Privacy Notice

We collect:

• Account & profile data you provide — name, email, password (stored hashed), and any profile details.
• Order & transaction data — shipping and billing addresses, items purchased, and the payment status Stripe reports back (we never see full card numbers).
• Content you create — messages to sellers, reviews, listings, and support requests.
• Technical data needed to run the marketplace securely — device and usage information, and log data used for fraud prevention and debugging.

We use your data to:

• process orders and connect you with the sellers who fulfil them;
• take payment and pay out sellers through Stripe;
• provide customer support and resolve disputes;
• prevent fraud, abuse, and other unlawful activity;
• keep the marketplace secure and working reliably; and
• with your consent, send marketing such as the newsletter — which you can stop at any time.

We share data with a small set of service providers who process it on our behalf, only as needed to provide their service:

Stripe

Payment processing and identity verification for sellers. Card details go directly to Stripe and are never stored by Klatchit.

Sentry

Error and performance monitoring. Configured to not collect IP addresses, cookies, or request headers, with an additional scrubber that strips personal data before an event is sent.

S3-compatible object storage

Hosting product images, uploaded documents, and time-limited data-export bundles.

Transactional email provider

Sending order confirmations, shipping updates, security notices, and — only if you opt in — the newsletter.

We also share what's strictly necessary to complete a purchase — for example, your shipping details with the seller fulfilling your order. We do not sell your personal data (see Do Not Sell or Share).

We keep personal data only as long as needed for the purposes above. Financial and order records are retained longer where the law requires it (for example, tax and accounting rules).

When you erase your account, we anonymize the personal information tied to it. Records we must keep for legal reasons remain, but they no longer identify you.

You can review and update your information at any time. Depending on where you live, you may also have the right to access, export, correct, or delete your personal data, and to object to or restrict certain processing.

Two of these are self-serve from your privacy settings: download a machine-readable copy of your data and erase your account. For anything else, contact us.

Klatchit uses only first-party cookies — no third-party advertising or analytics scripts. See the Cookie Notice for the full list and to opt out of attribution cookies.

Klatchit does not sell your personal data, and does not share it for cross-context behavioral advertising, as those terms are defined under California law. There is nothing to opt out of, because we don't do it.

We honor the Global Privacy Control (GPC) signal: if your browser sends it, we treat it as an opt-out of attribution cookies automatically. You can also opt out manually from the Cookie Notice.