Privacy Policy

Last updated: December 2025

Campus Collective (“we”, “our”, “us”) is a peer-to-peer (C2C) marketplace that connects college students to buy, sell, and trade items and services within their campus community. We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, share, and safeguard your information.

By using the Campus Collective app or website, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

We collect the following types of data to provide and improve our marketplace services:

1.1 Account Information

Name: Used to identify you on the platform and in transactions
Email Address: Used for account creation, authentication, communication, and notifications
Student Email Verification: We verify your .edu email address to confirm student status
Authentication: We use passwordless login via magic links and verification codes sent to your email
Session Tokens: We maintain persistent login sessions so you don’t need to authenticate every time

1.2 Profile Information

Profile Photo (optional): Displayed on your profile and listings
Bio (optional): Help other users learn about you
Campus Affiliation: Your university name

1.3 Coarse Location

User-Provided Address: You can provide your address information in two ways:
- In your profile settings (optional)
- When creating a product listing (so buyers know pickup/delivery location)
This is manually entered by you, not automatically collected via GPS
We only display the address information you choose to share
We do NOT track your real-time location or use GPS coordinates

1.4 Payment Information

Payment Data: Processed securely by Stripe, our payment processor
- Credit/debit card information
- Bank account details (for sellers receiving payments)
- Transaction history
We never store your full payment card details on our servers; Stripe handles all sensitive payment data in compliance with PCI-DSS standards

1.5 Photos or Videos

Product Images: Photos you upload when creating marketplace listings
Profile Pictures: Your avatar or profile photo
All media is stored securely and used only for the purposes you provide it for

1.6 Messages and Communications

Chat Messages: Conversations between buyers and sellers about listings
Notifications: In-app and email notifications about offers, messages, and updates
Messages are stored to facilitate transactions and provide customer support

1.7 Crash Data

Crash Reports: Automatically collected via Firebase Crashlytics to identify and fix bugs
Device Information: Device model, operating system version, app version
Stack Traces: Technical error information when the app crashes
This data is used only for crash analysis and bug fixing
We do NOT track user behavior or use analytics for marketing purposes

1.8 Listing and Transaction Data

Product Listings: Items you post for sale (title, description, price, category)
Reviews and Ratings: Feedback you give or receive
Likes and Saves: Items you like or save for later
Transaction History: Records of purchases and sales

2. How We Use Your Information

We use the collected data for the following purposes:

2.1 To Provide Marketplace Services

Create and manage your account with passwordless authentication (magic links and verification codes)
Enable you to post, browse, and purchase listings
Facilitate communication between buyers and sellers
Process payments and transactions securely through Stripe
Verify student eligibility and prevent fraud
Maintain secure login sessions for your convenience

2.2 To Improve App Functionality

Display your address to potential buyers when you create listings
Show your profile location if you choose to add it
Fix crashes and bugs using Firebase Crashlytics
Improve app stability and performance

2.3 To Ensure Safety and Trust

Detect and prevent fraud, spam, and abuse
Enforce our Terms of Service and Community Guidelines
Resolve disputes between users
Verify identities and student status

2.4 To Communicate With You

Send login verification codes and magic links for authentication
Send transactional emails (order confirmations, receipts)
Notify you of messages, offers, and activity on your listings
Provide customer support
Send important updates about the service
Send marketing communications (you can opt-out anytime)

2.5 To Comply With Legal Obligations

Respond to legal requests and prevent harm
Protect our rights and property
Comply with applicable laws and regulations

We do not sell your personal data to third parties. We only share data in the following circumstances:

3.1 With Other Users

Your public profile (name, photo, bio, ratings, and profile address if provided) is visible to other users
Listings you post are visible to all users of the platform, including any address you add to the listing
Messages are shared only with the users you’re chatting with
Note: Only share address information you are comfortable making public

3.2 With Service Providers

We work with trusted third-party service providers who help us operate the platform:

Stripe: Payment processing and fraud prevention (PCI-DSS compliant)
Supabase: Secure database hosting and authentication
Firebase Crashlytics: Crash reporting and bug detection (Google)
Google workspace: Send transactional and marketing emails

All service providers are contractually obligated to protect your data and use it only for the purposes we specify.

Important: We do NOT use third-party analytics or tracking services for marketing or user behavior analysis.

3.3 For Legal Reasons

We may disclose your information if required by law or in response to:

Valid legal processes (subpoenas, court orders)
Requests from law enforcement or government authorities
Protection of our rights, property, or safety
Prevention of fraud or illegal activities

3.4 Business Transfers

If Campus Collective is acquired, merged, or sells assets, your data may be transferred to the new entity. We will notify you of any such change.

