Privacy Policy

What we collect

Information you give us:

• Account details: your name, email address and password. Passwords are stored by our database provider in hashed form. We never see them.
• Shop details, if you sell: shop name, bio, profile and banner images.
• Addresses and phone number, used to ship orders and print labels.
• Listings: titles, descriptions, photos, prices and condition.
• Messages you send to other members on Fig Plug.
• Offers, bids, trades, orders, refunds and reports you make.
• Your email address if you join the drop list.

Payment information

Card and wallet payments (including Apple Pay and PayPal) are handled by Stripe. Your full card number goes straight to Stripe and never touches our servers. We keep only a Stripe customer reference plus the card brand and last four digits so we can show you which card is saved. Stripe's own privacy policy covers what it does with payment details.

Collected automatically

When you're signed in, a cookie keeps you logged in. We don't use advertising cookies or third-party ad trackers. Our hosting provider keeps standard server logs, such as IP address, browser type and the pages requested, for security and troubleshooting. We count how many times a listing is viewed, without recording who viewed it.

How we use it

• Running the marketplace: showing listings, processing payments, creating shipping labels, running auctions and trades, and delivering messages.
• Sending emails about your account and orders, such as order confirmations, shipping updates, refunds and trade outcomes. You can't opt out of these while you have an account, because they're part of the service.
• Sending drop-list emails, only if you signed up. Every one has an unsubscribe link.
• Keeping Fig Plug safe: checking reports, preventing fraud and counterfeits, and enforcing the Terms and Conditions.
• Meeting legal, tax and accounting obligations.

Who we share it with

We don't sell your personal information, and we don't share it for targeted advertising. We share it only as follows:

• Other members, as needed for a sale. A seller sees the buyer's name and shipping address so they can ship the order. Buyers see the seller's shop name. Listings, shop pages and bid amounts are public. Bidder identities aren't shown.
• USPS receives the names and addresses printed on shipping labels.
• Service providers that run parts of Fig Plug for us: Stripe (payments), Supabase (database and login), Vercel (hosting) and our email provider. They may use your information only to provide their service to us.
• Authorities, when the law requires it, or when it's needed to protect someone's safety or to deal with fraud.
• A buyer of the business, if Fig Plug is ever sold or merged. They would be bound by this policy for the information they receive.

How long we keep it

We keep your information while your account is open. When you delete your account, we remove your name, addresses, phone number, shop details and saved cards, take down your listings and delete your login. Records of completed orders, trades and refunds are kept, because the other person needs their record and tax law requires them. We keep those for [7 years], and messages attached to an order are kept with it. Server logs are kept for a short period and then deleted.

Your choices and rights

• See and update your details at any time on your Account page.
• Delete your account from the Account page. If you have an order or auction still in progress, you'll be asked to finish it first.
• Unsubscribe from the drop list using the link in any of those emails.
• Ask us for a copy of the information we hold about you, or ask us to correct or delete it, by emailing [support email]. Depending on where you live, for example California, Virginia or Colorado, you may have further legal rights. We'll honor them and won't treat you differently for using them.

Children

Fig Plug isn't directed at children under 13, and we don't knowingly collect their information. If you believe a child under 13 has given us information, contact us and we'll delete it. The age limits for buying and selling are set out in the Terms and Conditions.

Security

Information is sent over encrypted connections (HTTPS). Access to account data is restricted by database rules, so each member can reach only their own information. No system is perfectly secure. If we learn of a breach that affects you, we'll tell you as the law requires.

Changes to this policy

If we change this policy, we'll update the date at the top. If a change is significant, we'll tell signed-in members by email or on the site before it takes effect.

Contact

Questions or requests about your privacy: [support email], or write to [Legal business name, e.g. Fig Plug LLC], [Mailing address].