Privacy Policy

1. Introduction

Welcome to BidDrop (“Company,” “we,” “us,” or “our”). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and website (collectively, the “Services”).

Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the Services.

2. Information We Collect

2.1 Personal Information You Provide

We collect personal information that you voluntarily provide to us when you register for the Services, express an interest in obtaining information about us or our products and services, or otherwise contact us.

• Account Information: Name, email address, username, password, phone number, and profile picture
• Educational Verification: School email address (.edu) for student verification purposes
• Payment Information: Credit card numbers, billing address, and other payment details processed through Stripe
• Transaction Data: Details about purchases, sales, rentals, and deliveries you make through the Services
• Communications: Messages, reviews, and other content you share with other users

2.2 Information Collected Automatically

When you access our Services, we automatically collect certain information:

• Device Information: Device type, operating system, unique device identifiers, and mobile network information
• Location Data: With your permission, we collect precise location data to enable nearby requests and delivery tracking
• Usage Data: App features you use, time spent on the app, and interaction patterns
• Log Data: IP address, browser type, access times, and pages viewed

2.3 Information from Third Parties

We may receive information about you from third parties, including social media platforms (if you sign in via Apple or Google), payment processors (Stripe), and other users who may provide information about you in reviews or reports.

3. How We Use Your Information

We use the information we collect for the following purposes:

• Provide and Maintain Services: To create and manage your account, process transactions, and facilitate deliveries
• Location-Based Services: To show nearby requests, enable real-time delivery tracking, and connect you with campus communities
• Verify Identity: To confirm you are a verified college student using .edu email verification
• Process Payments: To facilitate secure payments through our escrow system via Stripe
• Communications: To send you service-related messages, push notifications, and promotional content (with your consent)
• Safety and Security: To detect and prevent fraud, abuse, and security incidents
• Improve Services: To analyze usage patterns and improve our features and user experience
• Legal Compliance: To comply with legal obligations and respond to lawful requests

4. How We Share Your Information

We may share your information in the following circumstances:

• With Other Users: Your profile information, ratings, and reviews are visible to other users. When you engage in transactions, relevant information is shared between parties.
• Service Providers: We share data with third-party vendors who perform services on our behalf (e.g., Stripe for payments, Supabase for data storage, cloud hosting providers)
• Legal Requirements: We may disclose information when required by law or to protect our rights, privacy, safety, or property
• Business Transfers: In connection with any merger, acquisition, or sale of company assets
• With Your Consent: For any other purpose disclosed to you and with your consent

5. Data Security

We implement appropriate technical and organizational security measures designed to protect your personal information:

• End-to-end encryption for sensitive data transmission
• Secure payment processing through PCI-compliant Stripe integration
• Regular security audits and vulnerability assessments
• Access controls and authentication requirements for our systems
• Secure data storage with Supabase's enterprise-grade infrastructure

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. We will also retain and use your information as necessary to comply with legal obligations, resolve disputes, and enforce our agreements. If you request deletion of your account, we will delete or anonymize your data within 30 days, except where we are required to retain it for legal or legitimate business purposes.

7. Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information, subject to certain exceptions
• Portability: Request a copy of your data in a structured, machine-readable format
• Opt-Out: Opt out of marketing communications at any time
• Location Settings: Control location sharing through your device settings

To exercise these rights, please contact us at privacy@biddrop.com or through the Settings section of the app.

8. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected, used, shared, or sold
• Right to delete personal information held by businesses
• Right to opt-out of sale of personal information (BidDrop does not sell personal information)
• Right to non-discrimination for exercising CCPA rights

9. Children's Privacy

BidDrop is not intended for use by children under 18 years of age. We do not knowingly collect personal information from children under 18. If we learn we have collected personal information from a child under 18, we will delete that information as quickly as possible. If you believe we might have any information from or about a child under 18, please contact us at privacy@biddrop.com.

10. Third-Party Services

Our Services may contain links to third-party websites and services. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party services you access through BidDrop.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the “Last updated” date. For significant changes, we will provide additional notice via email or in-app notification. We encourage you to review this Privacy Policy periodically.

12. Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us: