Privacy Policy

This Privacy Policy explains what information Machine Match, operated by [Company Legal Name], collects and how we use it. Machine Match is designed to collect as little personal information as practical and to delegate sensitive data to specialized providers.

1. Information we collect

• Account: email address, username, display name, password (stored only as a hashed value), and optional profile details such as your city/region and avatar.
• Content you create: garage items, part requests and responses, orders, messages, reviews, forum posts, and any photos you upload.
• Technical: a session cookie to keep you signed in, and basic logs needed to operate and secure the Service.

2. Sensitive data is handled by our providers

We minimize the sensitive data we hold by delegating it to Stripe:

• Payment card details are entered with Stripe and never touch our servers.
• Identity verification (for sellers) is performed by Stripe; we store only a pass/fail result and a reference token.
• Seller bank and tax details are collected and held by Stripe Connect for payouts.

3. How we use information

• To operate the marketplace — show your public garage and requests, connect owners and buyers, and process orders;
• To send transactional notifications (e.g., responses, orders, disputes) and account emails;
• To prevent fraud and abuse and to enforce our prohibited-items and conduct rules;
• To provide support and to improve the Service.

4. What is public

Machine Match is a social marketplace, so some information is visible to other members by design: your public profile and the public items in your garage, part requests you post publicly, your reviews, and forum posts. Part requests can be marked private. Your email address and payment details are never shown to other members.

5. Sharing

We do not sell your personal information. We share it only:

• With other members as part of operating the marketplace (see “What is public” above);
• With service providers that run the Service on our behalf — including Stripe (payments, identity, payouts), Resend (email delivery), Cloudflare R2 (image storage), and our hosting/database provider;
• When required by law, to protect rights and safety, or in connection with a business transfer.

6. Cookies

We use a single first-party cookie to keep you signed in. We do not use third-party advertising or cross-site tracking cookies.

7. Where data is stored

Account and marketplace data are stored in our PostgreSQL database with our hosting provider; uploaded images are stored with Cloudflare R2. Sign-in via Google (if you choose it) is handled through Google’s OAuth.

8. Your choices & rights

• Access or update most account information from your settings;
• Request a copy or deletion of your personal data by contacting us (some records may be retained where required for legal, tax, or fraud-prevention reasons);
• Manage notification preferences in your settings.

9. Retention

We keep your information for as long as your account is active and as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements.

10. Children

The Service is not intended for anyone under 18, and we do not knowingly collect information from children.

11. Changes

We may update this policy; material changes will be posted here with a new date.

12. Contact

Privacy questions or requests: support@machinemat.ch.