Privacy Policy

1. What we collect

• Account details you provide - name, email, and handle.
• Messages sent through the platform and listing information.
• IP address, browser/device metadata, and access timestamps - including, on your first visit, using your IP address to guess your country so we can suggest a display currency (see Your choices).
• Payment and transaction records from checkout, boosts, and wallet activity.
• Anonymous page-view records (which listing, service, or profile page was viewed), briefly tied to your IP address for abuse rate-limiting - not linked to your account.
• Site-wide traffic analytics - which pages are visited and the referring site's domain (not the full URL) - tied to a rotating anonymous visitor identifier derived from your IP address and browser that changes every 24 hours. This isn't a cookie and nothing is stored in your browser for it; it's used only to show buyauser internal, aggregate traffic stats like page views and top referrers, never to identify you individually.
• Presence data - whether you're currently online and when you were last active, visible to the people you're messaging.
• Free-text descriptions you submit to the AI username matcher.

We don't sell or rent your personal information. Messages are encrypted before storage; see Terms of Service for how and when buyauser can access conversation content, including to prevent fraud.

A message that's automatically blocked for violating the off-platform-contact rule (see Terms) is still stored, encrypted, so buyauser can review it - even though it's never delivered to the recipient.

2. How it's stored

Account and listing data is stored with Supabase. Payments are processed via NOWPayments - we never see or store your wallet's private keys or seed phrase. The site is hosted on Vercel and served through Cloudflare, which may process request metadata (like IP address) for security and performance.

Two more third parties handle specific features: Hugging Face processes the free-text description you submit to the AI username matcher (routed to a DeepSeek-V3 model) to generate ranked results, and Resend sends transactional email on our behalf - order confirmations, message reminders, and moderation or dispute notices - so your email address and the relevant message content pass through it to be delivered.

Some features store data in your browser instead of on our servers - for example, staying signed in across multiple accounts on one device, your shopping cart, and your display currency preference. A remembered account's session data stored this way expires automatically after 7 days.

3. Who we share it with

We only disclose your information when:

• You've given us explicit consent,
• We're required to by applicable law, a court order, or a legal process served on us, or
• It's necessary to protect the rights, safety, or security of buyauser, its users, or the public.

Internally, buyauser admins can access conversation and account data to moderate the platform and prevent fraud - see Terms of Service §8. Every such access is logged.

4. Age requirement

You must be at least 18, or the age of majority in your jurisdiction, to use buyauser - or use it under a parent or guardian's supervision.

5. How long we keep it

We keep account, transaction, and message data while your account is active, and afterward as needed for financial recordkeeping, fraud prevention, and dispute resolution. Moderation records - like strikes and admin review logs - are kept indefinitely as part of the platform's integrity record.

Deleting your account (see below) doesn't erase this - your past transactions, messages, and reviews stay on record for the other people involved, with your own name, avatar, and handle removed instead.

6. Your choices

On your first visit, we guess a display currency for listing prices based on your approximate location, inferred once from your IP address - this is a one-time, cosmetic guess only; it's never re-run, and it never changes what you actually pay, since checkout always stays in USD. If the guess is wrong, or you'd rather see plain USD, change it any time from the currency selector in the header - your choice is remembered in your browser and replaces the guess.

You can delete your account at any time from Settings -> Danger zone. This anonymizes your profile - your name, avatar, and handle are removed and you're signed out for good - but doesn't erase past transactions, messages, or reviews involving other users. Any wallet balance remaining at the time of deletion is forfeited and can't be recovered afterward.

You can also request a copy of your data by emailing support@buyauser.com.

7. Changes to this policy

We may update this policy from time to time. Continuing to use buyauser after a change means you accept the update.