Privacy Policy

We collect only what the marketplace needs to work.

• Account details: your email address, a display name, and a password (stored only as a salted hash by our authentication provider; we never see it).
• Profile details you choose to add: city, state or region, country, a short bio, a profile picture, and the categories you trade in.
• Listings: the titles, descriptions, photos, categories, condition, what you want in exchange, and any value estimate you enter.
• Trading activity: proposals you send and receive, Handshakes (agreed trades), whether each side has confirmed and completed, and reviews.
• Messages: the messages you exchange with other members, and whether each was sent by an agent acting for a member.
• Payment records: for a Handshake fee or membership, the amount, date, and a reference from the payment processor. Card payments are handled by Stripe; we never receive or store your card number. If you pay in USDC, we store the public wallet address you link and the public transaction reference.
• Agent connections: for each agent key or connected app, its name, the permissions you granted, and when it was last used. Keys and tokens are stored only as hashes.
• Technical data: our hosting provider keeps standard server logs (IP address, time, page requested) for security and troubleshooting. We use a sign-in cookie to keep you logged in. We do not use advertising cookies or third-party analytics trackers.

We do not ask for government identifiers, health information, or precise location. Please don't put sensitive personal information in listings or messages.

You can connect an assistant (for example ChatGPT or Claude) or your own agent to your TraydStar account. You choose the permissions on a consent screen, and you can disconnect it at any time in Settings → Your agents.

• When the assistant calls TraydStar, we receive the request it sends (for example a search phrase, a listing to create, or a message to send) and the identity of the connected account. We do not receive your conversation with the assistant.
• We return only what the request needs: listings, and — once you have connected your account — your display name, your proposals, Handshakes, conversations, and messages. This information is then visible to the assistant you connected, and its provider handles it under its own privacy policy.
• Searching and viewing public listings works without connecting an account.
• We don't use requests made through an assistant to build advertising profiles.

• To run the marketplace: show listings, deliver proposals and messages, record Handshakes and reviews.
• To send you service emails about your account and trades (new proposal, new message, Handshake status, password reset).
• To process Handshake fees and memberships and keep records of them.
• To estimate fair trade values. We keep a record of what was traded for what, so value estimates improve over time.
• To keep the service safe: preventing spam, fraud, and abuse, and enforcing our terms.

We do not sell your personal data, and we do not use it for targeted advertising.

Listings are public. Your display name, city and region (if you add them), rating, number of completed trades, and reviews are visible to anyone. Your email address is not shown to other members. Messages are visible only to you and the person you are messaging.

We share data only with the providers that operate the service for us, and only as needed for that purpose:

• Supabase — database, sign-in, and photo storage.
• Vercel — website hosting and server logs.
• Stripe — card payments and membership billing.
• Resend — sending service emails.
• HeyCatch — product analytics: which pages are visited and which buttons are used, tied to a random visitor id, so we can see where the site is confusing. No card details or message content.
• Alchemy — reading the public Base blockchain to confirm a USDC payment (only public transaction data is involved).
• The assistant you connect (for example OpenAI for ChatGPT, or Anthropic for Claude) — receives the results of requests it makes on your behalf, as described above.

We may also disclose information if the law requires it, or to protect the rights and safety of our members and the service. If TraydStar is ever sold or merged, account data would transfer to the new operator under this policy.

• Account, profile, listings, and messages: until you delete them or close your account.
• Payment and trade records: for as long as needed for tax, accounting, and dispute purposes, typically seven years.
• Trade-value records (what was exchanged for what): kept after an account is closed, with the link to your account removed, because they are used to estimate fair values for everyone.
• Server logs: kept by our hosting provider for a short period, typically up to 30 days.
• Agent keys and app connections: until you revoke them. Access tokens for connected apps expire after one hour and are renewed only while the connection stays active.

• Edit your profile and listings at any time in Settings and your dashboard.
• Disconnect any assistant or revoke any agent key in Settings → Your agents.
• Download a copy of your data or delete your account yourself in Settings → Account, or ask us by emailing support@traydstar.com; we respond within 30 days.
• Depending on where you live, you may have additional rights under laws such as the GDPR or CCPA, including the right to object to certain processing and to complain to a data protection authority. We honor these requests whatever your location.

Data is encrypted in transit. Access to the database is restricted by row-level rules so members can only read their own private records, and payments are verified on our servers rather than trusted from a browser. No system is perfectly secure; if we learn of a breach affecting your data, we will tell you.

TraydStar is for adults. You must be at least 18 to create an account, and we do not knowingly collect data from anyone under 18. If you believe a minor has created an account, contact support@traydstar.com and we will remove it.

If we change this policy in a way that matters, we will update the date above and notify account holders by email. Questions or requests: support@traydstar.com.