Privacy Policy

• Account data: your @vanderbilt.edu email address and the name you sign up with.
• Listings: titles, descriptions, prices, categories, pickup locations, and the photos you upload.
• Messages: the in-app messages you exchange with other users about listings.
• Ratings & reviews: the reviews you leave and receive after a sale.
• Reports: if you report a listing, we store the report (reports are private — the seller never sees who filed one).

We don't collect payment information — there are no payments on the platform; you settle up in person however you both agree.

Imported listings: some listings were imported from the public "Reuse, Vandy!" GroupMe group, and for those we store the original poster's GroupMe display name and their publicly posted item details so buyers can find them. If that's you and you want it removed, see Remove My Listing.

• To run the marketplace: show your listings, deliver your messages, display your seller rating.
• To enforce the Vanderbilt-only gate (signup requires a verified @vanderbilt.edu address).
• To act on reports and keep prohibited items and bad actors off the platform.
• To send you notifications you've opted into (e.g. saved-search alerts and web push — both off unless you turn them on).

That's it. We don't build advertising profiles, and we never sell or rent your data to anyone.

All data is stored with Supabase (our database, authentication, and file-storage provider), hosted on infrastructure in the United States. Supabase acts as our processor; their own security and privacy practices are documented at supabase.com. Access to user data is protected by row-level security rules — for example, only you can edit your listings, and messages are readable only by the two people in the conversation.

• Listings (title, photos, price, your name) are visible to anyone browsing the site.
• Your email address is shown only to signed-in, verified Vanderbilt users viewing your listing — so buyers can contact you. It is never shown to logged-out visitors or search engines.
• Messages are private between you and the other person in the thread.
• Ratings are public (they're the point of a reputation system), but who reported a listing is not.

We use the browser storage Supabase needs to keep you signed in (your auth session). We don't run third-party advertising trackers, and as of the date above we don't run third-party analytics. If we ever add a privacy-respecting analytics tool to count page views, we'll update this section first.

Email admin@commodorecleanout.com from your Vanderbilt address and we'll delete your account, profile, listings, and photos. Account deletion cascades — your listings don't linger. Messages you sent to other users may remain visible in their threads (the same way an email you sent stays in the recipient's inbox). You can also delete individual listings yourself anytime from the listing page.

If this policy changes materially, we'll update the date above and make a reasonable effort to flag it. Questions, concerns, or data requests: admin@commodorecleanout.com.