1. Introduction
This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our Stellenbosch University student marketplace platform ("the Service"). We are committed to protecting your privacy and complying with the Protection of Personal Information Act (POPIA) of South Africa.
2. Information We Collect
2.1 Information You Provide:
- Account Information: Email address, username, full name, profile picture
- Listing Information: Item titles, descriptions, photos, prices, location, condition
- Messages: Communications between buyers and sellers
- Reports: Content you report and reasons for reporting
2.2 Automatically Collected Information:
- Usage Data: Pages viewed, listings clicked, search queries, time spent
- Device Information: IP address, browser type, device type, operating system
- Cookies: Session cookies for authentication and preference storage
- Analytics: Aggregated usage statistics (when analytics are enabled)
3. How We Use Your Information
We use your information to:
- Provide the Service: Create accounts, display listings, facilitate messaging
- Improve the Platform: Analyze usage patterns, fix bugs, add features
- Personalize Experience: Show relevant listings based on your preferences
- Ensure Safety: Detect fraud, enforce policies, investigate violations
- Communicate: Send notifications about messages, listings, and service updates
- Comply with Law: Respond to legal requests and prevent illegal activity
4. Information Sharing and Disclosure
4.1 Public Information:
The following information is visible to other users:
- Your username and profile picture
- Listings you create (title, description, price, photos, location)
- Your general location (if you choose to share it)
4.2 We DO NOT Sell Your Data:
We will never sell your personal information to third parties.
4.3 We May Share Information With:
- Service Providers: Hosting (Vercel), database (Supabase), email services
- Law Enforcement: When required by law or to prevent harm
- University Officials: If necessary to address serious policy violations
- Advertising Partners: Aggregated, anonymized data for ad performance (if ads enabled)
5. Data Storage and Security
5.1 Where We Store Data:
Your data is stored securely using Supabase (PostgreSQL database) with servers located in secure data centers. Images are stored in Supabase Storage with encryption.
5.2 Security Measures:
- HTTPS encryption for all data transmission
- Password hashing with industry-standard algorithms
- Row-level security policies on database tables
- Regular security updates and monitoring
- Access controls limiting who can view data
Note: No system is 100% secure. While we implement strong security measures, we cannot guarantee absolute security. Use strong passwords and protect your account credentials.
6. Your Rights (POPIA Compliance)
Under South African law, you have the right to:
- Access: Request a copy of all personal data we hold about you
- Correction: Update or correct inaccurate information
- Deletion: Request deletion of your account and associated data
- Object: Object to certain processing of your data
- Portability: Receive your data in a machine-readable format
- Withdraw Consent: Withdraw consent for data processing at any time
To exercise these rights, contact us at support@stelliesmarketplace.co.za
7. Data Retention
We retain your data as follows:
- Active Accounts: Data retained while account is active
- Deleted Accounts: Most data deleted within 30 days; some records retained for legal compliance (e.g., transaction logs for 1 year)
- Inactive Accounts: Accounts inactive for 2+ years may be automatically deleted
- Messages: Retained for 1 year after conversation ends
- Listings: Deleted listings removed from public view immediately; archived for 90 days for dispute resolution
8. Cookies and Tracking
8.1 Essential Cookies:
We use session cookies to keep you logged in and remember your preferences. These are required for the Service to function.
8.2 Analytics Cookies (Optional):
If you consent, we may use Google Analytics to understand how users interact with the Service. You can opt out through your browser settings or browser extensions.
8.3 Advertising Cookies (Future):
If we enable advertising, we may use cookies to show relevant ads. You can manage preferences through our cookie settings (when implemented).
9. Third-Party Services
We use the following third-party services:
These services have their own privacy policies. We encourage you to review them.
10. Children's Privacy
The Service is intended for users aged 18 and older. We do not knowingly collect information from children under 18. If we discover such information, we will delete it immediately.
11. International Users
This Service is designed for Stellenbosch University community members in South Africa. If you access the Service from outside South Africa, your data may be transferred to and processed in South Africa, where data protection laws may differ from your country.
12. Changes to This Policy
We may update this Privacy Policy to reflect changes in our practices or legal requirements. We will notify you of significant changes via email or platform notification. Continued use of the Service after changes constitutes acceptance of the updated policy.
13. Contact Us
For privacy-related questions, concerns, or to exercise your rights:
By using this Service, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your information as described herein.