Privacy Policy

This is a starting template. Have a lawyer review before launch. This page explains the basics of how BagX handles your information, but it is not legal advice.

1. What we collect

We collect account info you give us (name, email, shipping address), the listings, messages, and transaction details you create on BagX, and basic device and browser data. Payment data is handled by Stripe, and we never see or store full card numbers.

Seller identity data (legal name, date of birth, SSN, bank info, and government ID where required) is collected by Stripe directly during Stripe Connect KYC. BagX does not store this verification data.

2. How we use it

We use your information to run the marketplace: signing you in, showing your listings, processing transactions, and supporting you when something goes wrong.

We also use it to prevent fraud, improve the service, and send required messages about your account and orders.

3. Third parties

BagX runs on Sharetribe (platform infrastructure) and uses Stripe for payments and seller identity verification (KYC). Sellers ship directly to buyers using carriers like USPS and UPS.

We also use email and SMS providers for transactional messages and basic analytics tools to understand how the site is used. We do not sell your personal data.

4. Cookies & tracking

We use session cookies to keep you signed in and basic analytics to see how the site performs. You can disable cookies in your browser, but parts of BagX may stop working if you do.

5. Children

BagX is not directed at people under 18, and we do not knowingly collect information from minors. If you believe a minor has created an account, contact us and we will remove it.

6. Data retention

We keep your account data while your account is active and for a reasonable period after you close it, so we can handle disputes, support, and audits. Transaction and payment records may be retained longer where required by law.

7. Your rights

You can ask to access, correct, or delete the personal data we hold about you, subject to records we are required to keep. To make a request, email privacy@bagx.com (PLACEHOLDER) and we will respond in a reasonable time.

8. Security

We use reasonable measures to protect your data, including HTTPS in transit and access controls on the systems we operate. No online service is 100% secure, so we can't guarantee absolute security.

9. State-specific rights

Residents of California, Virginia, Colorado, Connecticut, and Utah may have additional rights under state privacy laws (CCPA, CDPA, CPA, CTDPA, UCPA). To exercise those rights, contact us at the email above.

10. International users

BagX is built for the US market and our data is stored in the United States. If you access the site from outside the US, your information will be transferred to and processed here.

11. Changes

We may update this Privacy Policy from time to time. If we make material changes, we will let you know through the site or by email before they take effect.

12. Contact

Questions about privacy or this policy? Email privacy@bagx.com (PLACEHOLDER) and we will get back to you.