Legal
Privacy Policy
This policy explains what information TradeIn collects when you use our platform, why we collect it, and how it is used and protected. We've written it in plain language so it's easy to understand.
1. Information We Collect
We only collect what we need to run the marketplace. Here's what that includes:
Information you give us directly
- Account details — your name, email address, and password when you sign up.
- Listings — vehicle details, photos, videos, price, and location you enter when posting a trade or sale.
- Messages — conversations you have with other users through the platform.
- Profile information — any optional details you add to your profile, such as a profile photo or location.
- Reports — information you submit when reporting a listing or user.
Information collected automatically
- IP address — used for security, rate limiting, and fraud prevention.
- Device and browser information — browser type and operating system, collected to help us understand how the platform is used.
- Usage data — pages visited, searches performed, and listings viewed, stored as anonymized analytics events.
Payment information
We do not store your card number or bank details. All payment processing is handled by Stripe, a trusted third-party service. When you make or receive a payment, you interact directly with Stripe's secure system. TradeIn only stores a Stripe customer ID that links your account to your Stripe profile.
2. How We Use Your Information
- To create and maintain your account.
- To show your listings to other users and allow buyers and sellers to connect.
- To send you messages and notifications related to your account and transactions.
- To process payments and payouts securely through Stripe.
- To verify your email address and keep your account secure.
- To detect and prevent fraud, spam, and abuse.
- To enforce our terms of service and respond to reports.
- To improve the platform through anonymized usage analytics.
We do not sell your personal data, and we do not use it for advertising.
4. How We Store and Protect Your Data
- Passwords are never stored in plain text. They are hashed using bcrypt with a strong salt before being saved.
- Session tokens are hashed with SHA-256 before storage so raw tokens are never kept in the database.
- Communication between your browser and our servers is encrypted over HTTPS in production.
- Access to the database is restricted and never exposed to the public internet.
We retain your account data for as long as your account is active. If you delete your account, your personal data is removed from our systems within 30 days. Some records (such as transaction history) may be retained longer as required by applicable law.
6. Your Rights
You have control over your data:
- Access — you can view your account information at any time from your profile and settings pages.
- Correction — you can update your name, email, and password from your account settings.
- Deletion — you can delete your account and all associated data by contacting us at the address below.
- Opt out of emails — you can manage your notification preferences in your account settings.
If you are in the European Union, you may also have rights under the GDPR including the right to data portability and the right to lodge a complaint with a supervisory authority.
7. Children's Privacy
TradeIn is not intended for children under the age of 13. We do not knowingly collect personal information from anyone under 13. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
8. Changes to This Policy
We may update this policy from time to time. When we do, we'll update the "Last updated" date at the top of this page. If the changes are significant, we'll notify you by email or with a notice when you log in. Continuing to use TradeIn after a change means you accept the updated policy.
9. Contact Us
If you have any questions about this policy or how your data is handled, please reach out to us:
TradeIn Support
Email: privacy@tradein.com