Legal

Privacy Policy

We are committed to protecting your privacy. This policy explains what information we collect, how we use it, and the choices you have.

Effective Date
May 28, 2026
Last Updated
May 28, 2026

Table of Contents

1Information We Collect2How We Use Your Information3How We Share Your Information4Data Retention5Security6Your Rights and Choices7Children's Privacy8Third-Party Services9International Data Transfers10Changes to This Policy11Contact Us

Welcome to iBuy ("we," "our," or "us"). iBuy operates the iBuy marketplace platform, including our website at ibuy.bb and our mobile applications for iOS and Android (collectively, the "Service"). This Privacy Policy describes how we collect, use, disclose, and protect your personal information when you access or use our Service.

By downloading our app, creating an account, or using any part of our Service, you acknowledge that you have read and understood this Privacy Policy. If you do not agree, please discontinue use of our Service.

1

Information We Collect

1.1 Information You Provide Directly

When you create an account, post a listing, or contact us, we may collect:

  • Account information: name, email address, phone number, and profile photo.
  • Listing information: descriptions, photos, prices, and location details you submit.
  • Communications: messages you send through our in-app messaging system.
  • Verification data: government-issued ID or other identity documents (only when required for seller verification).
  • Payment information: billing address and transaction details (payment card data is processed by our PCI-compliant payment processor and not stored on our servers).
  • Support interactions: records of correspondence when you contact our support team.

1.2 Information Collected Automatically

When you use the iBuy app or website, we automatically collect:

  • Device information: device type, operating system and version, unique device identifiers, mobile network information, and app version.
  • Usage data: pages viewed, features used, search queries, listing interactions, session duration, and click-stream data.
  • Log data: IP address, browser type and version, referring URLs, and server log information.
  • Location data: with your permission, approximate or precise GPS location to show nearby listings and improve search relevance. You can disable location access in your device settings at any time.
  • Cookies and similar technologies: we use cookies, web beacons, and similar tracking technologies to maintain sessions, remember preferences, and analyze usage patterns (see Section 8).

1.3 Information from Third Parties

  • Social login providers (such as Google or Apple) when you choose to sign in through them — limited to the profile data you authorize.
  • Analytics partners who help us understand app performance and user behavior.
  • Payment processors who confirm transaction status.
  • Identity verification services when you opt into enhanced seller verification.
2

How We Use Your Information

We use the information we collect to:

  • Provide, operate, and improve the iBuy platform, including personalized search results and listing recommendations.
  • Create and manage your account, process transactions, and send transaction-related notifications.
  • Facilitate communication between buyers and sellers through our secure in-app messaging.
  • Verify seller identity and listing authenticity to maintain marketplace integrity.
  • Send service-related emails and push notifications (e.g., new messages, listing status updates). You can opt out of marketing notifications at any time.
  • Detect, prevent, and investigate fraud, spam, abuse, and other harmful or unlawful activities.
  • Comply with applicable laws, regulations, court orders, and legal obligations.
  • Measure and analyze platform performance, conduct research, and develop new features.
  • Personalize your experience and show relevant advertisements (where applicable and with your consent where required by law).

Legal basis (GDPR): We process your data based on contract performance, legitimate interests, legal obligation, or — for marketing and location data — your explicit consent.

3

How We Share Your Information

We do not sell your personal information. We share data only in the following circumstances:

3.1 Within the Platform

Listing information you post (photos, description, price, general location) is visible to other iBuy users. Your exact contact details are only shared when you explicitly choose to share them during a transaction.

3.2 Service Providers

We share data with trusted third-party vendors who perform services on our behalf, including cloud hosting (AWS), payment processing, analytics, push notifications, and customer support. These providers are contractually obligated to protect your data and may not use it for their own purposes.

3.3 Legal and Safety

We may disclose information when we believe in good faith that disclosure is necessary to:

  • Comply with a legal obligation, court order, or government request.
  • Protect the rights, property, or safety of iBuy, our users, or the public.
  • Investigate or prevent fraud, security incidents, or other illegal activity.

3.4 Business Transfers

If iBuy is acquired, merged, or undergoes a similar corporate transaction, your information may be transferred to the successor entity. We will notify you via email or prominent in-app notice and give you the opportunity to delete your account before such a transfer takes effect.

3.5 With Your Consent

We may share your information with third parties for other purposes when you give us explicit consent to do so.

