Privacy Policy
Last updated: [May 2025] The Share Room Marketplace (“we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains what information we collect when you use our online marketplace, how we use and share that information, and the choices and rights you have regarding your data. Information We Collect We collect personal information you provide when registering for an account or using our marketplace. For example, when you create an account or post a listing, we collect your full name, email address, profile photo, location, and any other information you choose to include in your profile or listing. We may also collect payment information (such as credit card or billing details) when you make a transaction. This payment data is securely processed by our third-party payment processor (Stripe) and we do not store raw credit card details on our own servers In addition, we automatically collect technical and usage data when you use our site. For example, we may record your IP address, browser or device details, and approximate geographic location, as well as log your browsing actions and session information (e.g. pages viewed, searches performed). We collect and store this data using cookies and similar tracking technologies to operate our service and analyze usage. Information from cookies and analytics (such as session identifiers and usage statistics) helps us improve the marketplace and remember your preferences. How We Use Your Information We use the information we collect for the following purposes: Provide and operate the marketplace. We use your personal data to create and manage your account, verify your identity, process listings and bookings, and enable user-to-user interactions (such as messaging). For example, we show your name and profile photo on your public listings so other users can identify you. These functions are essential to deliver our services. Process payments and bookings. When you make or receive payments, we use your payment information to complete the transaction through our payment processor. Stripe may collect transaction details (e.g. card or bank information) to process payments, in accordance with its privacy policy We use this information solely to fulfill purchases and bookings within the marketplace. Communications and customer service. We use your contact information (such as your email address) to communicate with you about your account, transactions, listings, and marketplace updates. For example, we may email you to confirm a booking, respond to your support requests, or notify you of important changes to the service. With your consent (or as permitted by law), we may also send you marketing communications, such as newsletters or promotional offers. You can opt out of marketing messages at any time. Improvement and analytics. We analyze usage data and other non-identifying information to improve our platform. This includes using cookies and third-party analytics tools (for example, Google Analytics) to measure user traffic and behavior. Analytics cookies and tracking technologies collect data on how users navigate the site, which we use to improve functionality and user experience. . Legal and safety purposes. We use and retain information as necessary to comply with legal obligations, enforce our Terms of Service, resolve disputes, and protect the rights, property, or safety of our users and The Share Room Marketplace. Each of the above uses is supported by a lawful basis under applicable privacy laws (such as your consent or our legitimate business interests). Sharing and Disclosure of Information We do not sell your personal data to third parties. However, we may share or disclose your information as follows: Payment processing. We share necessary payment details with Stripe (our payment gateway) to complete transactions. Stripe processes credit card and billing information on secure servers, subject to its own privacy policy vtrl.cc. Service providers. We use third-party vendors and service providers to support our operations (for example, email delivery, cloud hosting, and customer support tools). These providers may have access to personal information only as needed to perform their services, and they are contractually required to keep the data confidential. Analytics and Advertising. We may share aggregated or anonymized usage data (which does not directly identify you) with analytics or advertising partners to help us improve our services. For example, we may use Google Analytics or similar tools to gather insights, but any personal information collected by those tools is managed under their privacy policies. Legal compliance and protection. We may disclose your information if required to do so by law or in response to valid requests by public authorities (such as a court or law enforcement). We also may use or share information if we believe it is necessary to protect our rights, property, or safety, or that of other users. User interactions. When you use the marketplace, certain personal data (such as your username or profile photo) will be visible to other users if you create a listing or message others. For example, other users will see your name and photo on your published listings. Aside from these direct interactions, we do not make your private information publicly visible. These sharing practices enable our core functionalities. For example, as Sharetribe notes, “we may share information with third-party vendors and service providers that provide services on our behalf” and also “share information with third parties to allow you to integrate their services” We encourage you to review the privacy policies of any third-party services we use (e.g. Stripe, Google Analytics) to understand how they handle your data. Cookies and Tracking Technologies We use cookies and similar tracking technologies to improve your experience and analyze site usage. Cookies are small data files stored on your device by your web browser. We use both essential cookies (necessary for core site functions) and analytics/performance cookies. For example: Essential cookies: We use session cookies to maintain your login session and to facilitate secure payments. Sharetribe’s platform sets a session cookie (st-hosted-token) valid for one month; this cookie does not store personal information and is only used for login state sharetribe.com . Similarly, when you interact with the payment page, Stripe may set a cookie to maintain the secure payment session. These essential cookies require no user consent, as they are needed for service functionality. Analytics and non-essential cookies: To understand how the