Privacy Policy

LpuMart is a campus marketplace that helps students find and contact each other to buy and sell used items. It is run by an individual founder and is not affiliated with any university. This policy explains what information we collect, why, and what we do with it.

1. What we collect

• Account details: your email address, your password (stored in hashed form by our authentication provider; we cannot see it), and your full name.
• Profile details (optional): your branch, year, and WhatsApp number.
• Listings: the title, description, price, category, condition, and photos you upload.
• Activity: which listings you contact sellers about (and when), listings you report, and how many times each listing is viewed.
• Support messages: the name, email, and message you send through the Contact Us form.
• Technical data: a login session cookie, and standard server logs kept by our hosting provider.

2. What other people can see

• On listings, other users see only your first name. Your full name, branch, year, and email are never shown to other users.
• Your WhatsApp number is never displayed anywhere on LpuMart.
• Your listings, including their photos, are visible to anyone who visits LpuMart, including people who are not logged in.

3. How WhatsApp contact works

When a verified user taps "Contact Seller", we open a WhatsApp chat with the seller using a link generated on our server. Once that chat opens, the buyer's WhatsApp will show the seller's phone number, and the seller will see the buyer's. If you are not comfortable with that, do not add a WhatsApp number to your profile. Once a chat begins, it happens on WhatsApp and is covered by WhatsApp's own terms and privacy policy, not ours.

4. How we use your information

• To run your account and let you post, edit, and manage listings.
• To let verified users contact sellers, and to enforce a limit of 50 contacts per user per day.
• To moderate the platform, including reviewing reports, removing listings, and banning accounts that break our Terms.
• To reply to messages you send us.
• To keep the service secure and working.

We do not sell your personal information. We do not currently show advertising. If that changes, we will update this policy before it happens.

5. Services that process your data

We use these providers to run LpuMart. They handle data on our behalf:

• Supabase: authentication and database.
• Vercel: website hosting.
• Cloudinary: storage and delivery of listing photos.
• Resend: delivery of messages sent through the Contact Us form.

6. Cookies

We use only the cookies needed to keep you logged in. We do not use advertising or cross-site tracking cookies.

7. How long we keep data

We keep your information while your account exists. If an account is banned, its listings are hidden but kept for record-keeping. Records of contact requests and reports are kept for abuse prevention and moderation.

8. Your choices and rights

• You can view and update your name, branch, year, and WhatsApp number on your Profile page at any time.
• You can edit, mark as sold, or delete your own listings.
• You can ask us to delete your account and the data linked to it through the Contact Us page. We will do so, except for anything we are required to keep by law or need to keep to prevent abuse. We will make reasonable efforts to remove your listing photos as well.
• You can ask us what personal data we hold about you or ask us to correct it through the same page.

9. Security

We use access controls, hashed passwords, and server-side checks to protect your data, and your WhatsApp number is never sent to your browser as a field. No online service is completely secure, so we cannot guarantee absolute security.

10. Who can use LpuMart

LpuMart is for people aged 18 and over. We do not knowingly collect information from anyone under 18. If you believe a minor has created an account, contact us and we will remove it.

11. Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top shows the latest version. If changes are significant, we will make that clear on the site.

12. Contact

For privacy questions or requests, use the Contact Us page.