Privacy Policy
Version 1.0 · Effective April 10, 2026 · Last updated April 10, 2026
1. Who We Are
SBOit.com ("the Platform") is operated by SBOit LLC, a company registered in the State of Florida, United States. We are the data controller for personal information collected through the Platform.
For privacy-related inquiries, contact us at support@sboit.com or through our contact page.
2. What Data We Collect
Account Data
When you create an account, we collect:
- Full name
- Email address
- Password (stored as a one-way cryptographic hash; we cannot read your password)
- Phone number
Transaction Data
When you list items or place bids, we collect:
- Listing details (title, description, location, pricing)
- Bid amounts and timestamps
- Contact information provided for agent verification (name, phone, address)
Usage Data
We automatically collect:
- IP address and approximate geolocation
- Browser type, device type, and operating system
- Pages visited, time spent, and navigation patterns
- Referring URL and search terms used within the Platform
Cookies and Tracking
We use cookies and similar technologies as described in our Cookie Policy.
3. How We Collect Data
- Directly from you — when you register, create listings, place bids, or contact support.
- Automatically — through cookies, server logs, and analytics tools when you use the Platform.
- From agents — independent verification agents upload photos and condition reports for your listings.
- From third parties — payment processors may share transaction confirmation data with us.
4. Why We Collect Data (Legal Basis)
We process your personal information on the following legal bases:
| Purpose | Legal Basis |
|---|---|
| Account creation and authentication | Performance of contract |
| Processing listings, bids, and transactions | Performance of contract |
| Sending transactional emails (bid alerts, auction results, verification updates) | Performance of contract |
| Customer support | Performance of contract / Legitimate interest |
| Platform security, fraud prevention | Legitimate interest |
| Analytics and service improvement | Legitimate interest |
| Marketing communications and newsletters | Consent (opt-in) |
| Legal compliance (tax, regulatory) | Legal obligation |
5. Who We Share Data With
We do not sell your personal data. We share data only with the following categories of processors:
| Processor | Purpose | Data Shared |
|---|---|---|
| Mailgun (Sinch) | Transactional and marketing email delivery | Email address, name |
| DigitalOcean | Cloud hosting and object storage (photos/videos) | All Platform data (encrypted at rest) |
| Google Analytics | Usage analytics | Anonymized browsing data, IP address |
| Independent verification agents | Asset inspection and photography | Listing location, contact name, phone |
We may also disclose data when required by law, court order, or to protect our rights and safety.
6. International Transfers
SBOit is based in the United States. If you access the Platform from outside the US, your data will be transferred to and processed in the United States. We ensure appropriate safeguards are in place for international transfers, including standard contractual clauses where required by applicable law (e.g., GDPR).
7. How Long We Keep Data
| Data Type | Retention Period |
|---|---|
| Account data | Duration of account + 2 years after deletion |
| Listing and transaction records | 7 years (tax and legal compliance) |
| Bid history | 7 years |
| Agent verification photos | Duration of listing + 1 year |
| Email notification logs | 1 year |
| Support contacts | 2 years |
| Server/access logs | 90 days |
| Cookies | See Cookie Policy |
8. Your Rights
Depending on your location, you may have the following rights regarding your personal data:
- Access — Request a copy of the personal data we hold about you.
- Rectification — Request correction of inaccurate or incomplete data.
- Erasure ("Right to be Forgotten") — Request deletion of your data, subject to legal retention requirements.
- Data Portability — Request your data in a structured, machine-readable format.
- Objection — Object to processing based on legitimate interest or for direct marketing.
- Restrict Processing — Request that we limit how we use your data while a dispute is resolved.
- Withdraw Consent — Where processing is based on consent, withdraw it at any time without affecting prior processing.
9. How to Exercise Your Rights
To exercise any of these rights, contact us at support@sboit.com or use our contact form. We will respond within 30 days.
To unsubscribe from marketing emails, click the unsubscribe link in any marketing email or contact support. Transactional emails related to your account and active transactions cannot be opted out of.
10. Cookies
We use cookies for session management, authentication, and analytics. For full details on what cookies we use and how to manage them, see our Cookie Policy.
11. Children's Privacy
The Platform is not directed at children under the age of 13 (or 16 in certain jurisdictions). We do not knowingly collect personal information from children. If we learn that we have collected data from a child under 13, we will delete it promptly. If you believe a child has provided us with personal information, please contact us at support@sboit.com.
12. Changes to This Policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the most recent revision. Material changes will be communicated to registered users via email at least 30 days before they take effect.
13. Contact
For privacy-related questions or to exercise your data rights, contact:
SBOit LLC — PrivacyEmail: support@sboit.com
Web: sboit.com/contact