Privacy Policy

Last updated 28 July 2026

1. Who is responsible

MarketPlaceCompany operates https://market.place and is the controller of the personal data described here. Privacy questions: [email protected].

2. What we collect

  • Account data — email address, display name, optional country, notification preferences, and a salted hash of your password (never the password itself).
  • Order data — what you bought or sold, amounts, timestamps, escrow and dispute history.
  • Payment data — handled by our payment provider (Stripe). We receive only a payment reference and status; card numbers never touch our servers.
  • Delivered credentials — the account credentials a seller uploads for delivery are stored encrypted and are only decrypted to show them to the buyer of a completed order.
  • Technical data — IP address and basic request metadata, used for rate limiting and abuse prevention.

3. Why we use it

  • To run the marketplace: orders, delivery, escrow, payouts (contract).
  • To send transactional email — verification, password reset, order updates (contract).
  • To prevent fraud and abuse, and to meet accounting obligations (legitimate interest / legal obligation).
  • Optional marketing emails only with your consent, controlled from the settings page.

We do not sell personal data and we do not run third-party advertising.

4. Cookies

The Service uses essential cookies only: a session cookie that keeps you signed in and a preference cookie remembering that you dismissed the cookie notice. There are no analytics or advertising cookies, which is why there is no consent pop-up wall.

5. Sharing

  • Stripe — payment processing (their privacy policy applies to the payment itself).
  • Resend — transactional email delivery (your email address and the message content).
  • Infrastructure providers — hosting and content delivery, bound by data-processing agreements.
  • Authorities, where the law requires it.

6. Retention

  • Account data: for the life of the account.
  • Order and payout records: retained after account deletion as long as accounting and fraud-prevention rules require.
  • On account deletion, your profile is anonymized — name and email are replaced with non-identifying values while order integrity is preserved.

7. Your rights

Depending on where you live, you may have the right to access, correct, export or erase your personal data, and to object to or restrict certain processing. Write to [email protected] — we respond within a month. You can also delete your account directly from the settings page.

8. Changes

Material changes to this policy are announced on the Service and take effect on the date shown above.