1. Data we collect
Account data: name, email address, phone number where provided, display name, avatar and account status.
Listing and consignment data: item descriptions, photos, video, serial numbers and any documentation you upload.
Transaction data: orders, amounts, fees, payout status, shipping carrier, tracking numbers, security tag numbers and shipment photos.
Communications: messages between buyers and sellers, consignment messages, dispute descriptions and dispute evidence.
Technical data: log data, device and browser information and the cookies described in the Cookie & Tracking Notice.
Reluxit does not store your full card number. Card data is collected and stored by Stripe.
2. Why we use it
To operate the marketplace: create accounts, publish listings, process orders, arrange payouts and deliver notifications.
To keep the marketplace safe: automated listing screening, message moderation, fraud and abuse prevention, and enforcement of our policies.
To resolve disputes: administrators review order data, shipment evidence and the relevant conversation.
To meet legal, tax and accounting obligations, and to establish or defend legal claims.
3. Legal bases
Where the GDPR or a similar law applies, we rely on performance of a contract (operating your transactions), legitimate interests (safety, fraud prevention, service improvement), legal obligation (tax and record-keeping), and consent where required, for example for optional analytics cookies.
4. Who processes data for us
Stripe, Inc. — payments, Stripe Express payout onboarding for consignors and legacy sellers, payouts and refunds.
Our cloud hosting and database provider — application hosting, database, file storage and authentication.
Our AI screening provider — automated review of listing text and images and message moderation.
Our transactional email provider — sending order, dispute, payout and moderation notifications from our verified sending domain.
These providers act on our instructions. We do not sell personal data.
5. What other users see
Public listing pages show the item and Reluxit as the listing party. They never show a consignor's identity, email address, phone number or payout details.
On legacy marketplace orders, the buyer and seller see each other's display name, the order details and the messages exchanged, and the seller sees the information needed to fulfil the order.
6. Retention
Account records are kept while your account is active. Transaction, payout, refund, dispute and consent records are retained for at least seven years after the transaction to meet tax, accounting, chargeback and legal-claim obligations.
Messages and dispute evidence are retained for the life of the related order record. Consent records are immutable and are retained as proof of acceptance.
7. Your rights
Depending on where you live, you may have rights to access, correct, delete, restrict or port your personal data, to object to certain processing, and to withdraw consent.
Some data cannot be deleted on request where we must retain it for tax, accounting, fraud-prevention or legal-claim purposes.
To make a request, contact support@reluxit.com. We may need to verify your identity before acting.
8. Security and international transfers
We use access controls, row-level database security, encryption in transit and restricted administrator access. No system is perfectly secure.
Our providers may process data in the United States and other countries. Where required, transfers are made under appropriate safeguards.
9. Children
Reluxit is not directed to children under 18 and we do not knowingly collect their personal data.
10. Contact and changes
Questions or complaints: support@reluxit.com. We will publish a new version of this policy if our practices change, with a new version number and effective date.