Privacy Policy
Last updated: September 2026. Summary policy for the launch version — have counsel review before relying on it.
What we collect
- Account data: email, name, and your password (stored only as a salted hash) or Google sign-in identity.
- Listing data: what sellers publish, plus contact details and the exact address, which stay private until a buyer accepts the NDA.
- Inquiries: messages between buyers and sellers, and the timestamp and IP address of each NDA acceptance.
- Payments: handled by Stripe. We store the Stripe session ID and amount, never your card number.
- Valuation calculator: the email and figures you enter to get the full report.
How we use it
To run the marketplace, process payments, deliver inquiry and alert emails, prevent fraud, and improve the service. We don't sell personal data.
Who processes it
Stripe (payments), Resend (transactional email), and our hosting provider. The database and uploaded photos are stored on our own server.
Your choices
You can delete saved searches at any time, and ask us to delete your account and personal data by emailing hello@handthekeys.com.