Privacy Policy

1. What We Collect

• Account info: your .edu email address and password (hashed).
• Profile info: name and university, if you choose to provide them.
• Listing content: text, photos, and availability you post.
• Messages: booking requests and in-app messages between users.

2. How We Use It

• To operate the marketplace and connect seekers with listers.
• To send transactional emails (booking requests, acceptance notifications).
• To enforce our Terms & Conditions and respond to reports.

3. What We Share

We do not sell your data. When a booking request is accepted, the seeker and lister each receive the other's email address to coordinate directly. We share data with service providers (Supabase for storage, Resend for email) only as needed to operate the platform.

4. Data Retention

Your data is retained while your account is active. You may request deletion by contacting us. Listings are soft-deleted and may be retained for audit purposes.

5. Security

We use Supabase with row-level security to protect your data. Passwords are hashed. We use HTTPS for all communications. No security measure is perfect — use a strong, unique password.