SafeSwap Privacy Policy — v1 (DRAFT — pending solicitor/DPO review)

_SafeSwap by SBS. Dublin, Ireland. Baseline V1 policy; review required before launch. The hash of this file is recorded in ss_terms_versions and binds each user's acceptance. SafeSwap is the data controller for the purposes of GDPR and the Irish Data Protection Acts._

1. What we collect

• Account identity from Clerk (email, phone, name).
• Device information (a stable device id, app/OS version, APNs push token hash).
• Addresses for pickup and delivery, and the resolved Dublin service zone.
• Listings, photos, messages, orders, and payment references (held by Stripe).
• For iPhones/consoles: a hashed device identifier and the last four characters only.
• Pickup/delivery GPS proof, inspection results, and dispute evidence.
• Hashed IP and user-agent for security and abuse prevention.

2. What we do NOT store

• Full card numbers (handled by Stripe).
• Full IMEI or serial numbers in plain form.
• Raw IP or user-agent strings (only salted hashes).

3. Why we use it

To operate the marketplace, move payment safely through Stripe, run pickup/inspection/delivery, prevent fraud and stolen-goods trafficking, resolve disputes, and meet legal obligations.

4. Sharing

• Stripe (payments and payouts).
• Clerk (authentication).
• Apple (push notifications).
• Cloudflare (hosting/storage).
• An Garda Síochána or Revenue where legally required.

We never sell your data.

5. Your rights

You may request access, export, correction, deletion, or restriction of processing in-app. We respond within 30 days. Some financial and dispute records are retained where the law requires, even after account deletion.

6. Retention

Operational data is retained while your account is active and for a limited period afterward. Payment, tax, and dispute records are retained for the legally required period. Proof records are kept long enough to resolve disputes and meet legal duties.

7. Security

All sensitive workflows are audited. Access is least-privilege. Suspicious activity can trigger a security hold on an account, listing, payment, or payout.

8. Contact

Privacy requests are handled in-app and routed to the SafeSwap operator team.