4

Data Retention

We retain your personal information for as long as your account is active or as needed to provide services. Specifically:

  • Account data is retained until you delete your account, at which point it is removed within 30 days (except where retention is required by law).
  • Transaction records are retained for up to 7 years to comply with financial and tax regulations.
  • Messages between users are retained for 2 years from the last activity in a conversation.
  • Deleted listings are removed from public view immediately but may be retained for up to 90 days in our backup systems.
  • Device and usage logs are typically retained for 12 months.

You can request deletion of your data at any time by contacting us at privacy@ibuy.bb. We will process your request within 30 days, subject to legal obligations that may require retention of certain data.

5

Security

We take the security of your information seriously and implement industry-standard measures including:

  • Encryption of data in transit using TLS 1.2 or higher.
  • Encryption of sensitive data at rest using AES-256.
  • Access controls limiting data access to authorized personnel on a need-to-know basis.
  • Regular security audits and vulnerability assessments.
  • Secure, PCI-DSS-compliant payment processing through third-party providers.
  • Two-factor authentication (2FA) available for all accounts.

While we strive to protect your information, no method of internet transmission or electronic storage is 100% secure. If you suspect unauthorized access to your account, please contact us immediately at security@ibuy.bb.

6

Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal data:

6.1 Rights Available to All Users

  • Access: request a copy of the personal data we hold about you.
  • Correction: update or correct inaccurate information in your account settings.
  • Deletion: request deletion of your account and associated personal data.
  • Portability: receive a machine-readable copy of your data.
  • Opt-out of marketing: unsubscribe from marketing emails via the link in any email, or adjust push notification settings in the app.
  • Location data: disable location access at any time via your device settings.

6.2 EEA / UK Residents (GDPR)

If you are located in the European Economic Area or United Kingdom, you also have the right to:

  • Object to processing based on legitimate interests.
  • Restrict processing in certain circumstances.
  • Lodge a complaint with your local supervisory authority.
  • Withdraw consent at any time (where processing is consent-based).

6.3 California Residents (CCPA / CPRA)

California residents have additional rights under the California Consumer Privacy Act, including the right to know, the right to delete, the right to opt-out of the sale of personal information (we do not sell personal information), and the right to non-discrimination for exercising privacy rights.

To exercise any of these rights, please submit a request to privacy@ibuy.bb. We will respond within 30 days.

7

Children's Privacy

Age Requirement: iBuy is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. Users in the European Economic Area must be at least 16 years old.

If you believe that a child under the applicable minimum age has provided personal information to us, please contact us immediately at privacy@ibuy.bb. We will take prompt steps to delete such information from our systems.

By creating an account, you represent that you meet the minimum age requirement applicable to your jurisdiction.

8

Third-Party Services

8.1 Analytics

We use analytics tools (such as Google Analytics and Firebase Analytics) to understand how users interact with our platform. These services may collect usage data subject to their own privacy policies.

8.2 Advertising

We may use advertising partners to display relevant ads within our platform. These partners may use cookies and device identifiers to show personalized advertisements. You can opt out of personalized advertising through your device settings (Limit Ad Tracking on iOS; Opt out of Ads Personalization on Android).

8.3 Maps and Location Services

We use mapping services (such as Google Maps) to display listing locations. Use of these services is governed by the respective provider's terms and privacy policy.

8.4 Social Login

If you log in using a third-party provider (e.g., Google, Apple), we receive limited profile information. We do not store your third-party passwords.

8.5 Cookies and Tracking Technologies

Our web platform uses cookies to maintain your session and preferences. You can manage cookie preferences through your browser settings. Note that disabling cookies may affect certain platform functionality. Our mobile app does not use browser cookies but may use equivalent device-level identifiers.

9

International Data Transfers

iBuy operates globally, and your information may be transferred to and processed in countries other than your country of residence, including the United States and countries where our cloud service providers operate. These countries may have different data protection laws than your jurisdiction.

For transfers from the EEA or UK, we rely on appropriate safeguards such as Standard Contractual Clauses approved by the European Commission to ensure your data receives adequate protection.

10

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other reasons. When we make material changes, we will:

  • Update the “Last Updated” date at the top of this policy.
  • Notify you via in-app notification or email at least 14 days before the changes take effect.
  • For significant changes, request fresh consent where required by applicable law.

Your continued use of iBuy after the effective date of an updated policy constitutes your acceptance of the changes. If you do not agree to the updated policy, you may delete your account before the effective date.

11

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

✉️
Privacy Inquiries
privacy@ibuy.bb
🔒
Security Issues
security@ibuy.bb
📬
Mailing Address
iBuy Attn: Privacy Team ibuy.bb

We aim to respond to all privacy-related requests within 30 days. If you are not satisfied with our response, you may have the right to lodge a complaint with your local data protection authority.