Privacy Policy

When you create an account, we collect your email address and display name. We collect your phone number for identity verification. When you list records for sale, we collect photos you upload, pricing, and condition details. When you make a purchase, your shipping address is collected by Stripe during checkout and shared with the seller for fulfillment. We do not store payment card details — all payments are processed by Stripe.

We maintain a catalog of vinyl releases to help you identify and list records accurately.

We store messages you send to other users, dispute evidence (photos, descriptions), and transaction history.

If you sell on dollrbin, we also collect a seller classification (whether you sell as a business or a private individual) and, for business sellers, trader-identity details required by law: your legal or registered business name, business registration number and country, registered business address, and VAT number where applicable. We may also collect a tax residence country and tax identification number for tax-reporting obligations. Business sellers' trader-identity details are shown publicly on their listings and storefront, as consumer-protection law requires.

On our mobile app, we may collect device tokens for push notifications and camera/photo library data when you take photos of records for listings or identification.

• To operate the marketplace: facilitating listings, purchases, offers, and shipping
• To process payments directly on seller accounts and control seller payouts via Stripe
• To identify vinyl records from photos you submit using AI image analysis
• To send push notifications and emails about orders, offers, and account activity
• To monitor the market for records on your want list
• To verify your identity via phone number for fraud prevention
• To meet legal obligations as a marketplace — seller classification and trader-identity disclosure, and indirect-tax (VAT/GST/sales tax) and income reporting where required
• To prevent fraud and enforce our terms of service
• To improve the platform and fix bugs

We share data with third-party service providers only as necessary to operate dollrbin:

• Payment processing: to process transactions on seller accounts and manage seller payouts (payment details are handled directly by our payment processor and never stored on our servers)
• AI identification: photos submitted for record identification are processed by an AI provider but are not stored after processing
• Email delivery: to send transactional emails such as order confirmations and shipping updates
• Hosting and infrastructure: to serve the platform and store your data securely
• Error monitoring: to detect and fix bugs (crash reports may include anonymized usage data)
• SMS verification: your phone number is sent to our SMS provider to deliver verification codes for identity confirmation
• Push notifications: to deliver notifications on the mobile app
• Music database: we use an internal catalog of vinyl releases to power record identification and search

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

Your data is retained as long as your account is active. Transaction records, and seller tax and trader-identity records, are kept for the periods required by tax, accounting, and marketplace-reporting law (which may extend beyond account deletion). If you delete your account, your personal data is removed from our systems within 30 days, except records we are legally required to retain, which are kept only for that purpose and then deleted.

We keep cookies to a minimum and do not use advertising or cross-site tracking cookies, so dollrbin does not require a cookie consent banner. The cookies and similar browser storage we use fall into three categories:

• Essential — authentication, session management, cart, and security (e.g. bot protection). The site cannot function without these.
• Functional — first-party preferences such as your sidebar state and recently-viewed records, stored to improve your experience.
• Analytics — we use privacy-friendly, cookieless analytics (Vercel Analytics) to understand aggregate traffic. It does not set cookies or track you across other sites.

We use industry-standard measures to protect your data, including encrypted connections (TLS/SSL), secure cloud hosting, and access controls. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

Dollrbin is not intended for users under 18. We do not knowingly collect information from children.

You can access, update, and permanently delete your account and personal data yourself at any time in your account settings — no need to wait on us. You can also request a data export or deletion by emailing support@dollrbin.com. You may disable push notifications in your device settings at any time.

If you are a California resident, you have the right to:

• Know what personal information we collect and how it is used
• Request deletion of your personal information
• Opt out of the sale of your personal information — dollrbin does not sell your personal information
• Not be discriminated against for exercising your privacy rights

You can delete your account and data yourself in your account settings. For any other request, email support@dollrbin.com — we will respond within 45 days.

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have the following rights under the General Data Protection Regulation:

• Access: request a copy of the personal data we hold about you
• Rectification: request correction of inaccurate or incomplete data
• Erasure: request deletion of your personal data
• Portability: request your data in a structured, machine-readable format
• Restriction: request that we limit processing of your data
• Objection: object to processing based on legitimate interest
• Withdraw consent: where processing is based on consent, you may withdraw it at any time

Our legal bases for processing your data are: performance of a contract (operating the marketplace, processing transactions), legal obligation (seller classification and trader-identity disclosure, VAT/tax calculation and collection, and platform tax reporting such as DAC7), legitimate interest (fraud prevention, platform improvement, error monitoring), and consent (push notifications, optional integrations).

You can delete your account and data yourself in your account settings. For access, portability, or any other request, email support@dollrbin.com — we will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.

dollrbin is based in the United States. If you use the Service from outside the US, your data will be transferred to and processed in the United States. By using the Service, you consent to this transfer.

We may update this policy from time to time. We will notify users of material changes via email or in-app notification.

Questions about this policy? Email support@dollrbin.com.