Privacy Policy

1. Introduction

Welcome to MerchPatrol ("App," "we," "us," "our," or "MerchPatrol LLC"). We are committed to protecting your privacy and ensuring transparency in how your data is handled. This Privacy Policy outlines our information practices, what data we collect, how it is stored and processed, and your privacy rights regarding your account and information.

This Privacy Policy applies to the MerchPatrol iOS application and related services. By using MerchPatrol, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Authentication Information

• Apple Sign-In: MerchPatrol utilizes Sign In with Apple for private, secure authentication. When you sign in, Apple provides a unique user identifier and, if granted, your name and email address (or private relay alias).
• Unique Identifier: Your unique authentication ID connects your profile securely with our backend database.

2.2 Profile & Marketplace Information

• Profile Attributes: When configuring your account, you may provide a unique username (@username), optional display name, bio, location/postal code for local shipping estimates, and preferred profile styling.
• Preset Avatars: Profile avatars are selected from a shared, preset collection of licensed/in-app character illustrations. We do not store or require personal user photo uploads for avatars.
• Marketplace & Community Listings: Physical items (such as vinyl records, cassettes, apparel) you post for sale or showcase, including photos, descriptions, and listing statuses.
• Reviews & Ratings: Ratings and written reviews submitted between buyers and sellers following completed trades and purchases.

2.3 Collection & Integration Data

• Discogs Integration: If you connect your Discogs account, we sync your public Discogs vinyl collection and wishlist items to display in your MerchPatrol collection tab.
• Saved Alerts: Product drops and merchandise alerts you choose to bookmark for tracking.

2.4 Device & Push Notification Data

• Device Tokens: When you enable push notifications, your device generates a Firebase Cloud Messaging (FCM) token to deliver real-time drop and restock alerts.
• Multi-Device Subscriptions: Records of artist and product topics your device is subscribed to, synchronized across your active installations.

3. How We Use Your Information

We use your information strictly to operate and enhance MerchPatrol services:

• Authenticating your identity and maintaining your active sessions
• Delivering targeted merchandise drop alerts and restock notifications via FCM
• Powering community marketplace listings, trade negotiations, and direct buyer-seller messaging
• Syncing your vinyl collection and wishlist preferences
• Preventing marketplace fraud, spam, and abusive behavior
• Complying with statutory financial, tax, and legal obligations

4. Data Storage and Security

MerchPatrol stores data securely using Supabase enterprise cloud infrastructure powered by PostgreSQL:

• Row-Level Security (RLS): Granular PostgreSQL security policies ensure that private records and settings are accessible only by the authenticated owner.
• Encryption: All data is encrypted in transit using TLS 1.3 and at rest using AES-256 encryption.
• Payment Credentials: MerchPatrol does not store credit card numbers or banking credentials. Financial transactions are conducted directly through PayPal Goods & Services.

5. Account Deletion and Data Retention (Right to Erasure)

In compliance with Apple App Store Review Guideline 5.1.1(v), GDPR (Article 17), and CCPA, you have the absolute right to delete your account and request erasure of your personal data at any time directly within the app.

5.1 How to Delete Your Account

Navigate to Profile → Settings → Delete Account. Confirming account deletion initiates an immediate, irreversible decommissioning of your profile.

5.2 Data Permanently Removed Upon Deletion

• Personal Profile: Your display name, bio, location/postal code, avatar selection, glow colors, PayPal wallet connection, and linked Discogs account credentials. (Preset avatar images remain in the shared app collection).
• Collections & Bookmarks: Your entire personal vinyl collection inventory, vinyl wishlist, and saved drop alerts.
• Active Listings: Any active unsold community listings are automatically delisted and removed from the marketplace.
• Multi-Device Subscriptions: All device tokens and topic subscriptions across all devices linked to your account are unlinked and permanently unsubscribed from backend notification queues.
• Local Caches: On-device notification image caches and stored credentials are immediately purged from device storage.
• Apple Authorization: The link between your Apple ID and MerchPatrol is revoked.

5.3 Data Retained for Integrity & Legal Compliance

To preserve marketplace trust, prevent fraudulent re-registration, and satisfy tax/accounting regulations, certain records are retained in an anonymized or archived format:

• Unique @username: Your unique username remains reserved to prevent malicious actors from impersonating your past listings or identity.
• Transaction & Order History: Records of completed sales, purchases, and trades (including receipts and shipping records) are retained for dispute resolution, fraud investigation, and statutory tax reporting.
• Community Reviews: Public ratings and reviews submitted by or about your completed transactions remain visible to uphold community integrity.
• Account Tenure: Account creation timestamp and review counts remain archived.

6. Active Trade Safety Guard

To protect buyers and sellers from stranded funds or goods, MerchPatrol prevents account deletion if you have active, unresolved trades or orders in progress. All active transactions must be completed or cancelled prior to deleting an account.

7. Contact Us

If you have questions regarding this Privacy Policy or need assistance exercising your data rights, please contact our privacy team at support@merchpatrol.com.