Privacy Policy
Last updated: August 16, 2026
Plain-English Summary
We collect only what we need to run the marketplace. We never sell your personal data to third parties. Here's exactly what we collect, how we use it, and who processes it on our behalf.
We collect information you provide directly: your name, email address, shipping address, and payment information (processed securely through Stripe — we never see your full card number). We also collect usage data such as pages visited, items viewed, and searches performed. This helps us improve the platform and personalize your experience.
What We Collect
We collect information you provide directly: your name, email address, shipping address, and payment information (processed securely through Stripe — we never see your full card number). We also collect usage data such as pages visited, items viewed, and searches performed. This helps us improve the platform and personalize your experience.
How We Use Your Information
Your information is used to operate the marketplace, process transactions, send order updates, provide customer support, and deliver email communications you've opted into. We may also send you platform updates and promotional emails — you can opt out at any time from your Email Preferences page or the unsubscribe link in any email. We use anonymized, aggregated data to understand how people use Scrappy Exchange so we can make it better.
Service Providers Who Process Your Data
We share your information with the following categories of service providers to operate the platform: • Payment processing — Stripe (payment cards, Connect payouts to sellers) • Shipping & label generation — Shippo (shipping labels, rates, tracking) • Email delivery — SendGrid (order updates, notifications, newsletters) • Platform hosting & infrastructure — our cloud hosting provider • Analytics — tools that help us understand platform usage in aggregate • Fraud prevention & content moderation — internal tools and automated systems Each provider processes data only as needed to deliver their service and under their own privacy and security commitments. We do not share your personal data with data brokers or advertising networks for sale.
Sharing Your Information
We share your information only as needed to operate the platform: • With sellers to fulfill orders (your shipping address) • With payment processors (Stripe) to complete transactions • With shipping carriers (via Shippo) to generate labels and track packages • With email service providers (SendGrid) to deliver transactional and opt-in emails • With law enforcement when legally required We never sell your personal data to advertisers or data brokers.
Young Creator & Guardian Privacy
Young Creators (ages 13–17) have an isolated login experience under guardian oversight. Only approved, safe profile information is publicly visible (display name, approved avatar, approved bio, Young Creator badge, and public listings). Private information — including email, date of birth, exact age, home address, school, precise location, guardian contact information, payment information, and safety/moderation records — is never displayed publicly. See our Scrappy Minors Policy for full details.
Data Retention
We keep your account data as long as your account is active. When you delete your account, we remove your personal information from active systems within 30 days, except where we're required to keep it for legal, tax, fraud prevention, dispute resolution, or security purposes. See our Data Retention & Deletion Policy for full details.
Your Rights
You have the right to access, correct, or delete your personal information at any time. Contact us at partners@scrappy-exchange.com to make a request. If you're in the EU or California, you have additional rights under GDPR and CCPA respectively. ⚖️ LEGAL REVIEW RECOMMENDED for state-specific privacy rights language.
Security
We use industry-standard encryption and security practices to protect your data. However, no system is 100% secure. Please use a strong, unique password and enable two-factor authentication when available.
Related Policies