Privacy Policy

This Privacy Policy explains what information Bazaar (the operators of Bazaar, “we,” “us”) collects, how we use it, and your choices. By using Bazaar, you agree to this policy.

1. Information we collect.

• Account & profile: your @umich.edu email, display name, @handle, and any bio, campus area, and profile photo you add.
• Listings & content: the listings, photos, prices, and descriptions you post, and the messages you send to other users.
• Safety & moderation: reports you submit or that concern you, and records of moderation actions (e.g., blocks, removals).
• Waitlist: if you join the pre-launch waitlist or apply to be a Founding Seller, the name, email, and (for sellers) the details you provide.
• Payments & transactions: when you buy, sell, or subscribe, our payment provider Stripe processes your payment. We receive limited transaction details (such as amount, date, status, and payout records) but do not store your full card or bank account numbers — those go directly to Stripe under its own privacy policy.
• Basic technical data: standard information your browser sends (like IP address) and essential cookies needed to keep you signed in.

2. How we use it.

To operate Bazaar — create your account and verify UMich eligibility, show your listings and profile to other students, enable messaging, run moderation and keep the community safe, send you essential emails (sign-in links and notifications), and communicate with you about the service.

3. How information is shared.

• With other users: your profile, listings, and messages are visible to the people you'd expect (e.g., your public seller profile, and messages to the user you're talking to).
• With service providers (subprocessors) who help us run Bazaar: Supabase (database, authentication, and file storage), Vercel (website hosting and privacy-friendly web analytics), Resend (sending email), and Stripe (processing payments and seller payouts). They process data on our behalf under their own security and privacy terms.
• For legal reasons: if required by law or to protect the safety and rights of the community.
• We do not sell your personal information.

4. Analytics.

We use Vercel Web Analytics to understand aggregate traffic (such as page views and general sources). It is privacy-friendly: it does not use cookies and does not collect information that identifies you personally.

5. Data retention & deletion.

We keep your information while your account is active. You can request to delete your account and associated personal data by emailing support@mycampusbazaar.com; we'll delete it except where we need to keep limited records for legal or safety reasons. Some content (like messages to another user) may remain visible to that user.

6. Security.

We rely on our providers' industry-standard security. No system is perfectly secure, so we can't guarantee absolute security.

7. Students under 18 / minors.

Bazaar is for users 18 and older. We don't knowingly collect data from anyone under 18; if we learn we have, we'll delete it.

8. Changes.

We may update this policy; we'll change the “Last updated” date when we do.

9. Contact.

Privacy questions or deletion requests: support@mycampusbazaar.com.