Privacy Policy

1. Scope and our commitment

Effective August 15, 2026. This Privacy Policy applies to SellUp’s Canadian marketplace website, account, listing, messaging, notification, and related support services. It is designed to reflect Canada’s private-sector privacy principles, including PIPEDA and substantially similar provincial laws where applicable.

SellUp is accountable for personal information under its control. We identify why information is needed, limit collection and use to appropriate purposes, apply safeguards, provide access and correction processes, and offer ways to raise a concern.

2. Information we collect

• Account and profile information: email, username, password hash, phone number, avatar, biography, date of birth, gender, account status, settings, addresses, and sign-in provider information.
• Listings and marketplace activity: titles, descriptions, categories, prices in Canadian dollars, photos, location, contact choices, favourites, searches, views, and phone-reveal events.
• Communications and trust information: chat messages, conversation metadata, blocks, reports, moderation records, and notifications.
• Device and technical information: IP-derived security data and approximate location, browser or user-agent information, signed-in session activity and current page path, session cookies, push subscription details, service logs, and an anonymous visitor identifier used to limit duplicate engagement counts.
• Payment references: Stripe customer and payment-method identifiers plus limited card details such as brand, last four digits, and expiry. SellUp does not receive the full card number or security code.

3. How we use information

• Create and secure accounts, verify email addresses, authenticate sessions, and support Google or Facebook sign-in.
• Publish listings, personalize marketplace results, connect buyers and sellers, deliver chat and notifications, and provide support.
• Detect fraud, spam, abuse, security incidents, prohibited listings, and violations of our Terms.
• Operate, troubleshoot, measure, improve, and protect SellUp and comply with legal obligations.
• Send marketing or recommendation messages where permitted and according to your choices.

4. Consent and choices

We seek meaningful consent appropriate to the sensitivity and context of the information. Key uses should be understandable at or before collection. You may update profile fields, phone visibility, notification preferences, saved addresses, and supported payment methods in your account. You may withdraw consent for optional uses, but some information is required to provide, secure, or comply with obligations for the service.

5. When information is disclosed

• To other users when you publish profile or listing information, choose to reveal contact information, or send a message.
• To service providers that operate infrastructure and features, including hosting and databases, AWS email delivery, Cloudflare R2 object storage, Stripe payments, mapping or location services, search and caching infrastructure, and Google or Meta sign-in.
• To authorities, courts, advisers, affected parties, or investigators when reasonably necessary for law, safety, fraud prevention, legal claims, or protection of rights.
• In connection with a proposed or completed business transaction, subject to applicable safeguards and law.

6. Processing locations and safeguards

SellUp serves Canada, but service providers may process or store information in Canada, the United States, or other countries. Information in another jurisdiction may be accessible to its courts, law-enforcement, or national-security authorities.

We use administrative, technical, and organizational safeguards appropriate to the information, including access controls, secure transport, password hashing, and restricted service credentials. No internet service can promise absolute security.

7. Cookies and similar technologies

SellUp uses cookies and browser storage that are necessary for secure sessions, sign-in redirects, preferences, chat and push delivery, and basic engagement controls. Blocking essential cookies can prevent sign-in and other features from working. We do not currently describe third-party advertising trackers as part of the service; this policy will be updated before materially different tracking is introduced.

8. Retention and deletion

We retain personal information only as long as reasonably needed for the purposes described, account operation, safety, disputes, legal obligations, and enforcement. Verification and password-reset records are short-lived. Session, notification, support, moderation, security, and backup records may follow different schedules.

You can permanently delete your SellUp account through Edit profile. Deletion removes the active account and associated content covered by that process. Limited records may remain where reasonably required by law, fraud prevention, security, dispute resolution, enforcement, or backup roll-off.

9. Access, correction, and complaints

You can update many details in your account. You may also ask for access to personal information under our control, request correction, ask questions about processing, or challenge our compliance. We may need to verify your identity and may refuse or limit a request where law permits.

Contact our privacy team at privacy@sellup.ca. Include enough detail to locate your account, but do not email a password, one-time code, full payment-card number, or unnecessary identification. We aim to respond within the time required by applicable law.

10. Children, changes, and contact

SellUp is not directed to children who cannot legally enter the applicable agreement. If you believe a child provided personal information contrary to law, contact us.

We may update this policy as SellUp changes. We will post the updated date and provide additional notice where required. Privacy questions can be sent to privacy@sellup.ca.