Privacy Policy
1. Principal-Scoped Tenant Isolation
Every inventory item, canonical listing, photo, marketplace account, conversation, negotiation, and mandate is strictly bound to an authenticated principalId.
2. Encrypted Credential Vault
Marketplace OAuth access tokens, refresh tokens, PKCE verifiers, and webhook secrets are encrypted at rest inside MarketplaceAccount.
3. Coarse-to-Exact Location Gating
Public discovery exposes only coarse city/region metadata. Exact pickup addresses require an agreed deal and authorized handoff.
4. Data Retention & Purge
Retained message bodies and evidence artifacts are purged via pnpm retention:purge while preserving append-only audit digests.