Privacy Policy

Last updated: May 26, 2026

1. Information We Collect

Information You Provide

• Account Information: Name, email address, password, and phone number when you register
• Profile Information: Profile photo, bike/build details, location (city/state)
• Listing Information: Photos, descriptions, pricing for items you list for sale
• Payment Information: Payment details are processed by Stripe; we do not store full credit card numbers
• Shipping Information: Address for delivering purchases
• Communications: Messages with other users, customer support inquiries

Information Collected Automatically

• Usage Data: Pages visited, search queries, items viewed, clicks
• Device Information: Browser type, operating system, IP address, device identifiers
• Cookies: We use cookies for authentication, preferences, and analytics

Information from Third Parties

• OAuth providers (Google, Apple) when you sign in using those services
• Payment processors (Stripe) for transaction verification
• Shipping providers (Shippo) for tracking information

2. How We Use Your Information

We use your information to:

• Provide, operate, and improve the Platform
• Process transactions and facilitate communication between users
• Send transactional emails (order confirmations, shipping updates)
• Send marketing emails (you can opt out at any time)
• Detect, prevent, and address fraud, security issues, and technical issues
• Comply with legal obligations
• Personalize your experience and recommendations

3. How We Share Your Information

With Other Users

When you list or purchase items, limited information (username, profile photo, city/state) is visible to other users. Shipping addresses are shared only between Buyer and Seller for completing transactions.

With Service Providers

We share information with third-party service providers who help operate the Platform:

• Stripe: Payment processing
• Shippo: Shipping labels and tracking
• Supabase: Database and authentication
• Netlify: Hosting infrastructure
• Email providers: Transactional and marketing emails
• Analytics providers: Usage analytics (e.g., Google Analytics)

For Legal Reasons

We may disclose information if required by law, court order, or government request, or to protect the rights, property, or safety of EMXLocker, our users, or the public.

Business Transfers

If EMXLocker is acquired or merged, your information may be transferred to the new entity, subject to this policy.

4. Cookies & Tracking

We use cookies and similar technologies to:

• Keep you signed in
• Remember your preferences
• Analyze how the Platform is used
• Deliver relevant advertising (if applicable)

When you first visit EMXLocker, a consent banner lets you accept or reject non-essential (analytics) cookies. Necessary cookies — those required for sign-in, checkout, security, and to remember your consent choice — are always active and exempt from consent. Analytics cookies are set only after you opt in. You can change or withdraw your choice at any time via the Cookie settings link in the footer of any page, or through your browser settings. Disabling necessary cookies may affect Platform functionality.

5. Data Security

We implement reasonable security measures to protect your information, including:

• Encryption of data in transit (HTTPS/TLS)
• Secure password hashing
• Payment data handled by PCI-compliant processors
• Regular security reviews and updates

No system is 100% secure. We cannot guarantee the absolute security of your information.

6. Data Retention

We retain your information for as long as your account is active or as needed to provide services, comply with legal obligations, resolve disputes, and enforce agreements. You may request deletion of your account at any time.

7. Your Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal data
• Correction: Update inaccurate information
• Deletion: Request deletion of your data (subject to legal requirements)
• Portability: Receive your data in a machine-readable format
• Opt-out: Unsubscribe from marketing emails
• Do Not Sell: California residents can opt out of data sales

To exercise these rights, contact us at privacy@emxlocker.com.

8. California Privacy Rights (CCPA)

California residents have specific rights under the California Consumer Privacy Act, including the right to know what information we collect, the right to delete personal information, and the right to opt out of the sale of personal information. EMXLocker does not sell personal information.

9. European Privacy Rights (GDPR)

If you are in the European Economic Area (EEA), you have rights under the General Data Protection Regulation including access, rectification, erasure, restriction of processing, objection, and data portability. We process personal data based on your consent, contractual necessity, legal obligations, and legitimate interests.

10. Children's Privacy

EMXLocker is not intended for users under 18. We do not knowingly collect information from children. If we learn we have collected information from a child under 18, we will delete it.

11. International Data Transfers

EMXLocker operates in the United States. If you access the Platform from outside the U.S., your information may be transferred to and processed in the U.S. By using the Platform, you consent to this transfer.

12. Third-Party Links

The Platform may contain links to third-party websites (e.g., affiliate retailer links). We are not responsible for the privacy practices of third-party sites. Please review their privacy policies.

13. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes via email or platform notification. Continued use of the Platform after changes indicates acceptance.

14. Contact Us

Questions about this Privacy Policy? Contact our Privacy Team:

Email: privacy@emxlocker.com
Data Protection Officer: dpo@emxlocker.com