Privacy Policy

1. Information We Collect

1.1 Information you provide directly

• Account information: When you sign in with Google, we receive your name, email address, and profile picture from Google.
• Profile information: Display name, contact details (e.g. Phone number, if you choose to add one), and any other information you add to your profile.
• Listings and content: Card listings, prices, descriptions, condition, and images you upload when creating marketplace listings.

1.2 Information collected automatically

• Usage data: Pages visited, actions taken, and general interaction data with the Service.
• Device/log data: IP address, browser type, and similar technical information collected automatically by our hosting providers for security and diagnostics.

1.3 Information from third parties

• Google Sign-In: We use Google OAuth solely to authenticate you and create your account. We only request basic profile scopes (name, email, profile picture) — we do not request access to your Gmail, contacts, or other Google data.

2. How We Use Your Information

We use the information we collect to:

• Create and manage your account
• Enable you to create, browse, and manage marketplace listings
• Facilitate communication between buyers and sellers (e.g. via WhatsApp, if you provide a phone number)
• Maintain the security and integrity of the Service
• Improve and develop the Service
• Communicate with you about your account or the Service, when necessary

We do not sell your personal information to third parties, and we do not use your Google account data for advertising purposes.

3. How We Share Your Information

• Other users: Your display name, profile picture, listings, and any contact information you choose to add (e.g. phone number) are visible to other users of the Service, since this is a marketplace intended to connect buyers and sellers.
• Service providers: We use third-party infrastructure providers to operate the Service, including Supabase (database, authentication, and hosting infrastructure), Cloudflare (image hosting and content delivery via R2), Vercel (application hosting), and Google (authentication via OAuth). These providers process data on our behalf and are bound by their own privacy and security practices.
• Legal requirements: We may disclose information if required by law, or to protect the rights, property, or safety of fab-israel, our users, or others.

4. Data Retention

We retain your account and profile information for as long as your account is active. If you delete your account, we will delete or anonymize your personal information within a reasonable period, except where retention is required for legal or security purposes.

5. Your Choices and Rights

• Access and correction: You can view and update most of your profile information directly within the Service.
• Deletion: You may request deletion of your account and associated data by contacting us (see below).
• Google account access: You can revoke fab-israel's access to your Google account at any time via your Google Account permissions page.

6. Data Security

We take reasonable technical and organizational measures to protect your information, including access controls and row-level security policies on our database. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

7. Children's Privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If we become aware that we have collected such information, we will delete it.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and update the "Last updated" date above. Continued use of the Service after changes constitutes acceptance of the updated policy.

9. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, contact us at: fabisraelapp@gmail.com