Privacy Policy

HoldPoint Marketplace ("HoldPoint," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you access or use our platform, including when you sign in via third-party services such as Google or Facebook. By using HoldPoint, you consent to the practices described in this policy.

Information you provide directly:

• Full name, email address, and profile picture
• Date of birth and contact information
• Account credentials and authentication data
• Payment information (processed securely through our payment provider)
• Transaction details, product listings, reports, disputes, and feedback submitted through the platform

Information collected automatically:

• IP address, browser type, and device identifiers
• Log data including pages visited, time spent, and actions taken
• Cookies and similar tracking technologies to maintain session state

Information from third parties (OAuth sign-in):

• When you sign in with Google or Facebook, we receive your name, email address, profile picture, and a unique identifier from those platforms
• We do not receive your social media passwords or access to post on your behalf

We use the information we collect for the following purposes:

• To create and manage your account and verify your identity
• To facilitate transactions, messaging, and platform features between users
• To process payments and manage financial transactions
• To send you transactional emails, account notifications, and platform updates
• To investigate disputes, enforce our Terms and Conditions, and prevent fraud
• To improve and optimize our platform through aggregated analytics
• To comply with applicable legal obligations

We do not sell your personal information. We may share your information in the following limited circumstances:

• With other users: Your public profile (name, profile picture, and transaction history) is visible to counterparties in transactions you participate in.
• Service providers: We engage trusted third-party service providers (e.g., payment processors, hosting providers) who process data on our behalf under strict confidentiality agreements.
• Legal requirements: We may disclose information when required by law, court order, or governmental authority.
• Safety: We may disclose information to protect the rights, property, or safety of HoldPoint, our users, or the public.
• Business transfers: In the event of a merger or acquisition, user information may be transferred as part of business assets.

HoldPoint offers the option to sign in using your Google or Facebook account. When you use this feature:

• We receive only the basic profile information permitted by your OAuth consent (typically: name, email address, and profile picture).
• We receive basic profile information from Google or Facebook to help create or sign in to your HoldPoint account. We do not receive or store your Google or Facebook password.
• You may revoke HoldPoint's access to your Google or Facebook account at any time through your respective account settings on those platforms.
• Revoking access on the third-party platform does not automatically delete your HoldPoint account. To request account deletion, please follow the Data Deletion Instructions.

We retain your personal information for as long as your account is active or as necessary to provide you with our services. We may also retain certain information as required by law or for legitimate business purposes, including:

• Transaction records and communications related to completed or disputed transactions
• Account activity logs for security and audit purposes

Upon account deletion, we will remove or anonymize your personal data within 30 days, except where retention is required by applicable law.

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request correction of inaccurate or incomplete personal data.
• Deletion: Request deletion of your personal data. See our Data Deletion Instructions.
• Portability: Request a structured, machine-readable copy of your data.
• Objection: Object to processing of your personal data for certain purposes.
• Withdrawal of consent: Where processing is based on consent, you may withdraw it at any time.

To exercise these rights, please contact us at the address listed in Section 10.

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These include:

• Encrypted data transmission using HTTPS/TLS
• Secure credential storage using industry-standard hashing
• Access controls limiting data access to authorized personnel only
• Regular security reviews and monitoring

No method of transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

HoldPoint is not directed at individuals under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us immediately so we can take appropriate action, including deletion of that information.

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. When we make material changes, we will notify you by:

• Posting the updated policy on this page with a new effective date
• Sending an email notification to the address associated with your account
• Displaying a prominent notice within the platform

Your continued use of HoldPoint after the effective date constitutes acceptance of the updated policy.

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us: