سياسة الخصوصية

1. Who we are

You Can Do Inc. ([to be confirmed]) operates YouCanDo Marketplace and is responsible for the personal information described here. For privacy questions or requests, write to privacy@marketplaceycd.com.

2. Information we collect

• Account details: your name, email address, password (stored only in hashed form by our sign-in service), language, and your phone number if you add one.
• Identity verification: when you verify, Stripe Identity collects images of your government-issued ID and tells us whether verification succeeded. We keep the result, not the images.
• Profile: your display name, your state, city and ZIP code if you add them, and whether to show your email address or phone number on your public profile.
• Ads: text, photos, price, category, attributes and city.
• Activity: messages and price offers, favorites, saved searches, recently viewed ads, the sellers you follow, and reviews.
• Payments: Stripe processes wallet top-ups and secure checkout. We receive limited details, such as the card brand, the last four digits and the status of payments and refunds. Sellers’ bank and tax details are held by Stripe Connect, not by us.
• Device and usage data: IP address, browser and device type, pages visited, and logs needed to run and secure the service.
• Communications: emails you send us and your support conversations.

3. How we use it

• To run the Marketplace: accounts, ads, search, messages, favorites, saved searches, reviews, the wallet, promotion and secure checkout.
• To review ads and keep the Marketplace safe, including detecting fraud, spam and prohibited items.
• To send the service emails and notifications you choose in Settings, such as new messages or saved-search alerts. We send email through our email provider, Resend, and browser push notifications only if you allow them. We do not send text messages.
• To suggest a category or a description when you post an ad, using an AI service provider.
• To give support, meet our legal, tax and accounting obligations and enforce our Terms of Service.
• To understand and improve the service, using analytics cookies only if you allow them.

We do not use your information for targeted advertising. If we ever send marketing emails, we will ask for your consent first, and every such email will have an unsubscribe link.

4. What other people can see

Your ads, your public profile (display name, city, ratings and reviews) and the reviews you write can be seen by anyone. Your email address and phone number are shown only if you choose to show them in Settings. Do not put personal details you want to keep private in an ad or a photo.

5. How we share it

• With other users, as described above, and with the other person in a conversation or a deal.
• With service providers who process data for us under contract: Stripe (payments, Stripe Connect payouts and Stripe Identity verification), Resend (email delivery), an AI service provider for listing suggestions, and our hosting and storage providers.
• Across our apps: YouCanDo Marketplace, YCD Eats and YouCanDo are all run by You Can Do Inc. and share one account. When you switch between them, we pass along your name, email address, phone number and language, so you do not have to sign up again.
• With authorities or others when the law requires it, or when needed to protect someone’s safety or prevent fraud.
• With a buyer or successor if You Can Do Inc. is involved in a merger, acquisition or sale of assets, subject to this policy.

We do not sell personal information, and we do not share it for cross-context behavioral advertising.

6. Your Privacy Choices / Do Not Sell or Share My Personal Information

We do not sell your personal information or share it for cross-context behavioral advertising, as those terms are defined in the CCPA, and we have not done so in the past 12 months.

• Opt out anyway: email privacy@marketplaceycd.com with the subject “Do Not Sell or Share”. You do not need an account. We will record your request and honor it for the future.
• Global Privacy Control: if your browser sends the Global Privacy Control (GPC) signal, we treat it as a valid request to opt out of the sale and sharing of your personal information, and we keep optional marketing cookies off in that browser. You do not need to do anything else.
• Cookies: choose which optional cookies we may use on our Cookie Preferences page.
• Visibility and notifications: choose in Settings whether your email address and phone number appear on your public profile, and which notifications you receive.
• Sensitive personal information: we use identity verification results, your account login and the contents of your messages only to provide the service and keep it secure, as the law permits, and not to infer anything about you.

7. Your privacy rights

Depending on where you live, including California and the other US states with consumer privacy laws, you may have the right to:

• know what personal information we collect, use and disclose, and access it;
• get a copy of it in a portable format;
• correct inaccurate information;
• delete your information;
• opt out of the sale or sharing of your information, targeted advertising and profiling;
• limit the use of sensitive personal information;
• appeal if we decline your request.

We will not discriminate against you for using these rights.

8. How to make a request

Email privacy@marketplaceycd.com from the address on your account and tell us what you would like, including if you want your account deleted. We verify your identity before we act, usually by confirming that you control that email address, and we may ask for more information for sensitive requests.

We respond within 45 days. If we need more time, we may extend this by another 45 days where the law allows, and we will tell you why.

An authorized agent can make a request for you with your signed permission; we may ask you to confirm your identity with us directly.

If we decline your request, we will explain why. You can appeal by replying with “Appeal” in the subject line. We will answer in writing within the time your state’s law requires and, if you still disagree, tell you how to contact your state attorney general.

We may keep information we need for legal, tax, safety or fraud-prevention reasons, or for an open claim about a deal, as the law allows. If we do, we will tell you what we kept and why.

9. How long we keep it

We keep personal information only as long as we need it for the purposes above. Payment, wallet and tax records are kept as long as the law requires, generally up to 7 years. Messages and ad history are kept while your account is open, and afterwards only as long as they may be needed for a claim or dispute. When your account is deleted, your ads and profile are removed, and we delete or de-identify the rest, except what the law requires us to keep.

10. Security

We protect personal information with encryption in transit, access controls and monitoring. Card numbers are handled by Stripe and never stored on our servers. No system is perfectly secure; if a data breach affects you, we will notify you as the law requires.

11. Children

You must be 18 or older to create an account, and YouCanDo Marketplace is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has given us personal information, contact privacy@marketplaceycd.com and we will delete it.

12. Cookies and similar technologies

We use necessary cookies and browser storage to keep you signed in, secure your session and remember your choices; preference storage to remember things like your language and an unfinished ad; and, only if you allow it, analytics cookies. We do not use advertising cookies. You can change your choices at any time on our Cookie Preferences page.

13. Categories of personal information (California)

In the past 12 months we have collected these categories of personal information, from you, from other users (such as messages and reviews), from Stripe and from your device:

• identifiers (name, email address, phone number, IP address, account ID);
• customer records and commercial information (ads, purchases, wallet top-ups, promotion and payments);
• internet or network activity (searches, usage and log data);
• geolocation data (the state, city and ZIP code you enter);
• audio, electronic and visual information (the photos you upload);
• sensitive personal information (identity verification through Stripe Identity, account login, the contents of your messages).

We disclose each category to our service providers for the business purposes described above. We do not sell or share any of it.

14. Changes to this policy

We will post any changes on this page and update the date at the top. If a change is material, we will tell you by email or in the app before it takes effect.

15. Contact

You Can Do Inc., [to be confirmed]. Email: privacy@marketplaceycd.com.