PRIVACY POLICY

Account information: your email address, display name, and password (stored as a cryptographic hash — we never see it).

Identity verification: every buyer and seller on Open Garage Sale is identity-verified. Verification is performed entirely by Stripe (Stripe Identity for buyers; Stripe Connect onboarding for sellers). Your government ID, selfie, and banking details go directly to Stripe and are governed by Stripe's privacy policy. We never receive, see, or store your documents — we store only a yes/no verified status.

Listings and photos: the items, descriptions, and photos you post. Photos are resized and converted in your browser before upload; the original file never leaves your device. If you use the AI listing scanner, your photo is processed by an AI model provider to draft your listing.

Transactions: records of bids, purchases, sale amounts, and payment status. Card numbers are handled exclusively by Stripe — they never touch our servers.

Usage data: pages visited, searches, and feature usage, collected via PostHog analytics to improve the product.

To run the marketplace: showing listings, processing bids and payments, verifying identities to keep scammers out, displaying transaction-verified ratings, preventing fraud, providing support, and meeting legal obligations (including tax reporting).

We do not sell your personal information. We do not use your data for third-party advertising.

Service providers who make the platform work, each receiving only what their function requires: Stripe (payments, identity verification, payouts), Supabase (database and photo hosting), Vercel (website hosting), PostHog (analytics), and AI model providers (listing photo analysis only). We may disclose information if required by law.

Other users see only what a marketplace needs: your display name, verified status, rating, and your listings. Your email, address, and documents are never shown publicly.

Data is encrypted in transit (TLS) and at rest, protected by row-level database security so users can only access their own records. Payment and identity data live with Stripe, a PCI-DSS Level 1 certified processor. We keep transaction records as long as required for tax and legal purposes; you may request deletion of your account and personal data at any time (transaction records we're legally required to keep are retained in de-identified form where possible).

We use essential cookies to keep you signed in and analytics cookies (PostHog) to understand feature usage. We don't use advertising cookies.

You can access, correct, or delete your information by emailing info@opengaragesale.com. We'll respond within 30 days. If we make material changes to this policy, we'll post the updated version here with a new effective date.