Privacy Policy
This document is provided in English only. Legal documents are intentionally not translated to preserve their accuracy and legal integrity.
Introduction
Declutra, Inc. ("Declutra," "we," "us," or "our") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our marketplace platform and services.
This policy applies to all users of our website, mobile applications, and related services (collectively, the "Services"). By using our Services, you agree to the collection and use of information as described in this policy.
Information We Collect
We collect information that you provide directly, information collected automatically, and information from third-party sources.
Information You Provide
Account registration data: name, email address, phone number, and password.
Profile information: display name, profile photo, and bio.
Transaction data: payment information, shipping addresses, purchase and sale history.
Communications: messages sent through our platform, customer support inquiries, and feedback.
Seller data: business information, tax identification numbers (for sellers), bank account details for payouts.
User-generated content: listings, photos, descriptions, and reviews.
Information Collected Automatically
Device information: browser type, operating system, device identifiers, and screen resolution.
Usage data: pages visited, features used, search queries, and interaction patterns.
Location data: approximate location based on IP address; precise location only with explicit consent.
Cookies and tracking technologies: session cookies (essential), analytics cookies (with consent), and advertising cookies (with consent).
Log data: IP addresses, access times, referring URLs, and error logs.
Information from Third Parties
Authentication providers: when you sign in via Google or Apple, we receive your name and email.
Payment processors: transaction confirmation and fraud detection signals.
Analytics partners: aggregated usage patterns and demographic insights.
How We Use Your Information
We use collected information for the following purposes:
Providing and maintaining our Services, including processing transactions and facilitating marketplace operations.
Personalizing your experience, including AI-powered pricing suggestions and product recommendations.
Communicating with you about your account, transactions, and service updates.
Ensuring platform safety and security, including fraud detection and abuse prevention.
Improving our Services through analytics, research, and development.
Complying with legal obligations and enforcing our terms of service.
With your consent, sending marketing communications about new features and promotions.
Data Retention
We retain your personal information only as long as necessary to fulfill the purposes described in this policy, unless a longer retention period is required by law.
Account data: retained while your account is active, plus 30 days after deletion request grace period.
Transaction records: retained for 7 years as required by tax and financial regulations.
Communications: retained for 3 years after account closure for dispute resolution.
Analytics data: aggregated and anonymized within 26 months; individual-level data deleted within 13 months.
Legal holds: data subject to legal proceedings may be retained beyond standard periods.
Your Rights
Depending on your jurisdiction, you may have the following rights regarding your personal information:
Right to know: request disclosure of the categories and specific pieces of personal information we have collected.
Right to delete: request deletion of your personal information, subject to certain exceptions.
Right to correct: request correction of inaccurate personal information.
Right to portability: receive your personal information in a structured, machine-readable format.
Right to opt out: opt out of the sale or sharing of personal information for targeted advertising.
Right to non-discrimination: we will not discriminate against you for exercising any of these rights.
To exercise these rights, visit your Privacy & Data settings or contact us at privacy@declutra.com.
California Privacy Rights (CCPA/CPRA)
California residents have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):
Right to limit use of sensitive personal information.
Right to opt out of automated decision-making technology.
Right to know about cross-context behavioral advertising.
We honor the Global Privacy Control (GPC) signal as a valid opt-out request.
You may designate an authorized agent to submit requests on your behalf. Authorized agents must provide proof of authorization.
We will respond to verified consumer requests within 45 days, with a possible 45-day extension if reasonably necessary.
Virginia Consumer Data Protection Act (VCDPA)
Virginia residents have the right to access, correct, delete, and obtain a copy of their personal data. You may also opt out of targeted advertising, sale of personal data, and profiling.
To appeal a denied request, use the appeal mechanism in your Privacy & Data settings or email privacy@declutra.com. We will respond to appeals within 60 days.
Colorado Privacy Act (CPA)
Colorado residents have rights to access, correct, delete, and port their personal data. You may opt out of targeted advertising, sale of personal data, and profiling.
We honor universal opt-out mechanisms including the Global Privacy Control signal.
Connecticut Data Privacy Act (CTDPA)
Connecticut residents have rights similar to those under Virginia and Colorado law, including access, correction, deletion, portability, and opt-out rights.
Children's Privacy (COPPA)
Our Services are not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13.
By creating an account, users represent that they are at least 13 years old. We may implement additional age verification mechanisms in the future.
If we learn that we have collected personal information from a child under 13, we will take steps to delete that information promptly.
Parents or guardians who believe their child has provided us with personal information may contact us at privacy@declutra.com.
Security
We implement appropriate technical and organizational measures to protect your personal information, including:
Encryption of data in transit (TLS 1.3) and at rest (AES-256).
Regular security assessments and penetration testing.
Access controls and audit logging for all data access.
Incident response procedures with 72-hour breach notification commitment.
While we strive to protect your information, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.
Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes:
We will notify you via email and/or a prominent notice on our Services at least 30 days before the changes take effect.
We will update the "Last Updated" date at the top of this policy.
Where required by law, we will obtain your consent to material changes.
Continued use of our Services after changes take effect constitutes acceptance of the revised policy.
Contact Us
If you have questions or concerns about this Privacy Policy or our data practices:
Email: privacy@declutra.com
Address: Declutra, Inc., Privacy Team, 123 Market Street, San Francisco, CA 94105
For data rights requests, visit your Privacy & Data settings page or email privacy@declutra.com.
For California residents: you may also contact the California Attorney General at oag.ca.gov if you believe your rights have been violated.