Privacy notice

1. Who we are

BuySellTrade USA LLC operates BuySellTrade. Contact contact@buyselltrade.co or use Privacy and data requests in your account. Our mailing address is 11111 Biscayne Blvd, Miami, FL 33181.

2. Information we handle

We handle the email and account information you provide; profile information and photographs; listings, uploaded photographs and videos; selected area; messages and attachments; comments, community posts and replies, and reviews; and reports, appeals and support requests. We also maintain access, verification, security, moderation and service records. When an effective policy requires agreement, we record your account's agreement to the identified policy version and the time it occurred.

Our hosting and service providers receive connection information when your device communicates with them. The service can use an approximate area supplied by the hosting platform to suggest a location. You can choose another area. This is not an independent verification of where you live. A photograph, video or message may reveal additional information you include in it.

3. Why we use it

We use information to provide access and recovery, display profiles and listings, support communication, review submissions, respond to reports and requests, enforce service restrictions, prevent abuse, troubleshoot problems and maintain recovery copies. Agreement records help establish which published terms an account accepted. We do not treat agreeing to Terms as permission for unrelated marketing.

Saved searches and notifications

You can save search filters and choose in-app alerts or daily saved-search emails. We use your saved filters to find new matching listings. When you enable email alerts, we send your verified email address, saved-search names and links, and an unsubscribe link to our email delivery provider. Delivery and failure records help us operate this service. You can pause alerts, change individual saved searches, or turn off saved-search emails through the unsubscribe link. Turning off these optional emails does not turn off sign-in and essential account communications.

4. Who can see it

Published listings, community posts and replies, and displayed profile information, comments and reviews are available to people permitted to view those features. Private drafts and submissions have restricted access. Messages and attachments are available to conversation participants; authorized staff can access relevant evidence through the reporting and support processes. Support and report records are not public case files.

Photos and videos attached to community posts and replies follow the visibility and access restrictions of that content. We process uploads to prepare them for display and may resize or convert them. Uploading an attachment does not by itself publish it.

People who receive or view content may keep their own copies. Avoid including passwords, verification codes, financial credentials or unnecessary private information in content or requests.

5. Providers and other disclosures

We use Vercel for hosting; Supabase for authentication, database and media storage; Google Workspace for business email; Resend for delivery of authentication emails and optional saved-search notifications; GitHub Actions to execute operational workflows, including backups; Backblaze B2 for encrypted supplementary backups; and Healthchecks for job monitoring. These providers process information needed for their functions. The backup runner handles database and media data before encryption; encryption of the stored backup does not mean the runner never accesses the underlying information. Monitor requests are designed to report job status without customer message bodies or application logs.

We may disclose information when required by applicable legal process, to address fraud or threats to safety, or to establish or defend legal claims, subject to applicable law. We may share information with another party when you direct us to do so. Any future business transfer involving personal information would remain subject to applicable obligations and appropriate notice.

Provider processing may occur in the United States and other countries where the providers operate. We do not promise that all processing is confined to one country. Hosting locations do not necessarily describe every support, delivery or security processing location.

6. Cookies and browser storage

The service uses cookies for sign-in, verification and protected account or staff actions. It also stores items such as local listing and community-post recovery, message drafts, selected area and navigation preferences in browser storage. Blocking essential storage can prevent features from working. Clearing browser storage can remove local work and preferences; it does not remove server-side records. Use care on shared devices.

Service providers also process connection and operational information to deliver and protect the service. This notice does not describe essential storage as optional advertising consent.

Optional audience and performance measurement

When enabled for the public service, we use Vercel Web Analytics to understand broad public-page use, referral and campaign groups, posting starts, successful listing submissions, message sends and shares, searches with no results, and page-performance ratings. We use these measurements to improve discovery and participation. A message-send event does not include its message or attachment content.

