Legal

Privacy Policy

Last updated: May 2026

1. What we collect

When you create an account, we collect your email address and display name. We collect your phone number for identity verification. When you list records for sale, we collect photos you upload, pricing, and condition details. When you make a purchase, your shipping address is collected by Stripe during checkout and shared with the seller for fulfillment. We do not store payment card details — all payments are processed by Stripe.

We maintain a catalog of vinyl releases to help you identify and list records accurately.

We store messages you send to other users, dispute evidence (photos, descriptions), and transaction history.

On our mobile app, we may collect device tokens for push notifications and camera/photo library data when you take photos of records for listings or identification.

2. How we use your data

To operate the marketplace: facilitating listings, purchases, offers, and shipping
To process payments directly on seller accounts and control seller payouts via Stripe
To identify vinyl records from photos you submit using AI image analysis
To send push notifications and emails about orders, offers, and account activity
To monitor the market for records on your want list
To verify your identity via phone number for fraud prevention
To prevent fraud and enforce our terms of service
To improve the platform and fix bugs

3. Third-party services

We share data with third-party service providers only as necessary to operate dollrbin:

Payment processing: to process transactions on seller accounts and manage seller payouts (payment details are handled directly by our payment processor and never stored on our servers)
AI identification: photos submitted for record identification are processed by an AI provider but are not stored after processing
Email delivery: to send transactional emails such as order confirmations and shipping updates
Hosting and infrastructure: to serve the platform and store your data securely
Error monitoring: to detect and fix bugs (crash reports may include anonymized usage data)
SMS verification: your phone number is sent to our SMS provider to deliver verification codes for identity confirmation
Push notifications: to deliver notifications on the mobile app
Music database: we use an internal catalog of vinyl releases to power record identification and search

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

4. Data retention

Your data is retained as long as your account is active. Transaction records are kept for legal and tax compliance. If you delete your account, your personal data is removed from our systems within 30 days, though anonymized transaction records may be retained.

5. Cookies

We use essential cookies for authentication and session management. We do not use advertising or third-party tracking cookies.

6. Data security

We use industry-standard measures to protect your data, including encrypted connections (TLS/SSL), secure cloud hosting, and access controls. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

7. Children's privacy

Dollrbin is not intended for users under 18. We do not knowingly collect information from children.

8. Your rights

You can access, update, or delete your account and personal data at any time through your account settings. You can also request data export or deletion by emailing support@dollrbin.com. You may disable push notifications in your device settings at any time.

9. California privacy rights (CCPA)

If you are a California resident, you have the right to:

Know what personal information we collect and how it is used
Request deletion of your personal information
Opt out of the sale of your personal information — dollrbin does not sell your personal information
Not be discriminated against for exercising your privacy rights

To exercise these rights, email support@dollrbin.com. We will respond within 45 days.

10. European privacy rights (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have the following rights under the General Data Protection Regulation:

Access: request a copy of the personal data we hold about you
Rectification: request correction of inaccurate or incomplete data
Erasure: request deletion of your personal data
Portability: request your data in a structured, machine-readable format
Restriction: request that we limit processing of your data
Objection: object to processing based on legitimate interest
Withdraw consent: where processing is based on consent, you may withdraw it at any time

Our legal bases for processing your data are: performance of a contract (operating the marketplace, processing transactions), legitimate interest (fraud prevention, platform improvement, error monitoring), and consent (push notifications, optional integrations).

To exercise these rights, email support@dollrbin.com. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.

11. International data transfers

dollrbin is based in the United States. If you use the Service from outside the US, your data will be transferred to and processed in the United States. By using the Service, you consent to this transfer.

12. Changes to this policy

We may update this policy from time to time. We will notify users of material changes via email or in-app notification.

13. Contact

Questions about this policy? Email support@dollrbin.com.