marketplace is used, we may use third-party analytics cookies (such as Google Analytics). These cookies collect information about your visit (pages viewed, links clicked, device type, etc.) in an aggregated form. We may also use pixels or tags for the same purpose. You can typically disable or delete non-essential cookies through your browser settings or by using a cookie preference mechanism. If you refuse cookies, you may still use most features of the site, but some functionality (like remembering your login) could be affected. We may update our cookie practices as needed. For more details on the specific cookies used, please refer to our Cookie Policy or consent banner where applicable. In general, we “use cookies and similar tracking technologies to track the activity on [our] Service and store certain information” Data Security and Retention We take reasonable measures to protect your personal information. We store data on secure servers and use industry-standard security protocols (such as encryption and firewalls) to safeguard data in transit and at rest. We restrict access to your personal data to authorized personnel and service providers who need the information to operate and maintain our service. As stated by one provider, when collecting and processing personal information, we will protect it “with commercially acceptable means to prevent loss, theft, [or] unauthorized access, disclosure, copying, use, or modification” wylark.com . However, please note that no system can be completely secure, and we cannot guarantee absolute security. Payment card information is never stored on our servers. Credit card data is processed directly by Stripe using industry-standard security measures vtrl.cc . We do not have access to raw card numbers or CVV codes; Stripe alone holds that sensitive information under strict compliance with the Payment Card Industry Data Security Standard (PCI DSS). We retain your personal data only as long as necessary to provide our services or as otherwise required by law. For example, we keep account information for the duration of your account’s existence and for a reasonable time afterward in case you reactivate. When your personal data is no longer needed for our services, we will delete or anonymize it. As one example policy states: “We keep your personal information only for as long as we need to... If your personal information is no longer required for this purpose, we will delete it or make it anonymous by removing all details that identify you. Similarly, if you request deletion of your account or personal data, we will erase it unless there is a legal reason to retain it. International Transfers Although The Share Room Marketplace is based in the United States, we may transfer and process data in other countries in connection with our global operations. Your personal data may be stored on servers in the U.S. or in other countries. In any transfer, we will comply with applicable data protection laws. For example, if data is transferred from the European Economic Area or the UK, we use appropriate safeguards (such as Standard Contractual Clauses or other approved mechanisms) to ensure an adequate level of protection stripe.com. Our international transfers are conducted under lawful and secure conditions so that your privacy rights travel with your data. Your Rights and Choices You have certain rights regarding your personal information, subject to local law. These may include: Access and correction. You can review and update the personal data in your account (such as your email or profile information) by logging in and editing your settings. Data portability. To the extent applicable, you may request a copy of your data in a structured, commonly used format. Erasure (Right to be forgotten). You may request that we delete your personal data from our systems, and we will do so unless we have a compelling legal reason to retain it. Restrict or object to processing. You can ask us to stop processing certain data (for example, for direct marketing) or object to data processing based on our legitimate interests. Opt-out of marketing. You can opt out of receiving promotional emails by using the unsubscribe link in the email or by contacting us. Even if you opt out of marketing, we may still send you important transactional or service-related messages. If you are an EU or UK resident, you also have rights under the General Data Protection Regulation (GDPR) such as the right to obtain a copy of your data, correct inaccurate data, and request restriction of processing. We will comply with any valid request to exercise these rights. As one privacy policy explains: “You have the right to access, correct, or delete the personal information we collect. You can also object to the processing of your personal information... If you would like to exercise any of these rights, please contact us” Additionally, if you are a California resident, you may have rights under the California Consumer Privacy Act (CCPA), including the right to know what personal data we have collected about you, to request deletion of your data, and to opt-out of the sale or sharing of your information (we do not sell personal data). To exercise any of these rights, or for any questions about your data preferences, please see the Contact Information section below. Changes to This Privacy Policy We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make material changes, we will update the “Last updated” date at the top and post the new policy on our site. As Stripe advises for its own policy, “We may change this policy from time to time... [and] any changes are effective the latter of when we post the revised Policy or otherwise provide notice” stripe.com. We encourage you to review this Privacy Policy periodically. Your continued use of the service after any changes means you accept the revised policy. Contact Information If you have any questions or concerns about this Privacy Policy or our privacy practices, please contact us: Email: theshareroomteam@gmail.com Address: The Share Room Marketplace, 2001 Harlem Avenue, Baltimore, MD 21217 Ste#2 (Attn: Privacy Officer) We will respond to your requests and inquiries as soon as possible. If you are a EU/UK resident with unresolved privacy issues, you may also file a complaint with your local data protection authority. Thank you for using The Share Room Marketplace. We value your privacy and strive to keep your personal information safe and secure.
Every marketplace business needs a privacy policy. To launch your marketplace fast, use our template as a basis for your policy.
You can find the template here.