PRIVACY POLICY

PRIVACY POLICY

The Source

Effective Date: June 5, 2026

Last Updated: August 11, 2026

  1. INTRODUCTION

The Source Marketplace ("we," "us," "our," or "Company") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and otherwise handle your information when you use our mobile application (the "App").

  1. INFORMATION WE COLLECT

2.1 Authentication Information

When you sign in to The Source Marketplace, we collect:

  • Google Sign-In: Name, email address, profile picture (via Google OAuth)

  • Apple Sign-In: Name, email address, profile picture (via Apple OAuth)

2.2 Age Verification

During signup, we require you to enter your date of birth to verify you are at least 18 years old. We collect:

  • Date of birth (month, day, year)

  • Age verification confirmation

We use this information only to confirm your eligibility to use the App. See Section 4 for how long we retain this data.

2.3 Profile & Account Data

  • Display name and bio

  • Profile picture (uploaded by you)

  • Account creation date

  • Device identifiers for your app installation

2.4 Listing Information

When you create a listing, we collect:

  • Title, description, and price

  • Category and condition

  • Photos (from your camera roll)

  • Approximate or exact location information (if you choose to share it)

  • Upload date and timestamps

2.5 Camera Roll Access

We request permission to access your camera roll to allow you to:

  • Upload photos to your listings

  • Set a profile picture

We do not automatically collect or store your entire camera roll. You choose which photos to upload.

2.6 Communications Data

When you message other users:

  • Message content and timestamps

  • Sender and recipient identifiers

  • Read status

2.7 Algorithm & Recommendation Data

To improve your home feed and show relevant listings, we collect:

  • Listings you view

  • Time spent on each listing

  • Listings you save or favorite

  • Search queries you enter

  • Categories you browse

This data helps us personalize your experience and recommend listings you might like.

2.8 Device Information

  • Device type and operating system version

  • App version

  • Device language and timezone

  • IP address (standard for all apps)

  1. HOW WE USE YOUR INFORMATION

We use your information to:

  • Provide the App: Create your account, authenticate you, and enable core features

  • Age Verification: Confirm you are at least 18 years old and eligible to use The Source Marketplace

  • Home Feed & Recommendations: Show you relevant listings based on your interests and browsing history

  • Communications: Facilitate messaging between buyers and sellers

  • Safety & Security: Detect fraud, prevent abuse, and enforce our Terms of Service

  • Analytics: Understand how users interact with the App to improve features

  • Support: Respond to your questions and provide customer service

  • Legal Compliance: Meet legal obligations and resolve disputes

We do NOT:

  • Sell your personal data to third parties

  • Share your data with advertisers

  • Use your data for marketing purposes without consent

  • Store your date of birth long-term (see Section 4)

  1. DATA RETENTION

Account profile data: Until account deletion

Date of birth: Deleted immediately after age verification (not retained)

Age verification status: Retained to enforce 18+ requirement

Listings: Until deleted by you or 1 year of inactivity

Messages: Until deleted by you

Hashed email (ban prevention): Indefinitely

Camera roll photos: Until deleted by you

Algorithm/recommendation data: 90 days (then anonymized)

Device backups: 30 days after deletion

Clarification on Date of Birth: We collect your date of birth at signup solely to verify you are 18 years old. We delete your actual date of birth from our servers immediately after verification. We only retain a confirmation that you have been age-verified, not your actual birthday.

When you delete your account:

  • All personal profile data is permanently deleted

  • All your listings are permanently deleted

  • Your hashed email is retained to prevent account re-registration by banned users

  • Messages remain visible to other users but show "Deleted User" as the sender

  1. DATA SHARING

We do not share your personal data with third parties except:

  • Supabase: Your backend database provider (data is encrypted in transit)

  • Google/Apple: For authentication purposes

  • Legal Requirements: If required by law or court order

  • Safety: To prevent fraud or protect user safety

We do not share data with:

  • Advertisers

  • Marketing companies

  • Data brokers

  • Other marketplaces or apps

  1. YOUR RIGHTS & CONTROLS

6.1 Access Your Data

You can view your profile, listings, and account information within the App at any time.

6.2 Download Your Personal Data

You can download your personal data directly from within the App:

How to download:

  1. Open the App

  2. Go to Settings tab on your Profile page

  3. Tap "Download My Data"

  4. Your data will be generated and downloaded to your phone as a file (JSON or CSV format)

What is included in your download:

  • Profile information (name, email, bio, profile picture)

  • All your listings (active, inactive, and deleted)

  • Messages you sent to other users (with conversation participant names and dates)

  • Your preferences and settings

  • Your browsing history and saved listings

What is NOT included:

  • Messages sent to you by other users (to protect their privacy)

  • Other users' personal information outside of conversations

  • We retain your full conversation history within the App, which you can view anytime by opening the conversation with any user

Data portability: You can use this file to transfer your personal data to another service or keep a personal backup.

6.3 Delete Your Account

You can delete your account anytime in App Settings:

  • All personal profile data is permanently deleted

  • All your listings are permanently deleted

  • Other users' messages referencing your activity will show "Deleted User"

6.4 Opt-Out of Recommendations

You can clear your browsing history and preferences in Settings, which resets the home feed algorithm for you.

6.5 Camera Roll Permission

You can revoke camera roll access anytime in your iPhone Settings: Settings > The Source Marketplace > Photos > Never

  1. SECURITY

We take security seriously:

  • All data is encrypted in transit (HTTPS/TLS)

  • Passwords are never stored by us (handled by Google/Apple)

  • Supabase uses industry-standard encryption

  • Regular security audits and monitoring

However: No security is 100% guaranteed. We are not responsible for unauthorized access due to user negligence.

  1. CHILDREN & AGE RESTRICTIONS

Agora is not intended for users under 18 years old. We do not knowingly collect data from minors. If we discover a user is under 18, we will immediately delete their account and data. Age verification is required at signup.

  1. THIRD-PARTY SERVICES

Our App uses:

  • Supabase: Database & authentication provider

  • Google: Authentication (OAuth)

  • Apple: Authentication (OAuth)

These third parties have their own privacy policies. We recommend reviewing them:

  • Supabase: supabase.com/privacy

  • Google: policies.google.com/privacy

  • Apple: apple.com/privacy

  1. INTERNATIONAL DATA TRANSFERS

Your data is stored on Supabase servers located in the United States. By using The Source Marketplace, you consent to this transfer.

  1. GDPR & CCPA RIGHTS

11.1 GDPR (European Users) If you are in the EU, you have the right to:

  • Access your personal data

  • Correct inaccurate data

  • Delete your data (right to be forgotten)

  • Restrict processing

  • Data portability

  • Withdraw consent

11.2 CCPA (California Users) If you are in California, you have the right to:

  • Know what data we collect

  • Delete your personal data

  • Opt-out of data sales (we don't sell data anyway)

  • Non-discrimination for exercising your rights

  1. CHANGES TO THIS POLICY

We may update this Privacy Policy occasionally. We will notify you of material changes by updating the "Last Updated" date and posting the new policy in the App.

Your continued use of The Source Marketplace after changes means you accept the updated Privacy Policy.

  1. CONTACT US

If you have questions about this Privacy Policy, please contact:

Email: thesourcemarketplace@gmail.com

We will respond to privacy inquiries within 30 days.

  1. JURISDICTION

This Privacy Policy is governed by the laws of Texas, USA. Any disputes will be resolved in the state courts of Travis County, Texas, consistent with our Terms of Service.