1. Information we collect
We collect information needed to operate the marketplace: account details (name, email), shipping address snapshots at checkout, order history, and product reviews you submit.
Payment card data is handled by Stripe. NeoBuy does not store full card numbers on our servers; we receive payment status and transaction references from Stripe.
2. How we use your information
We use your data to create and secure your account, process orders, send transactional emails (order confirmations, status updates, verification codes), prevent fraud, and improve the platform.
We do not sell your personal information to third parties for their marketing purposes.
3. Cookies and sessions
We use an HTTP-only session cookie (neobuy_session) to keep you signed in and to protect your account.
Guest carts may use a separate cart cookie. During pre-launch or limited-access periods, an optional access cookie may be set to regulate storefront availability. You can clear cookies through your browser settings.
4. Third-party services
We share data with service providers only as needed to operate NeoBuy:
- Stripe — payment processing
- Resend — transactional email delivery
- AWS S3 — product and profile image storage (when configured)
- Merchants — fulfillment data for items they sell (name, shipping address, line items)
5. Data retention and security
We retain order and account records as long as needed for legal, accounting, and support purposes. Passwords are stored using bcrypt hashing. Access to production systems is restricted to authorized personnel.
6. Your rights
Depending on your location, you may have rights to access, correct, or delete personal data we hold about you. Contact us through the support channel listed in platform settings to submit a request.
7. Updates
We may revise this policy as our services evolve. The "Last updated" date at the top of this page indicates when changes were last published.