What we store. From the seller: one photo and one line, if they added them, how they want to be paid, and the name and email they give us. From a buyer: your first name, your email, your offer amount, the language of your page, and a coarse city taken from the network (never your IP address). Cookies: one per link, oo_b_<code>, so this page can show you your own offer, and oo_lang if you pick a language. No accounts, no ads, no trackers, nothing sold or shared. For each buyer email we also keep a short record under a one-way code of it (never the email itself): the month of its first offer, whether it was confirmed, and how many purchases were completed, missed or reported. If you ask to hear when a sold item opens again, we keep that email until it does, or until the listing’s data is deleted.
From the seller’s app. If a seller turns on notifications, we keep the phone’s push notification token so we can tell them about new offers and payments; it is dropped when it stops working or when the seller deletes their data. We also keep the app’s language and country, which decide the currency and the language of emails. “Occasional news” is a separate switch, off unless the seller turns it on. When a seller buys Soldu Plus, the app sends Apple’s signed purchase receipt (iPhone) or the Google Play purchase token (Android) to our server to confirm the subscription; we keep the date it runs until and Apple’s transaction number or Google’s order number — nothing about the card, the Apple Account or the Google account. If a buyer turns on browser notifications for a link, we keep that browser’s notification address until the listing’s data is deleted.
Who sees it. Before a yes, the seller sees the three highest offers — amounts only, never a name or email — with each buyer’s record on Soldu: purchases completed, times they didn’t pay or show up, reports, whether the email was confirmed, and the month they started. Other buyers see the highest amount, never who made it. After a yes, the winning buyer sees how the seller wants to be paid; once the seller confirms the money arrived, each gets the other’s name and email. Nobody else sees anything. When the seller takes cash (or has set no pay method), the names and emails come with the yes instead, because the money changes hands in person. After a yes, the other offers stay on a backup list; if that sale doesn’t go through, the seller may pick one of them.
How long. Links have no end date: while one is open, the offers on it are kept. Buyer names, emails and the photo are deleted 7 days after the listing ends — sold or taken down. What’s left of the listing record, with no personal data in it, is deleted 30 days after it ends. While a sale is in progress nothing is deleted, so the seller can still come back to a backup; a sale ends when the seller confirms it, or 14 days after the yes if it never is. The short buyer record above is kept so later sellers can see it; it holds no name and no email.
Emails. To a buyer, only about their own offer: a receipt with a link to confirm the address, the first time that email makes an offer (once); when someone offers more (at most one an hour per link); when the seller says yes, with how to pay, or passes; when you’re on the backup list, and when that list ends; when an earlier sale fell through and the seller chose you; a reminder to pay if the seller asks for one; when the payment is confirmed, with the seller’s name and email; when a link opens again and your offer still stands; and when the link is taken down. If you asked to hear when a sold item opens again, one email when it does. To a seller: an email to confirm their address (again if they change it or ask for a new one); a note if a buyer says an item didn’t arrive; and, if we take a link down, an email saying why. Sellers hear about new offers by push notification, not email. Anyone who writes to us from Help gets our reply, and a confirmation when we delete their data. That’s all.
“Tell me when something new is up near me.” Only if you tick that box, we keep your email and coarse city on a list until you unsubscribe. We haven’t started sending these notices yet. When we do, we may send an occasional “new nearby listings” notice, and every one will have a one-click unsubscribe link. To leave the list before then, write to us from the Help page. The list is used for nothing else and is never shared.
Reports and paused links. Every page has a report link. A report holds the reason, the note if one was written, and a one-way code that tells us whether two reports came from different people — never an IP address. A link is paused when its title matches a word on our not-allowed list, or when three different people report it. Reports and paused links are reviewed twice a day. That review may be done by an automated assistant acting for us and following our rules; it sees the title, the photo and the reports — never buyers’ names or emails. It can open the link again or take it down. If a link is taken down, we email the seller why, when we have their email, and a reply to that email reaches a person.
Not a party to the sale. We run the page. The sale and the payment are between buyer and seller.
Your rights. Sellers: in the app, go to Settings > Delete my data. Your open links are taken down (buyers with an offer get the usual email), and your name, email, payment details, push notification token, photos, links and the offers on them are erased from our servers right away; the app’s key stops working. Deletion waits, and the app says so, only while a sale is in progress — you said yes in the last 14 days and haven’t marked it as received or sold; finish or cancel it and you can delete right away — or while your account is under review (new links are paused for you, or a report about one of your sales is still open). Once a sale is finished, nothing about it holds deletion back. Deleting your data does not cancel Soldu Plus; cancel that in your Apple Account settings or in Google Play. Buyers: on the Help page, pick “Delete my data” and send it from the email you used. A person removes your name and email from every offer you made, takes you off the nearby-notices list and any “tell me if it opens again” list, and confirms by email. To see or correct what we hold, write to us from the Help page or reply to any email we sent you.
Nova Page Publishing Ltd., Vancouver, BC, Canada.