Our configuration groups public page paths, excludes private page views, and omits account identifiers, email addresses, search text and listing identifiers from custom event properties. Vercel can also process request information and receive event times, referrers, approximate location, browser, operating system and device information. Vercel describes its visitor measurement as using a request-derived hash with a visitor session discarded after 24 hours; that is not a promise that all analytics records or hosting logs expire after 24 hours.

You can turn off optional measurement for this browser at https://www.buyselltrade.co/analytics-preferences. We also disable it when the browser sends Do Not Track or Global Privacy Control. The preference is stored in this browser; clearing storage or using another browser may require setting it again. Essential service and security processing continues. We do not currently enable advertising pixels or use this measurement to create retargeting audiences.

Listing performance

We count a listing view after it is visible for at least two seconds. A random identifier stored for the browser tab is used to create a daily, listing-specific hash, so repeat views in that tab on the same UTC day count once. Only that hash reaches the view-deduplication records. Previous-day deduplication records are removed when another view is recorded; they do not all expire automatically at midnight. Sellers see aggregate view and conversation counts, not viewer identities. Signed-in owners’ views are excluded. The browser analytics preference and supported privacy signals also apply to listing-view measurement.

7. Retention and account closure

We retain information for service operation, shared communications, security, moderation, request handling and recovery. Retention depends on the information's purpose and any applicable preservation requirement. We review deletion requests rather than treating account expiry as erasure.

A confirmed account-deletion request currently hides the account and listings and revokes sessions. Reviewed profile and media cleanup can be partial. Shared conversations, authentication records, submissions, reports and audit evidence may remain. We will distinguish actions completed from outstanding portions of your request. This process does not currently erase every record automatically.

Recovery copies are separate from the live service and can retain information after it is removed there. Our supplementary cloud backups and independent recovery archive currently have no automatic expiry. Deletion from the live service therefore does not establish deletion from those copies. Contact us about a deletion request so we can assess the copies and records involved, any required preservation, and the actions still needed. We do not promise a fixed deletion deadline for every copy.

Completed saved-search email queue records are eligible for cleanup after 30 days when the delivery worker runs. This describes our application queue, not a promise that all provider logs, backups or account records expire after 30 days.

8. Requests and choices

Use Privacy and data requests in your account or contact us by email to ask for access, correction or deletion. Available account tools include an account download and requests for available media. We may need to verify control of the account and clarify the request without asking you to send a password or verification code. We may limit disclosure to protect other people or information that must be retained under applicable law, and explain applicable limitations.

Rights, exceptions and response periods can depend on applicable law. Nothing here limits rights you have under that law. You may email us to challenge a request decision or ask how an authorized representative can submit a request. We may verify that representative’s authority and your identity as permitted by law.

9. Age limits

The service is intended for adults aged 18 or older. Email verification and age confirmation do not independently verify age. If you believe a child has provided personal information, contact us so we can investigate and take appropriate action.

10. Changes

We will identify the effective version of this notice and make published versions available through the policy pages. Material changes will receive appropriate notice before they take effect where required. A Privacy acknowledgment is separate from Terms agreement and is not a blanket consent for new data uses.

Automated safety screening

We use Amazon Web Services Rekognition in the Ohio region to assess uploaded listing and community photos and videos for visual moderation labels. This includes attachments to community replies. We send the media needed for the assessment; the screening request does not intentionally include your email address or message text. Text and same-account posting-pattern checks run within our service.

Automated checks can miss issues or flag legitimate content. We use text, posting-pattern and media assessments to help decide whether eligible listings and community discussions can publish automatically or need staff review. Incomplete and flagged assessments remain in review. First posts, temporary accounts, other community sections and a review sample remain under manual review. No detected labels is not a safety guarantee. Reports and appeals remain available.

Temporary video copies in our private AWS storage are deleted after successful retrieval of results, with a one-day object-expiry policy as fallback. Expiry does not guarantee deletion at an exact time. This temporary-copy policy does not change retention of your original uploads, moderation records, backups or the AWS operational records.