Privacy Policy

1. Introduction

Welcome to TrunkMatch ("we," "our," or "us"). We are committed to protecting your privacy and the privacy of your children. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our marketplace platform for buying and selling children's clothing.

By using TrunkMatch, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our service.

Important: This policy applies to all users of TrunkMatch, including parents and guardians who provide information about their children. We take special care to protect children's information in compliance with applicable laws, including the Children's Online Privacy Protection Act (COPPA) and the General Data Protection Regulation (GDPR).

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Email address (required for account creation)
• Name (optional)
• Username (optional, for public profiles)
• Phone number (optional, for SMS notifications)
• Authentication information managed by Clerk (our authentication provider)

2.2 Children's Information

We do not collect information directly from children under 13. All children's information is provided by parents or legal guardians. We collect:

• Child's name (optional, stored privately and never displayed publicly)
• Birthdate (optional, used to calculate age ranges, never displayed publicly)
• Gender preferences for clothing (Boys, Girls, or Unisex)
• Clothing sizes (tops, bottoms, shoes, outerwear)
• Notes about sizing preferences (optional)

Privacy Protection: When you opt-in to display children's information on your public profile, we only show aggregated, obfuscated data:

• Number of children (e.g., "2 kids")
• Age ranges (e.g., "5-7 years", "2-4 years") - never exact ages
• Gender preferences for clothing matching
• Aggregated size ranges
• We never display names or exact birthdates publicly

2.3 Marketplace Information

When you buy or sell on TrunkMatch, we collect:

• Listing information (photos, descriptions, prices, condition)
• Transaction data (purchase history, payment information processed by Stripe)
• Shipping addresses (for order fulfillment)
• Location data (city, state, ZIP code) for matching buyers and sellers
• Queue participation and preferences

2.4 Communication Data

We collect information about your communications and preferences:

• Email notification preferences
• SMS notification preferences
• Messages sent through our platform
• Reports and feedback you submit

2.5 Technical Information

Automatically collected information includes:

• Device information (browser type, operating system)
• IP address and location data
• Usage data (pages visited, features used, time spent)
• Error logs and performance data (via Sentry)

3. How We Use Your Information

We use the information we collect to:

• Provide and maintain our marketplace platform
• Process transactions and payments
• Match buyers and sellers based on size, age, and location preferences
• Facilitate the queue system for fair access to listings
• Send notifications about listings, queue positions, and transactions
• Process referral program rewards and discounts
• Prevent fraud and ensure platform security
• Respond to your inquiries and support requests
• Improve our services and develop new features
• Comply with legal obligations

4. Third-Party Services

We use third-party services that may collect or process your information:

4.1 Authentication (Clerk)

Clerk handles user authentication and account management. They process your email, name, and authentication credentials. View Clerk's privacy policy at: https://clerk.com/privacy

4.2 Payments (Stripe)

Stripe processes all payments and handles payment data. For sellers, Stripe Connect manages payouts. Stripe collects payment card information, billing addresses, and transaction data. View Stripe's privacy policy at: https://stripe.com/privacy

4.3 File Storage (Vercel Blob)

Vercel Blob stores listing photos and user-uploaded images. View Vercel's privacy policy at: https://vercel.com/legal/privacy-policy

4.4 Email (Resend)

Resend sends transactional and notification emails. They process email addresses and email content. View Resend's privacy policy at: https://resend.com/legal/privacy-policy

4.5 SMS (Twilio)

Twilio sends SMS notifications if you opt-in. They process phone numbers and message content. View Twilio's privacy policy at: https://www.twilio.com/legal/privacy

4.6 Error Tracking (Sentry)

Sentry collects error logs and performance data to help us improve the platform. View Sentry's privacy policy at: https://sentry.io/privacy/

5. Children's Privacy (COPPA Compliance)

We do not knowingly collect personal information directly from children under 13. All information about children is provided by parents or legal guardians. We comply with the Children's Online Privacy Protection Act (COPPA) and similar laws.

Parental Control: Parents and guardians have full control over their children's information:

• You can add, update, or delete your children's information at any time
• Children's names and exact birthdates are never displayed publicly
• Public display of children's information is opt-in only (default: private)
• When displayed publicly, only aggregated, obfuscated data is shown (age ranges, not exact ages)
• You can opt-out of public display at any time

Data Protection: We take extra precautions to protect children's information:

• Children's data is encrypted and stored securely
• Access is restricted to authorized personnel only
• We never sell children's information to third parties
• We only use children's information for matching and platform functionality

If you believe we have collected information from a child under 13 without parental consent, please contact us immediately at privacy@trunkmatch.com.

6. Your Rights (GDPR & CCPA)

6.1 Access and Portability

You have the right to access your personal information and receive a copy in a portable format. You can view and export your data through your account settings.

6.2 Correction and Updates

You can update your account information, children's information, and preferences at any time through your account settings.

6.3 Deletion

You can request deletion of your account and all associated data. We will delete your information within 30 days, except where we are required to retain it for legal or business purposes (e.g., transaction records for tax compliance).

6.4 Opt-Out Rights

You can opt-out of:

• Email notifications (in account settings)
• SMS notifications (in account settings)
• Public display of children's information (in account settings)
• Marketing communications (unsubscribe links in emails)

6.5 California Residents (CCPA)

California residents have additional rights:

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to opt-out of sale of personal information (we do not sell personal information)
• Right to non-discrimination for exercising privacy rights

6.6 Exercising Your Rights

To exercise any of these rights, contact us at privacy@trunkmatch.com. We will respond within 30 days.

7. Data Security

We implement industry-standard security measures to protect your information:

• Encryption of data in transit (SSL/TLS)
• Encryption of sensitive data at rest
• Secure authentication via Clerk
• Regular security audits and updates
• Access controls and authentication requirements
• Secure payment processing via Stripe

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

8. Data Retention

We retain your information for as long as necessary to provide our services and comply with legal obligations:

• Account data: Until you delete your account or request deletion
• Transaction records: 7 years (for tax and legal compliance)
• Children's information: Until you delete it or delete your account
• Listing data: Until you delete the listing or your account
• Error logs: 90 days

When you delete your account, we will delete or anonymize your personal information within 30 days, except where retention is required by law.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. We ensure appropriate safeguards are in place, including:

• Standard contractual clauses for data transfers
• Compliance with GDPR requirements
• Third-party service providers who comply with applicable privacy laws

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last Updated" date
• Sending an email notification (for significant changes)
• Displaying a notice on our platform

Your continued use of TrunkMatch after changes become effective constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:

12. Legal Disclaimer

This Privacy Policy is provided for informational purposes. While we strive to be comprehensive and accurate, this policy should be reviewed by qualified legal counsel familiar with your jurisdiction and applicable privacy laws.

This policy does not create any legal rights or obligations beyond those required by applicable law.