Privacy policy

Who we are

[company name] ("Amarelle", "we") runs the Amarelle marketplace, where people in the San Francisco Bay Area buy and sell inspected items. This policy explains what we collect, why, who sees it, and the choices you have. It covers the website and the text messages we send.

What we collect

• Your account: your mobile number, the name you choose to show, the area you're in, and your confirmation that you're 18 or older.
• Inspections: the photos and short video frames you capture with the camera in our page, the item's details, and its serial number or IMEI when a check asks for it.
• Listings and deals: your prices and limits, offers, meetup times and spots, release-code checks, and what happened at each handoff.
• Your agent: your messages to your agent and its replies.
• Check-in location: when you check in to a meetup, your phone's location at that moment, to confirm you're at the spot. We don't follow your location at any other time.
• Payments: Stripe handles cards and bank accounts. We receive whether a payment or payout succeeded, never your full card or bank account number. Sellers give Stripe the identity and bank details it needs to pay them.
• Records: no-shows and items that didn't match their report, once confirmed.
• Technical data: a cookie that keeps you signed in (it lasts 30 days, or until you sign out), the IP address used to ask for sign-in codes (to stop abuse), and the standard logs our hosting providers keep.

How we use it

• To run the marketplace: show listings, run offers and deals, hold payments, and pay sellers.
• To grade inspections and run your agent. Our AI provider, Anthropic, processes your inspection frames and agent messages on our behalf to do this.
• To send texts: sign-in codes, updates about your listings and deals, and meetup reminders.
• To keep deals safe: limit sign-in attempts, check serial numbers against stolen-item registries, review disputes, and keep the records described in our terms.
• To answer you when you write to us, and to meet our legal obligations, such as tax reporting for payments.

We don't sell your personal information, and we don't use it for advertising.

Who sees what

• Everyone who visits: your listings, their inspection reports and grades, your display name and area, how many sales you've made, and confirmed records.
• The other person in a deal: your display name, and the meetup's time and spot.
• Never shown to other people: your mobile number, the lowest price you'd accept, an item's serial number or IMEI, and your location.
• Companies that run parts of the service for us, only to provide that service: Vercel (hosting), Supabase (database, file storage and sign-in codes), Stripe (payments and payouts), Twilio (text messages) and Anthropic (AI).
• Authorities, when the law requires it, or when needed to protect people from fraud or harm.

We do not share your mobile number, or your consent to receive text messages, with third parties or affiliates for their marketing or promotional purposes. Text messaging opt-in data and consent are not shared with any third party, except the providers that send the messages for us.

How long we keep it

We keep your account while it's open. Completed deals and payments are kept as long as tax and payment laws require. Inspection photos and frames are kept while the listing is open and through any claim on the deal. Sign-in attempt logs are kept only long enough to count recent attempts.

[How long each kind of data is kept will be set with our lawyer.]

Your choices and rights

• You can ask to see, correct or delete your information by writing to [support email]. We keep what the law requires us to keep, such as records of completed payments.
• You can stop texts at any time by replying STOP. Sign-in codes are texts too, so you can't sign in until you reply START.
• California residents have the right to know what we collect and how we use it, to delete and correct it, and to opt out of its sale or sharing. We don't sell or share personal information as California law defines those terms. We use your precise location only to confirm a meetup check-in. We won't treat you differently for using these rights.

Adults only

Amarelle is for people 18 and older. If we learn an account belongs to someone younger, we close it and delete its information.

Security

We store sign-in sessions and release codes only as one-way hashes, limit who can reach your data, and keep payment details with Stripe. No system is perfectly secure; if a breach affects you, we'll tell you as the law requires.

Changes and contact

We'll post any change here, and text you before a change that affects how we use your information. Questions or requests: [support email].