Privacy Policy

Soyy ("we", "us", "our") operates the Soyy platform at soyy.app. This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, and your rights over it. By using our platform you agree to the practices described below.

1. Information We Collect

Account & profile

When you create an account we collect your email address and, if you choose to provide it, your full name and profile photo. If you sign in with Google, we receive your name, email, and profile picture from Google.

Listings & uploads

When you list an item you submit photos, a description, a price, and details about the item's condition and location. These are stored and displayed publicly on the platform.

Orders & payments

When you make a purchase we collect shipping name and address and process your payment through Stripe. We do not store your full card number — Stripe handles all card data under their own PCI-DSS compliance. We store a reference ID linking your order to the Stripe payment.

Payout details

If you register as a seller requesting cash payouts, we collect your bank account details (account holder name, bank name, account number) to process transfers.

Communications

We collect email addresses from our newsletter sign-up and contact forms. We send transactional emails (order confirmations, dispute updates, payout notifications) via Resend.

Usage data

We automatically collect basic log data (IP address, browser type, pages visited, timestamps) to operate and improve the platform. We do not run third-party advertising trackers.

2. How We Use Your Information

• To create and manage your account
• To display your listings to buyers
• To process payments and issue payouts
• To fulfil orders and coordinate shipping
• To handle disputes and buyer protection claims
• To send transactional emails (order confirmations, status updates)
• To send marketing emails, if you have opted in
• To detect fraud and ensure platform integrity
• To comply with legal obligations

3. How We Share Your Information

We do not sell your personal data. We share it only with the service providers necessary to operate the platform:

• Supabase — database and authentication hosting
• Stripe — payment processing
• Wise — seller payouts
• Cloudinary — image storage and delivery
• Resend — transactional email delivery
• Vercel — platform hosting and infrastructure

We may also disclose information if required by law or to protect the rights, safety, or property of Soyy, our users, or the public.

4. Data Retention

We retain your account data for as long as your account is active. If you close your account, we delete your personal data within 30 days, except where we are required to retain it for legal or financial compliance purposes (such as transaction records, which we keep for 7 years).

5. Cookies

We use a small number of essential cookies: a session cookie for authentication and a language preference cookie (soyy_lang). We do not use advertising or cross-site tracking cookies.

6. Your Rights

Depending on your location you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data ("right to be forgotten")
• Object to or restrict certain processing
• Receive a copy of your data in a portable format
• Withdraw consent at any time (where processing is consent-based)

To exercise any of these rights, email us at hello@soyy.app. We will respond within 30 days.

7. Security

We use industry-standard security measures including TLS encryption in transit, encrypted storage at rest, and access controls. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security but we take reasonable precautions to protect your data.

8. Children

Soyy is not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

9. Changes to This Policy

We may update this policy from time to time. We will notify registered users by email of any material changes. The "Last updated" date at the top of this page reflects the most recent revision.

10. Contact

Questions about this policy? Reach us at hello@soyy.app.