Privacy Policy

Last updated: July 29, 2026

RUBUYIN LLC ("RUBUYIN," "we," "us," or "our") operates the RUBUYIN mobile and web application (the "Service"), accessible at app.rubuyin.com and through our mobile applications. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

Please read this policy carefully. If you disagree with its terms, please discontinue use of the Service.

1. Information We Collect

We collect information you provide directly to us, including:

• Account information — your name, email address, and password when you create an account
• Profile information — display name, username, social media handles, shop name, address, and contact details you choose to add
• Card inventory data — information about trading cards you list, including card names, grades, prices, and photos
• Transaction data — offer history, accepted deals, and payment confirmations
• Payment information — billing details processed securely through Stripe. We do not store full credit card numbers on our servers
• Communications — messages and notes exchanged through the platform between buyers and sellers

We also collect certain information automatically when you use the Service:

• Device type, operating system, and browser information
• IP address and general location data
• Usage data, including features accessed and time spent in the app
• QR code scan events

2. How We Use Your Information

We use the information we collect to:

• Create and manage your account
• Facilitate transactions between buyers and sellers on the platform
• Process subscription payments through Stripe
• Display your public profile information to other users (subject to your visibility settings)
• Send transactional emails, such as account confirmation and offer notifications
• Analyze usage patterns to improve the Service
• Enforce our Terms of Service and prevent fraud or abuse
• Comply with legal obligations

We do not use your information to serve third-party advertisements, and we do not sell your personal information to third parties.

3. How We Share Your Information

We share your information only in limited circumstances:

• With other RUBUYIN users — profile information and card listings you choose to make public are visible to other users. You control visibility through your profile settings.
• With service providers — we share data with third-party vendors who help operate the Service, including:
  • Supabase — database and authentication infrastructure
  • Stripe — payment processing and subscription management
  • Vercel — web hosting and content delivery
• For legal reasons — if required by law, court order, or government authority, or to protect the rights and safety of RUBUYIN and its users.
• In a business transfer — if RUBUYIN is acquired or merges with another company, your information may be transferred as part of that transaction.

4. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required by law to retain certain information.

Transaction records may be retained for up to 7 years for tax and accounting purposes.

5. Your Rights and Choices

You have the right to:

• Access — request a copy of the personal information we hold about you
• Correct — update or correct inaccurate information through your profile settings
• Delete — request deletion of your account and associated personal data
• Opt out — unsubscribe from non-transactional emails at any time
• Portability — request an export of your data in a machine-readable format

To exercise any of these rights, contact us at rubuyingllc@gmail.com. We will respond to your request within 30 days.

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information is collected, the right to deletion, and the right to opt out of the sale of personal information. We do not sell personal information.

6. Security

We implement industry-standard security measures to protect your information, including SSL/TLS encryption for data in transit, encrypted storage via Supabase, and row-level security policies that ensure users can only access their own data.

Payment information is handled exclusively by Stripe, which is PCI DSS compliant. We never store full credit card numbers on our servers.

No method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

7. Children's Privacy

RUBUYIN is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected information from a child under 13, please contact us immediately at rubuyingllc@gmail.com.

8. Third-Party Links

The Service may contain links to third-party websites, including social media platforms linked from user profiles (Instagram, X/Twitter, Whatnot, eBay, TikTok). We are not responsible for the privacy practices of these sites. We encourage you to review their privacy policies before providing any personal information.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date. For significant changes, we may also send an email notification to the address associated with your account.

Your continued use of the Service after any changes constitutes your acceptance of the updated Privacy Policy.

10. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us: