Privacy Policy

This Privacy Policy describes how Delay (“we,” “us,” or “our”) collects, uses, and shares your personal information when you use our marketplace platform, including our website and mobile applications (collectively, the “Service”).

By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy. Please also review our Terms of Service, which govern your use of the Service.

1. Information We Collect

1.1 Information You Provide

We collect information you provide directly to us, including:

Account Information

• Sign-In Data: When you sign in with Google or Apple, we receive your email address, name, and profile picture (if available) from your account.
• Profile Information: You may choose to provide additional information such as a headline, location (city/region), bio, and social media links.
• Meetup Preferences: Your preferences for how you like to conduct in-person transactions.

Listing Information

• Product Details: Title, description, category, condition, pricing, and other details about items you list.
• Photos: Images you upload of your items.
• Location: The geographic location where your item is available for pickup. This may include coordinates derived from addresses you provide.

Communications

• Messages: Content of messages you send to and receive from other users through our encrypted messaging system.
• Reports: Information you provide when reporting other users or listings.
• Feature Requests: Suggestions and feedback you submit.

Transaction Information

• Offers: Details of offers you make or receive on listings.
• Payment Information: When you pay listing fees, our payment processor (Stripe) collects your payment card information. We do not store your full card details.

1.2 Information Collected Automatically

When you use the Service, we automatically collect certain information:

Device and Usage Information

• Device Information: Device type, operating system, browser type, and unique device identifiers.
• Log Data: IP address, access times, pages viewed, and referring URLs.
• Session Information: We store session data including your IP address and user agent to maintain your login and for security purposes.

Behavioral Information

• Listing Views: We track which listings you view to provide sellers with analytics about their listings.
• Watchlist Activity: Listings you add to your watchlist.
• Saved Searches: Search criteria you save for notifications.

1.3 Location Information

With your consent, we may collect your precise geographic location using your device's GPS or other location services to show you listings near you. You can disable location access in your device settings at any time.

2. How We Use Your Information

We use the information we collect to:

2.1 Provide and Operate the Service

• Create and manage your account
• Enable you to create, manage, and view listings
• Facilitate communication between buyers and sellers
• Process listing fee payments
• Provide location-based search and discovery
• Deliver seller analytics (view counts, watchers, offers)

2.2 Improve and Personalize the Service

• Analyze usage patterns to improve features
• Provide personalized recommendations based on your saved searches
• Develop new features and services

2.3 Communicate with You

• Send transactional emails (account verification, payment confirmations)
• Notify you about messages, offers, and activity on your listings
• Send saved search alerts when matching listings are found
• Respond to your inquiries and support requests

2.4 Ensure Safety and Security

• Detect and prevent fraud, abuse, and security incidents
• Enforce our Terms of Service
• Investigate reports of violations
• Protect the rights and safety of our users

2.5 AI-Powered Features

When you upload photos to create a listing, we may use artificial intelligence services to analyze the images and suggest product details. This processing helps identify the manufacturer, model, category, condition, and estimated pricing of your items.

3. Legal Basis for Processing (GDPR)

If you are in the European Economic Area (EEA), UK, or Switzerland, we process your personal data based on the following legal grounds:

4. How We Share Your Information

4.1 With Other Users

Your profile information (name, avatar, headline, location, bio) and listing information are visible to other users of the Service. When you communicate with other users, they can see your messages and profile information.

4.2 With Service Providers

We share your information with third-party service providers who help us operate the Service:

4.3 For Legal Reasons

We may disclose your information if required by law, legal process, or government request, or when we believe disclosure is necessary to:

• Comply with applicable laws or regulations
• Enforce our Terms of Service
• Protect our rights, property, or safety, or that of our users or others
• Detect, prevent, or address fraud, security, or technical issues

4.4 Business Transfers

If Delay is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any change in ownership or use of your personal information.

5. Data Retention

We retain your information for as long as necessary to provide the Service and fulfill the purposes described in this Privacy Policy:

• Account Data: Retained until you delete your account, plus a reasonable period for backup and legal compliance.
• Listing Data: Retained while your listing is active and for a period after deletion for analytics and dispute resolution.
• Messages: Retained until the conversation thread is deleted or your account is deleted.
• Session Data: IP addresses and session information are retained for security purposes and automatically expire.
• Behavioral Data: Listing views and analytics data may be retained in aggregated form.

6. Your Rights and Choices

6.1 Account Settings

You can manage your information through your account settings:

• Update your profile information
• Manage notification preferences (email, push notifications)
• View and delete your saved searches
• Manage your watchlist

6.2 Your Privacy Rights (GDPR)

If you are in the EEA, UK, or Switzerland, you have the following rights:

• Access: Request a copy of your personal data.
• Rectification: Request correction of inaccurate data.
• Erasure: Request deletion of your personal data (“right to be forgotten”).
• Data Portability: Request your data in a machine-readable format.
• Restriction: Request that we limit how we use your data.
• Objection: Object to processing based on legitimate interests.
• Withdraw Consent: Withdraw consent at any time for consent-based processing.

To exercise these rights, please contact us at [email protected]. We will respond to your request within 30 days.

6.3 Account Deletion

You can request deletion of your account and associated data by contacting us or using the account deletion feature in your settings. Upon deletion, we will remove or anonymize your personal data, except where retention is required for legal or legitimate business purposes.

6.4 Notification Preferences

You can control which notifications you receive through your account settings. You may opt out of:

• Message notifications
• Watchlist updates
• Saved search alerts (product matches)

Note that you cannot opt out of essential transactional communications related to your account and payments.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal data:

• Encryption in Transit: All data transmitted between your device and our servers is encrypted using TLS/HTTPS.
• Message Encryption: Messages between users are encrypted at rest using AES-256-GCM encryption with keys managed by HashiCorp Vault.
• Token Security: Authentication tokens are hashed and securely stored.
• Access Controls: We limit access to personal data to employees and service providers who need it to perform their duties.
• Security Monitoring: We monitor for and respond to security incidents.

While we strive to protect your information, no method of transmission or storage is 100% secure. If you have reason to believe your account has been compromised, please contact us immediately.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States, where our service providers are located. These countries may have different data protection laws than your country.

When we transfer data from the EEA, UK, or Switzerland to other countries, we use appropriate safeguards such as Standard Contractual Clauses approved by the European Commission or rely on service providers' certifications under applicable data transfer frameworks.

9. Cookies and Similar Technologies

We use limited cookies and similar technologies to operate the Service:

• Authentication: We use HTTP-only cookies to maintain your login session securely.
• Local Storage: We may store preferences and session data in your browser's local storage.

We do not use third-party tracking cookies or advertising networks. Delay does not track your browsing activity across other websites.

10. Children's Privacy

The Service is not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us and we will delete that information.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by updating the “Last updated” date at the top of this policy and, where appropriate, by sending you an email or displaying a notice in the Service.

We encourage you to review this Privacy Policy periodically. Your continued use of the Service after any changes constitutes your acceptance of the updated Privacy Policy.

12. Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us:

• Email: [email protected]

For EEA, UK, and Swiss Residents

If you are not satisfied with our response to a privacy concern, you have the right to lodge a complaint with your local data protection authority.