Privacy Policy

Effective Date: July 7, 2026

1. Introduction

Welcome to Brebox Marketplace ("we," "us," or "our"). We operate a multi-vendor e-commerce platform and mobile applications connecting buyers with independent third-party sellers. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our iOS and Android mobile applications (collectively, the "App"), and utilize our services (collectively, the "Platform").

2. Information We Collect

We collect personal information that you provide directly, data collected automatically through your device, and information required to fulfill marketplace orders.

1. Buyer Data: Account credentials (name, email, phone number), shipping and billing addresses, purchase history, and customer service correspondence.
2. Seller Data: Business name, physical address, Employer Identification Number (EIN) or Social Security Number (SSN), banking/payout information, and product catalog details.
3. Device & App Usage Data: IP address, unique device identifiers (e.g., IDFA for iOS, GAID for Android), browser type, operating system version, mobile network information, and app crash logs collected through essential operational tools.

3. How We Use Your Information

We use your data for the following business purposes:

1. Facilitating and processing transactions between buyers and sellers.
2. Managing seller onboarding, verifying identities, and processing payouts via Stripe.
3. Fulfilling and routing orders through our network of independent sellers and third-party logistics (3PL) fulfillment warehouses.
4. Sending transactional push notifications to your mobile device (such as order confirmations and shipping updates).
5. Maintaining, securing, optimizing, and improving our website and mobile applications.
6. Preventing fraud, protecting against security incidents, and resolving disputes.
7. Complying with federal, state, and local legal, regulatory, and sales tax obligations.

4. How We Share Information

As a multi-vendor marketplace utilizing 3PL infrastructure, sharing data is necessary to complete operations:

1. With Sellers: We share the buyer's name and order details with the specific independent seller fulfilling the purchase. Sellers act as independent data controllers.
2. With 3PL and Shipping Partners: To fulfill orders, we share buyers' names, shipping addresses, and phone numbers with our third-party logistics (3PL) warehouse networks and regional shipping carriers located across the United States.
3. With Payment Processors: Payment processing is handled securely by Stripe. We do not store your full credit card details on our servers.
4. Legal & Compliance Obligations: We may disclose data to law enforcement or regulators in response to subpoenas, court orders, or state-specific tax reporting requirements.

5. Cookies, Mobile Identifiers, and Tracking Technologies

We only use essential and functional cookies on our website and core diagnostic identifiers in our mobile apps necessary to keep our Platform running (such as keeping you logged in, remembering items in your cart, tracking app crashes, or routing push notifications). We do not use third-party tracking cookies or mobile advertising IDs for targeted, cross-context behavioral advertising.

6. Push Notifications

We send transactional push notifications to your mobile device to provide real-time updates regarding your account activity and order status (e.g., confirmation and shipment tracking). We do not use push notifications for promotional or marketing purposes. You can modify your push notification preferences or turn them off at any time through your mobile device's system settings.

7. US State Privacy Rights (Including California CCPA/CPRA)

Depending on your state of residence, you may have specific rights regarding your personal information:

1. Right to Know/Access: You can request a list of the personal data we collect, use, and share about you.
2. Right to Delete & Account Closure: You can request that we delete your personal information and close your account. You can request account deletion directly within the settings menu of our iOS and Android mobile apps.
3. Right to Correct: You can request that we fix inaccurate personal data.
4. No Sale or Sharing of Personal Data: We do not sell your personal information or share it with third parties for cross-context behavioral or targeted advertising.

To exercise any of these rights, please submit a request using the contact details below or via the account deletion feature in the App.

8. Children's Privacy

Our Platform is directed to a general audience and is not intended for children under the age of 16. We do not knowingly collect personal information from minors.

9. Changes to This Policy

We reserve the right to modify this Privacy Policy at any time. We will notify you of any material changes by updating the "Effective Date" at the top of this page and, where required by app store guidelines, providing an in-app notification.

10. Contact Us

For questions, data requests, or concerns regarding this policy, please contact us at:

Email: privacy@brebox.com