Privacy Policy

1. Data Collection

We collect the following information when you use the RDM-7 Marketplace:

• Account information: name, email address, and profile picture provided through Google authentication.
• Profile data: display name, bio, and avatar that you choose to provide.
• Upload data: layout files, DBC files, screenshots, descriptions, and metadata you submit.
• Usage data: download counts, ratings, and interaction patterns with the Service.
• Technical data: browser type, IP address, and device information collected automatically.

2. How We Use Your Data

We use collected information to:

• Provide, maintain, and improve the Marketplace service.
• Process transactions and send related communications.
• Display your public profile and uploaded content to other users.
• Send notifications about downloads, ratings, and payments.
• Detect and prevent fraud, abuse, or security issues.
• Analyze usage patterns to improve user experience.

3. Cookies & Local Storage

The RDM-7 Marketplace uses cookies and local storage for:

• Authentication: maintaining your logged-in session via Supabase auth tokens.
• Preferences: storing user preferences such as recent searches and display settings.
• Analytics: understanding how users interact with the Service to improve functionality.

You can manage cookie preferences through your browser settings. Disabling cookies may affect the functionality of the Service.

4. Third-Party Services

We use the following third-party services to operate the Marketplace:

• Supabase:provides authentication, database, and file storage services. Your data is stored securely in Supabase's infrastructure. See Supabase's Privacy Policy.
• Stripe: handles payment processing for paid listings. When you make a purchase or connect a seller account, your payment information is handled directly by Stripe. We do not store credit card numbers. See Stripe's Privacy Policy.
• Google: provides OAuth authentication. We only access your basic profile information (name, email, avatar). See Google's Privacy Policy.
• Vercel: hosts the web application and may process request logs. See Vercel's Privacy Policy.

5. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: request a copy of the personal data we hold about you.
• Correction: request correction of inaccurate personal data.
• Deletion: request deletion of your personal data, subject to legal retention requirements.
• Portability: request your data in a portable, machine-readable format.
• Objection: object to certain types of data processing.

To exercise any of these rights, please contact us using the information below.

6. Data Security

We implement industry-standard security measures to protect your data, including encrypted connections (HTTPS/TLS), secure authentication tokens, and access controls. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

7. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service. If you delete your account, we will remove your personal data within 30 days, except where retention is required by law or for legitimate business purposes (such as transaction records).