, email, and in-app messaging, regarding transactions, account activity, and other service-related matters, and, where permitted, regarding products and features;
- to personalize your experience and recommend listings based on your activity and preferences;
- to provide customer support and respond to your inquiries and reports;
- to protect the Services and our users, including to detect, investigate, prevent, and address fraud, abuse, security incidents, and other unlawful or prohibited activity, and to enforce our agreements; and
- to comply with applicable legal obligations, including tax, accounting, and recordkeeping requirements, and to establish, exercise, or defend legal claims.
3. How We Disclose Information
We do not sell your personal information. We disclose information only as described in this Section.
- Between buyers and sellers. To complete and support a transaction, we disclose the information necessary to fulfill it. For example, a seller receives the buyer's name and shipping address in order to ship an order or to coordinate local pickup. Your public profile, listings, reviews, and comments are visible to other users.
- Service providers. We disclose information to vendors that perform services on our behalf, subject to contractual obligations that restrict their use of the information. These providers are identified in Section 4.
- Legal and safety purposes. We may disclose information where we believe in good faith that disclosure is necessary to comply with applicable law, legal process, or a governmental request; to enforce our agreements; or to protect the rights, property, or safety of MarkitMix, our users, or others.
- Business transfers. In connection with, or during negotiations of, any merger, financing, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, information may be transferred as part of that transaction, subject to this Policy.
- With your consent. We disclose information at your direction or with your consent.
4. Service Providers
We engage the following principal service providers to operate the Services. Each receives only the information necessary to perform its function on our behalf.
- Amazon Web Services (AWS): cloud hosting, database, file and image storage, and user authentication (Amazon Cognito).
- Stripe: payment processing, seller onboarding, and payouts.
- Shippo: shipping rates, label generation, and tracking.
- Google: "Sign in with Google" authentication and mapping and geolocation features.
- Firebase Cloud Messaging (Google): mobile push notifications.
- Email and operational service providers: transactional email delivery and internal support and operations tooling used to respond to your requests.
5. Cookies
We use a limited number of strictly necessary cookies, most importantly a secure, HttpOnly session cookie that authenticates you and enables core functionality. Because these cookies are essential to providing the Services, they cannot be disabled through the Services. You may block or delete cookies through your browser settings; however, certain features of the Services may not function properly if you do so.
6. Data Retention
We retain your account information for as long as your account remains active and as necessary to provide the Services. We retain transaction, payment, and tax records for the periods required by applicable law and for legitimate business purposes, including accounting, dispute resolution, and fraud prevention. Server access logs containing IP and device information are retained for a limited period, approximately ninety (90) days, and are then deleted. When information is no longer required, we delete or de-identify it.
7. Security
We maintain technical and organizational measures designed to protect information against unauthorized access, disclosure, alteration, and destruction, including encryption of data in transit, secure HttpOnly session cookies, managed authentication, and access controls. No method of transmission over the Internet, and no method of electronic storage, is completely secure, and we cannot guarantee absolute security.
8. Your Rights and Choices
- Access and correction. You may review and update much of your account information within the Services.
- Deletion. You may request deletion of your account through your account settings or by contacting us. We may retain certain information where required by law or for legitimate business purposes, such as completed-transaction and tax records.
- Communications. You may control push notifications through your device settings and manage other communication preferences within the Services.
- California residents. If you are a California resident, you have rights under the California Consumer Privacy Act, as amended (the "CCPA"), including the right to know the categories and specific pieces of personal information we collect and the purposes for which we use and disclose it; the right to request deletion or correction of your personal information; and the right not to receive discriminatory treatment for exercising your rights. We do not sell your personal information, and we do not share it for cross-context behavioral advertising. You may exercise these rights using the contact information in Section 12.
- Residents of the EEA, the United Kingdom, and other jurisdictions. Depending on your location, you may have rights to access, correct, delete, or restrict the processing of your personal data, to object to certain processing, and to data portability. Where we rely on your consent, you may withdraw it at any time. You may also have the right to lodge a complaint with your local supervisory authority.
To exercise any of these rights, please contact us at info@markitmix.shop. We may take reasonable steps to verify your identity before responding to a request.
9. Children's Privacy
The Services are intended for adults. You must be at least eighteen (18) years of age to register for an account or use the Services. We do not knowingly collect personal information from any person under eighteen (18) years of age. If you believe that a person under eighteen (18) has provided us with personal information, please contact us, and we will take appropriate steps to delete it.
10. International Users
MarkitMix is operated from the United States. The information we collect is processed and stored in the United States and by our service providers. If you access the Services from outside the United States, you acknowledge that your information will be transferred to, and processed in, the United States, where data protection laws may differ from those of your jurisdiction.
11. Changes to This Policy
We may update this Policy from time to time. If we make changes, we will revise the "Effective date" set forth above and, for material changes, provide additional notice through the Services. Your continued use of the Services following the posting of an updated Policy constitutes your acceptance of the revised Policy.
12. Contact Us
If you have questions or concerns regarding this Policy or our handling of your information, you may contact us at:
MarkitMix, Inc., a Delaware corporation
Email: info@markitmix.shop