Privacy Policy

1. Introduction

GPT-HQ ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and share information when you use our marketplace platform at gpt-hq.com (the "Platform"). By using the Platform you agree to the practices described in this Policy.

2. Information We Collect

Information You Provide

• Account data: name, email address, username, and password (stored as a hashed value — we never store your plain-text password).
• Profile data: optional bio, profile image, and seller information you add to your account.
• Transaction data: products you purchase or sell, payment method metadata (processed and stored by Stripe — we do not store full card numbers).
• Communications: messages you send to our support team.
• User-generated content: product listings, reviews, forum posts, and replies you create on the Platform.

Information Collected Automatically

• Usage data: pages visited, product views, search queries, and feature interactions.
• Device and browser data: IP address, browser type, operating system, and referring URLs, collected for security and analytics purposes.
• Cookies and sessions: session tokens required for authentication; optional analytics cookies (see Section 6).

3. How We Use Your Information

• Provide, operate, and improve the Platform.
• Process transactions and send purchase/sale confirmations.
• Authenticate your identity and maintain account security.
• Send transactional emails (receipts, password resets, account notices).
• Send promotional emails about new features or offers — you may opt out at any time.
• Detect, investigate, and prevent fraud, abuse, and violations of our Terms.
• Comply with legal obligations.
• Produce aggregated, anonymized analytics to understand Platform usage (no individual user is identifiable in these reports).

4. How We Share Your Information

We do not sell your personal information. We share information only in the following limited circumstances:

• Service providers: Trusted third-party providers who process data on our behalf, including:
  • Supabase — database hosting and storage (EU/US data centers)
  • Stripe — payment processing
  • Vercel — platform hosting and edge delivery
  • Resend — transactional email delivery
• Other users: Your public profile (username, bio, seller rating) and product listings are visible to other users. Your email address is never publicly visible.
• Legal requirements: We may disclose information if required by law, court order, or to protect the rights and safety of GPT-HQ or others.
• Business transfers: If GPT-HQ is acquired or merged, your information may be transferred as part of that transaction. We will notify you before your data is subject to a different privacy policy.

5. Data Retention

We retain your account information for as long as your account is active. If you close your account, we will delete or anonymize your personal data within 90 days, except where we are required to retain it for legal, tax, or fraud-prevention purposes. Aggregated, anonymized analytics data may be retained indefinitely.

6. Cookies

We use strictly necessary cookies to manage your authenticated session. We do not use advertising or tracking cookies. If we introduce optional analytics cookies in the future, we will ask for your consent before setting them.

7. Security

We implement industry-standard security measures including encrypted connections (HTTPS/TLS), bcrypt password hashing, and access controls. No method of transmission over the internet is 100% secure. We encourage you to use a strong, unique password and to notify us immediately at support@gpt-hq.com if you suspect any unauthorized account access.

8. Your Rights

Depending on your location you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Ask us to correct inaccurate or incomplete data.
• Deletion: Request deletion of your account and personal data.
• Portability: Receive your data in a structured, machine-readable format.
• Opt-out: Unsubscribe from marketing emails at any time using the unsubscribe link in any email or by contacting us.
• Restriction / Objection: Request that we limit or stop certain processing of your data.

To exercise any of these rights, email us at privacy@gpt-hq.com. We will respond within 30 days. We may ask you to verify your identity before fulfilling your request.

9. Children's Privacy

GPT-HQ is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us immediately at support@gpt-hq.com and we will delete it.

10. International Users

GPT-HQ is operated from the United States. If you access the Platform from outside the US, your information may be transferred to and processed in the US, where data protection laws may differ from your country. By using the Platform you consent to this transfer.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will update the Effective Date and, for material changes, notify you by email or in-app notice. Continued use of the Platform after changes take effect constitutes acceptance of the revised Policy.

12. Contact Us

If you have questions or concerns about this Privacy Policy or how we handle your data, please contact us at: