Privacy Policy

Last updated: April 20, 2026

LuxeLoot Garage ("we," "our," or "us") is committed to protecting your privacy. This policy explains what information we collect, how we use it, and your choices. By using LuxeLoot Garage you agree to this policy.

1. Information We Collect

We collect information you provide directly:

• Account: email address, display name, and password (stored securely by Supabase Auth).
• Profile: optional profile photo and phone number. Phone is only shared with the other party when both sides agree to a transaction.
• Payment handles: your Venmo username or Cash App $cashtag, if you choose to add them. We store the handle text only — we never access, process, or store your Venmo or Cash App account credentials or financial data.
• Item listings: photos, titles, descriptions, and prices of items you list for sale.
• Messages: text messages between buyers and sellers within the app.
• Ratings and reviews: scores and optional comments after completed transactions.

We collect information automatically:

• Approximate location: when you open the map view, we request your device location to show nearby sales. We do not store your location on our servers or track your movements.
• Sale location: when you create a sale, you provide an address. This address is stored and shown to other users so buyers can find your sale.
• Device information: basic crash and error logs to help us fix bugs (no advertising identifiers).

2. How We Use Your Information

• To operate the app: show nearby sales on the map, facilitate item listings, offers, messages, and purchases.
• To verify identity: display your name and photo to other users during transactions.
• To enable payment: show your Venmo/Cash App handle to a buyer at the point of checkout so they can send payment directly to you. We are not a payment processor.
• To improve the app: analyze usage patterns in aggregate to improve features.
• To communicate: send transactional notifications (offer received, message received).

3. Information We Share

We do not sell your personal information.

• Public sale information: your sale title, address, and item listings are visible to other LuxeLoot Garage users while the sale is active.
• Seller profile: your display name, profile photo, and seller rating are visible to other authenticated users.
• Payment handles: shown to the specific buyer during checkout for a specific item only.
• Phone number: only shared with the counterparty after both parties agree to a transaction, and only if you have added it to your profile.
• Service providers: we use Supabase (database and authentication) and cloud storage for photos.
• Legal requirements: we may disclose information if required by law or to protect user safety.

4. Location Data

LuxeLoot Garage requests "When In Use" location permission to center the map on your position and show nearby sales. Your precise coordinates are never sent to or stored on our servers. Sale addresses you enter when creating a sale are stored and shown to other users — only create sales at locations you are comfortable sharing.

5. Photos

Photos you upload for item listings are stored in our cloud storage and are accessible to anyone with the direct link. Do not upload photos containing sensitive personal information. You can delete your items and their photos at any time.

6. Data Retention

• Active account data is retained while your account exists.
• Ended or cancelled sales are retained for 90 days, then deleted along with their items and photos.
• Messages are retained for 30 days after the related sale ends.
• When you delete your account, all personal data is deleted within 30 days.

7. Your Rights

You have the right to access, correct, or delete your personal data. To exercise these rights or to delete your account, contact us at privacy@hagglio.com.

8. Children

LuxeLoot Garage is not directed to children under 13. We do not knowingly collect personal information from children under 13. Contact us at privacy@hagglio.com to report a concern.

9. Security

We use encrypted connections (HTTPS/TLS), row-level database security, and secure token storage on your device. Use a strong unique password and do not share your account credentials.

10. Changes to This Policy

We may update this policy and will notify you via email or in-app notification for material changes.

11. Contact

For privacy questions or data requests:
privacy@hagglio.com