Privacy Policy

1. Overview

Swapstack (“we”, “us”, or “our”) is committed to protecting your personal information in accordance with British Columbia’s Personal Information Protection Act (PIPA) and, where applicable, the federal Personal Information Protection and Electronic Documents Act (PIPEDA). This Privacy Policy explains what information we collect, how we use it, and your rights with respect to it.

By using the Platform, you consent to the collection, use, and disclosure of your personal information as described in this policy.

2. Information We Collect

We collect the following categories of information:

• Account information. When you register, we collect your name, email address, and profile details (location, bio, avatar) provided through our authentication provider.
• Listing content. All information you provide in listings, including titles, descriptions, photos, prices, location, and category attributes.
• Messages. Communications between users conducted through the Platform’s messaging system.
• Payment information. Payment transactions are processed by Stripe, Inc. We do not store full payment card details. We receive and store transaction records, subscription status, and Stripe customer identifiers.
• Usage data. Information about how you use the Platform, including pages visited, search queries, listing views, features used, IP address, browser type, device identifiers, and referring URLs.
• API usage. If you use our API, we collect request logs, API key usage, and associated metadata.

3. How We Use Your Information

We use the information we collect to:

• Operate, maintain, and improve the Platform.
• Create and manage your account.
• Enable transactions and communications between users.
• Process payments and manage subscriptions.
• Send transactional emails (account notices, listing activity, saved search alerts).
• Detect, investigate, and prevent fraud, abuse, and violations of our Terms of Service.
• Analyze usage patterns to improve features and user experience.
• Develop new products, services, and features, including the use of listing content, user-generated data, and aggregated or de-identified datasets for research, analytics, and machine learning purposes.
• Comply with legal obligations.

We may use and exploit User Content and aggregated or de-identified data derived from Platform activity for any lawful business purpose, including commercial purposes, without restriction and without further notice to you.

4. Sharing of Information

We do not sell your personal information to third parties. We may share your information as follows:

• With other users. Listing content, your display name, profile information, and contact details you choose to disclose are visible to other users as part of normal Platform operation.
• Service providers. We share information with trusted third-party vendors who assist us in operating the Platform, including Clerk, Inc. (authentication), Stripe, Inc. (payments), Cloudflare, Inc. (file storage and CDN), and Resend, Inc. (email delivery). These providers process data on our behalf under confidentiality obligations.
• Legal compliance. We may disclose information if required by law, court order, or governmental authority, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
• Business transfers. In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity, subject to the same privacy protections.

5. Cookies and Tracking

We and our service providers use cookies, local storage, and similar technologies to maintain user sessions, remember preferences, and analyze usage. Authentication cookies are strictly necessary for Platform operation. You may disable cookies through your browser settings, but doing so may impair Platform functionality.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide services, comply with legal obligations, resolve disputes, and enforce our agreements. Listing content remains in our systems after deletion and may be retained in backups and logs for a reasonable period. You may request deletion of your personal information by contacting us at legal@swapstack.net, subject to our retention obligations under applicable law.

7. Security

We implement industry-standard technical and organizational measures to protect your personal information against unauthorized access, disclosure, alteration, or destruction, including encrypted data transmission (TLS), hashed credential storage, access controls, and secure cloud infrastructure. No method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

8. Your Rights

Subject to applicable law, you have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate or incomplete information.
• Request deletion of your personal information (subject to legal retention requirements).
• Withdraw consent to certain processing, where consent is the basis for processing.
• Lodge a complaint with the Office of the Information and Privacy Commissioner for British Columbia or the Office of the Privacy Commissioner of Canada.

To exercise these rights, contact us at legal@swapstack.net. We will respond within 30 days.

9. International Data Transfers

Our service providers may process and store your information outside of Canada, including in the United States. By using the Platform, you acknowledge that your information may be subject to the laws of those jurisdictions, which may differ from Canadian privacy law.

10. Children’s Privacy

The Platform is intended for users 18 years of age and older. We do not knowingly collect personal information from anyone under 18. If we become aware that we have collected personal information from a minor, we will delete it promptly. If you believe we have inadvertently collected such information, please contact us at legal@swapstack.net.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the effective date and, where required by law, notify you by email or through the Platform. Your continued use of the Platform after any changes constitutes acceptance of the revised policy.

12. Contact

Questions, concerns, or requests regarding this Privacy Policy should be directed to our Privacy Officer at legal@swapstack.net.