Privacy Policy
1. What we collect
Search queries and result counts; a browser-generated client ID; basket contents; seller applications and listings; suggestion/contact messages; reviews; newsletter emails if you subscribe; and, if you sign in with Google, your name, email, and Google account ID. PayPal handles card/payment account details for Featured Listings and tips — Boot Bodega does not store those.
2. How we use it
To operate search and comparison, show recent searches and baskets, review seller/partner applications, sync signed-in baskets, send transactional notices (when email is configured), mediate disputes in good faith, prevent abuse, and publish aggregate search counts.
3. Local storage & cookies
Basket, recent searches, theme, consent flags, and a random client ID live in local storage. Sign-in stores a session token in session storage (cleared on tab close or sign-out).
3a. Newsletter
Subscribing requires confirming a link sent to your address (double opt-in) — you are never added to the list on the strength of the signup form alone. If that confirmation link is not used within 72 hours, the unconfirmed signup is automatically deleted; nothing about it is retained. Every newsletter email carries a one-click unsubscribe link that works immediately, no sign-in required, and we honor it the same way whether you click it in the email or your mail provider triggers it on your behalf.
4. Third parties
Google OAuth (optional sign-in); Google Sheets and/or Supabase for platform data; PayPal for paid services; Resend for transactional email when configured; Anthropic API for optional boot-detail enrichment when configured. We do not sell personal data.
5. Data retention
Account-linked data is retained while your account is active and as needed for security, dispute mediation, and legal obligations. Search logs and analytics may be retained in aggregate or pseudonymous form. Seller application proof images (which may include sensitive personal photos) are deleted automatically 90 days after the application is approved or rejected, or 180 days after submission if still pending. Application metadata without the image may be kept for fraud prevention. Contact support@bootbodega.com for the practice applying to your request.
6. Deletion requests
Email support@bootbodega.com with subject “Data deletion,” or use Contact in the app. Signed-in applicants can also delete their proof images from the Privacy panel in the app. We will verify the request and delete or anonymize account-linked data we control, except records we must retain for security, legal, or accounting reasons (e.g. payment references, ban records). Browser-only data can be cleared via your browser’s site-data controls.
7. Contact
support@bootbodega.com — also available in-app under Contact.