Privacy Policy

At Gearbox Marketplace, we collect only what we need to run a functional marketplace. Here's exactly what that means.

What We Collect

• Account information: Name, email address, and password. Nothing more for registration.
• Payment information: Processed by Stripe — we never store your card number or bank details. Stripe handles payment processing and holds your financial data per their own privacy policy.
• Listing content: Photos, descriptions, pricing, and condition notes you upload when creating a listing.
• Transaction data: What you bought or sold, when, and for how much — needed to process payments and resolve disputes.
• Communications: Messages between buyers and sellers through our platform.
• Browsing data: Basic analytics — pages visited, time on site, general interaction patterns — to understand how the site is used and improve it. This is anonymized where possible.

How We Use It

We use your data to:

• Create and manage your account
• Process payments and deposits to seller accounts
• Send transaction-related emails (order confirmations, shipping updates, disputes)
• Display your listings to buyers
• Communicate with you about your account and any issues
• Improve the platform and understand usage patterns
• Comply with legal obligations (tax reporting, fraud prevention, law enforcement requests)

Third-Party Sharing

We share data only in these specific cases:

• Stripe: Handles payment processing. Your payment data is governed by Stripe's privacy policy.
• Shippo: If you use our integrated shipping labels, your address and order details are shared with Shippo to generate labels.
• Legal obligations: If required by law, court order, or to prevent fraud.

We do not sell, rent, or trade your personal data to third parties for marketing purposes.

Cookies

Gearbox uses minimal cookies:

• Session cookies: Required for the site to function — keeping you logged in, managing your cart, etc.
• Analytics cookies: Basic usage data to help us understand how the site is used (e.g., which pages get traffic, where users drop off). We use this to make decisions, not to identify you personally.

You can disable cookies in your browser, but some site features may not work properly without them.

Data Retention

• Account data: Retained while your account is active. You may request deletion at any time.
• Transaction records: Retained for at least 3 years to comply with financial record-keeping requirements.
• Listing content: Removed from public view when you delete a listing. Archived copies retained for up to 1 year for dispute resolution and legal compliance.
• Messages: Deleted when you or the other party deletes them, or when your account is closed.

Your Rights

You have the right to:

• Access your personal data — contact us and we'll provide what we have
• Correct inaccurate information in your account settings
• Delete your account and associated data — email privacy@gearboxmarketplace.com with your request
• Export your data — we can provide a downloadable copy of your account data upon request

We will respond to access, correction, or deletion requests within 30 days.

CCPA & GDPR

California residents (CCPA): You have the right to know what personal data we collect, why we collect it, and with whom we share it. You also have the right to request deletion of your data. To exercise these rights, contact us at privacy@gearboxmarketplace.com with "CCPA Request" in the subject line.

EU/EEA residents (GDPR): You have the right to access, rectify, erase, restrict processing of, and port your personal data. Contact us at privacy@gearboxmarketplace.com with "GDPR Request" in the subject line.

Children's Privacy

Gearbox is not intended for users under 18, and we do not knowingly collect data from minors.

Changes to This Policy

If we make material changes to this policy, we will notify you via email and update the "Last updated" date.

Contact

Questions about privacy or data requests: privacy@gearboxmarketplace.com