Privacy policy

What we collect

When you create an account we store the email and display name you provide, plus a password hash held by the authentication provider (Supabase Auth). As you use the marketplace we store listings, offers, messages, contract terms, fulfilment details, and the region you browse or set on your profile.

Stripe — payments and identity

Stripe is the payment and identity provider. Card details are entered on Stripe's pages and are not stored by NoDitto. Stripe returns the payment, hold, payout, and dispute states the product needs to run a contract.

Identity verification uses Stripe Identity. Stripe collects the government document and selfie for that check. NoDitto stores the verification outcome and, when Stripe reports it, the provider-verified legal name used for counterparty disclosure. We do not store the document images ourselves.

How we use it

• Operate accounts, listings, trades, and cash sales.
• Show verification status and disclosed identity to counterparties.
• Process payments, card holds, collections, refunds, and payouts via Stripe.
• Review disputes and staff-confirmed fraud findings.
• Send transactional email such as password reset and contract notices.

What we do not do

We do not sell your personal information. We do not use Stripe Identity results for advertising. Payment and identity processing is performed by Stripe under Stripe's own terms and privacy policy.

Retention and access

We keep account and contract records for as long as they are needed to operate the service, complete payouts, and review disputes. You can update profile details from your account. Password reset uses the email on the account and does not tell a visitor whether that email is registered.

Contact

Questions about this policy can be sent through the Help page. If the product's privacy practices change in a material way, we will update this page.