Privacy Policy

1. Information we collect

You provide it

• Account information — email address, password credentials handled by our authentication provider, username, display name, location, and any bio, avatar or business details you add.
• Content you submit — Wanted Ads, responses, saved alerts, saved items, messages, reviews, reports and support requests, including attachments.
• Payment information — when you buy a membership or promotion, our payment processor collects and handles your card details directly. We receive only transaction status, amounts, the last four digits or card brand where provided, and related identifiers. We never receive or store your full card number.

Collected automatically

• Usage data — pages viewed, searches run, listings and alerts interacted with, and timestamps.
• Device and log data — IP address, browser and device type, operating system, referring pages, and error diagnostics.
• Approximate location — derived from the location you enter and, coarsely, from your IP address. We do not collect precise GPS location.
• Cookies and local storage — see our Cookie Policy.

From third parties

• Social sign-in — if you sign in with Google, we receive your email address, name and profile image as permitted by your settings with that provider.
• Payment and fraud signals — subscription status and dispute information from our payment processor.
• Geocoding — coordinates returned for the place names you type into location fields.

Sensitive information. We do not ask for government IDs, financial account numbers, health data, precise geolocation or other sensitive categories. Please do not submit them in listings or messages.

2. How we use information and our legal bases

• Provide the Service — publish Wanted Ads, run alert matching, deliver responses and messages, maintain your account. Legal basis: performance of a contract.
• Notifications — send transactional and notification emails you have enabled, such as alert matches, new responses and new messages. Legal basis: contract and, where required, consent.
• Payments — process purchases, renewals and refunds, and keep financial records. Legal basis: contract and legal obligation.
• Safety and integrity — prevent fraud, spam, abuse and violations of our policies; enforce our Terms; protect members and the Service. Legal basis: legitimate interests and legal obligation.
• Support and communication — respond to enquiries and send service announcements. Legal basis: contract and legitimate interests.
• Improve and troubleshoot — diagnose errors, measure feature usage and improve matching quality, using aggregated or de-identified data where practical. Legal basis: legitimate interests.

We do not use your personal information for automated decision-making that produces legal or similarly significant effects. Alert matching is a keyword, category, price and distance filter you configure yourself.

3. What other people can see

Your username, profile details, ratings and the Wanted Ads you publish are public and may be indexed by search engines. Responses and messages are visible to the members in that conversation. Your location is shown at the level of the place you entered, typically a city or region. Do not include contact details, financial information or other sensitive personal information in public listings.

4. How we share information

• Other members — as described in Section 3 and as needed to complete an interaction you initiate.
• Service providers (processors) — hosting and database infrastructure, authentication, email delivery, payment processing, location and geocoding lookup, and error monitoring. They may process personal information only on our instructions and under contract.
• Legal and safety — when required by law, subpoena or court order, or when we reasonably believe disclosure is necessary to investigate fraud or abuse, enforce our Terms, or protect the rights, property or safety of anyone.
• Business transfers — in connection with a merger, financing, acquisition, insolvency or sale of assets, subject to this policy continuing to apply to the transferred information.
• With your direction — when you ask us to share information.

We do not sell your personal information, and we do not share it for cross-context behavioural advertising. We do not run third-party advertising networks on the Service.

5. Security

We use technical and organisational measures appropriate to the risk, including encryption in transit, row-level access controls on our database, scoped access keys, and restricted administrative access. No method of transmission or storage is completely secure and we cannot guarantee absolute security. You are responsible for keeping your password confidential. If we become aware of a breach affecting your personal information, we will notify you and regulators where the law requires it.

6. Retention

• Account and profile data: while your account is active.
• Listings, responses and messages: while your account is active, and afterwards where another member's record of the exchange requires it.
• Transaction and tax records: as long as required by accounting and tax law, typically several years.
• Security, fraud and abuse records: as long as needed for those purposes and to defend legal claims.
• Backups: deleted content persists in encrypted backups for a limited rotation period.

When you delete your account we delete or de-identify your profile and listings except where retention is required above. In practice, we keep transaction and tax records for seven years, security and abuse records for up to two years, and encrypted backups for up to 30 days after deletion.

7. Your choices and rights

• Update your profile, location and business details at any time in Settings.
• Turn alert and notification emails on or off per saved alert, or unsubscribe from an email.
• Delete individual Wanted Ads, alerts and saved items, or your whole account.
• Control cookies through your browser — see our Cookie Policy.

US state privacy rights

Depending on your state (including California, Colorado, Connecticut, Virginia, Utah and others with comparable laws), you may have the right to know or access the personal information we hold, request correction or deletion, obtain a portable copy, opt out of sale, sharing for targeted advertising or profiling (we do none of these), and not be discriminated against for exercising a right. California residents may also request the categories of information collected, sources, purposes and recipients.

GDPR/UK rights

If you are in the EEA, UK or Switzerland, you may have the right to access, rectify, erase, restrict or object to processing, to data portability, to withdraw consent at any time without affecting prior processing, and to lodge a complaint with your supervisory authority.

How to exercise them

Email hello@thebezaar.com from your account email address, or use the in-app controls. We will verify your identity through your account and respond within the period the applicable law requires. An authorised agent may submit a request with proof of authorisation. There is no charge unless a request is manifestly unfounded or excessive.

8. International transfers

We and our service providers operate in the United States and may process information in other countries whose data-protection laws differ from yours. Where required, we rely on appropriate safeguards such as the European Commission's standard contractual clauses with our processors. By using the Service from outside the United States, you understand your information will be processed in the United States.

9. Children

Bezaar is intended for adults 18 and over. We do not knowingly collect personal information from children. If you believe a child has given us information, email hello@thebezaar.com and we will delete it and close the account.

10. Do Not Track

We do not currently respond to browser "Do Not Track" signals because there is no common standard for them. We do not run cross-site advertising trackers.

11. Changes to this policy

We may update this policy. Material changes will be announced in the app or by email and reflected in the "last updated" date above. Continued use after the effective date means you accept the updated policy.

12. Contact

Privacy questions or requests: hello@thebezaar.com. Bezaar operates from Texas, USA, and this address is monitored for all privacy requests and appeals. If we deny a request, you may appeal by replying to our decision, and we will respond within the period required by the law that applies to you.