Privacy Policy | Mowstash

1. Information We Collect

Information you provide:

Account information (name, email, username, password)
Profile information (bio, business name, phone number, location)
Listing content (titles, descriptions, photos, pricing, equipment details)
Messages and offers exchanged with other users
Reviews and ratings you leave for other users

Information collected automatically:

Device and browser information
IP address and approximate location
Pages visited and features used
Listing view counts and search queries

2. How We Use Your Information

We use your information to:

Provide, maintain, and improve the Platform
Create and manage your account
Display your listings to potential buyers
Facilitate communication between buyers and sellers
Send notifications about messages, offers, and account activity
Detect and prevent fraud, spam, and abuse
Comply with legal obligations

3. Information Sharing

We do not sell your personal information. We share information only in these circumstances:

Public profile: Your name, username, bio, city/state, and listings are visible to other users
Messages: Content you send is visible to the recipient
Service providers: We use third-party services for hosting (Vercel), database (Supabase), and authentication (Google OAuth). These providers only access data as needed to provide their services
Legal requirements: We may disclose information when required by law or to protect our rights, safety, or property

4. Photo Privacy

When you upload photos to listings, we automatically strip EXIF metadata (including GPS coordinates, camera information, and timestamps) to protect your privacy. Photos are processed and stored securely on our cloud storage provider.

5. Data Security

We protect your data through:

Passwords hashed with bcrypt (we never store plaintext passwords)
HTTPS encryption for all data in transit
Secure cloud infrastructure with access controls
Input validation and parameterized database queries to prevent injection attacks

While we take reasonable measures to protect your data, no system is 100% secure. You are responsible for maintaining the security of your account credentials.

6. Cookies

We use essential cookies for authentication and session management. These are necessary for the Platform to function. We do not use advertising or tracking cookies.

7. Your Rights

You have the right to:

Access your personal data through your account settings
Update your profile information at any time
Delete your listings at any time
Delete your account — contact us and we will remove your account and associated data
Export your data — contact us to request a copy of your data

8. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or security purposes. Anonymized usage data may be retained for analytics purposes.

9. Children's Privacy

Mowstash is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If we learn that we have collected information from a child under 18, we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on the Platform or sending you an email. Your continued use of the Platform after changes constitutes acceptance of the updated policy.

11. Contact Us

For privacy-related questions or to exercise your rights, contact us at privacy@mowstash.com or through our contact page.