4. Data Storage and Security

4.1 Where We Store Your Data

Supabase: User accounts, profiles, listings, and messages
Stripe: Payment and transaction data
All data is stored in secure, encrypted databases in the United States

4.2 How We Protect Your Data

Encryption: All data transfers use HTTPS/TLS encryption
Passwordless Authentication: We do NOT store passwords; login is via magic links and verification codes sent to your email
Secure Sessions: Login sessions are securely encrypted and stored
Access Controls: Limited employee access on a need-to-know basis
Regular Security Audits: We monitor for vulnerabilities and threats
Stripe PCI Compliance: Payment data is handled by PCI-DSS certified processors

While we implement industry-standard security measures, no system is 100% secure. We encourage you to keep your email account secure and log out on shared devices.

5. Data Retention

We retain your data for as long as necessary to provide our services and comply with legal obligations:

Active Accounts: Data is retained while your account is active
Login Sessions: Session tokens remain valid until you log out or they expire (typically 30-90 days)
Verification Codes: Magic links and verification codes expire within 10-15 minutes of being sent
Deleted Accounts: Most data is deleted within 30 days of account deletion
Legal Requirements: Some data may be retained longer for legal, tax, or fraud prevention purposes
Backup Systems: Deleted data may persist in backups for up to 90 days before permanent deletion

You can request deletion of your account and data at any time by contacting support@campuscollective.site.

6. Your Privacy Rights

You have the following rights regarding your personal data:

6.1 Access and Portability

Request a copy of all data we have about you
Download your data in a portable format

6.2 Correction and Updates

Edit your profile information at any time in the app
Request correction of inaccurate data

6.3 Deletion and Session Management

Delete your account and request removal of your data
Log out at any time to end your session and clear authentication tokens
Note: Some data may be retained for legal or safety reasons (e.g., transaction records)

6.4 Opt-Out Rights

Marketing Emails: Unsubscribe from promotional emails (transactional emails cannot be disabled)
Push Notifications: Disable notifications in your device or app settings
Crash Reports: Can be disabled through Firebase settings, though this may affect our ability to fix bugs

6.5 California Privacy Rights (CCPA)

If you are a California resident, you have additional rights:

Right to know what data we collect and how it’s used
Right to request deletion of your data
Right to opt-out of data “sales” (we do not sell data)
Right to non-discrimination for exercising your rights

If you are in the European Economic Area, you have additional rights:

Right to data portability
Right to object to processing
Right to withdraw consent
Right to lodge a complaint with a supervisory authority

To exercise any of these rights, contact us at support@campuscollective.site.

7. Tracking and Analytics

We do NOT track users for advertising or marketing purposes.

❌ No third-party advertising SDKs
❌ No user behavior tracking across apps
❌ No analytics for profiling or targeting
✅ Only Firebase Crashlytics for crash reporting
✅ All data collection is for app functionality only

We value your privacy and believe in transparency. Your data is never sold or used for purposes beyond providing the marketplace service.

8. Children’s Privacy

Campus Collective is intended for college students aged 18 and older. We do not knowingly collect data from anyone under 18. If we discover that a user is under 18, we will delete their account and data immediately.

If you believe a user is under 18, please contact us at support@campuscollective.site.

9. Third-Party Links and Services

Our app may contain links to external websites or services (e.g., social media, payment processors). We are not responsible for the privacy practices of these third parties. Please review their privacy policies before providing any personal information.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make significant changes:

We will update the “Last updated” date at the top
We will notify you via email or in-app notification
Your continued use of the app constitutes acceptance of the updated policy

We encourage you to review this policy periodically.

11. International Data Transfers

Campus Collective operates primarily in the United States. If you access our services from outside the U.S., your data may be transferred to and stored in the U.S. By using our services, you consent to this transfer.

We take steps to ensure your data receives adequate protection in accordance with applicable laws.

12. Data Collection Summary

For transparency and compliance with App Store requirements, here is a summary of data we collect:

Data Type	Purpose	Linked to You	Used for Tracking
Coarse Location	App Functionality	Yes	No
Payment Info	App Functionality	Yes	No
Crash Data	App Functionality	Yes	No
Photos or Videos	App Functionality	Yes	No
Name	App Functionality	Yes	No
Email Address	App Functionality	Yes	No
Emails or Text Messages	App Functionality	Yes	No

Purpose Explanation:

All data collected is for App Functionality only (marketplace operations, payments, chat, crash fixes)
We do NOT use data for advertising, analytics, or personalization purposes

Linked to You: All data is linked to your identity or account

Used for Tracking: NO - We do NOT use your data to track you across apps or websites owned by other companies. We do NOT use third-party analytics or advertising SDKs.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

📧 Email:

General support: support@campuscollective.site
General inquiries: contact@campuscollective.site

🌐 Website: https://campuscollective.site

⏰ Response Time: Within 3 business days (safety issues within 48 hours)

By using Campus Collective, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and sharing of your information as described herein.

If you do not agree with any part of this policy, please do not use our services.

Campus Collective – The student-to-student marketplace for campus services