Privacy Policy

This Privacy Policy explains how iHeartWheels (“iHW”, “we”) collects, uses, shares, and protects information when you use our website, mobile experience, and services (the “Service”). By using the Service, you agree to the practices described here.

1. Information we collect

You give us directly

• Account: name, email, password (hashed), username, avatar, bio, location.
• Listings and messages: photos, videos, descriptions, prices, and all messages you send.
• Shipping addresses: ship-from and ship-to addresses saved to your address book.
• Payment onboarding: when you connect Stripe, Stripe collects your bank / tax information directly — we receive account status flags, but not the underlying bank credentials.
• Support: anything you send us via email or in-app support.

We collect automatically

• Device & usage: IP address, browser type, device model, OS, referrer, pages viewed, features used, timestamps.
• Cookies & local storage: we use first-party cookies and sessionStorage to keep you signed in, remember your saved listings, and measure aggregate usage.
• Transactional events: checkouts, payouts, tracking updates, and dispute activity.

From third parties

• Stripe — payment account status, charges, payouts, disputes.
• Shippo — shipping label metadata, rate quotes, tracking updates.
• Supabase — our database and auth provider.
• Resend — email delivery service.

2. How we use your information

• Provide, operate, and improve the Service (auth, listings, messaging, checkout, escrow, shipping, payouts).
• Verify identity and prevent fraud, abuse, and violations of our Terms.
• Send transactional emails (order confirmations, shipping updates, dispute notices, message alerts). These emails are core to the Service and are not optional.
• Send optional product updates and marketing — only if you opt in.
• Comply with legal obligations, respond to legal process, and enforce our Terms.

3. When we share your information

We do not sell your personal information. We share only as follows:

• With the other party to a transaction: your username, avatar, and ship-to/ship-from address as needed to complete the trade.
• With service providers (Stripe, Shippo, Supabase, Resend, hosting) so they can operate their piece of the platform. Each is bound by their own privacy and security terms.
• For legal reasons: to comply with subpoenas, court orders, or lawful requests, and to protect the safety, rights, or property of iHW, users, or the public.
• In a business transfer: if we’re merged with or acquired by another company, your information may transfer as part of the transaction.

4. Cookies and tracking

We use first-party cookies and sessionStorage for authentication, saved-listing state, and basic aggregate analytics. We do not use cross-site advertising cookies. You may block cookies in your browser, but the Service will not function correctly without at least the authentication cookies enabled.

5. Data retention

We keep account and transaction records as long as your account is active and for a reasonable period afterward to comply with our legal obligations (e.g. tax, dispute resolution, fraud prevention). You can request deletion of your account at any time (see Section 7); we may retain minimal records required by law even after deletion.

6. Security

We use industry-standard practices: TLS in transit, encryption at rest, hashed passwords, row-level access control, and separated administrative privileges. No system is 100% secure, and we make no guarantees; you agree to notify us promptly if you suspect unauthorized use of your account.

7. Your choices and rights

• Access & portability: email support@iheartwheels.com to request a copy of your data.
• Correction: update most fields directly in your profile / settings.
• Deletion: email support@iheartwheels.com to request deletion. We’ll confirm and comply, subject to legal-hold and dispute-in-progress exceptions.
• Marketing opt-out: click the unsubscribe link in any marketing email; transactional emails cannot be turned off.
• California & other state rights: if you reside in a U.S. state with a consumer-privacy law (CA, CO, CT, VA, UT, etc.), you may have additional rights to access, correct, delete, or opt out of certain processing. Email us to exercise these rights — we do not discriminate against users who do.

8. Children

The Service is not intended for anyone under 18. We do not knowingly collect information from children under 13. If you believe a child has provided us information, email us and we’ll delete it.

9. International users

iHW is operated from and hosts data primarily in the United States. If you access the Service from outside the U.S., your information will be transferred to and processed in the U.S., where privacy laws may differ from those in your country.

10. Changes to this Policy

We may update this Policy from time to time. Material changes will be posted in-app or emailed to your registered address at least 7 days before taking effect.

11. Contact

Privacy questions? support@iheartwheels.com