Privacy Policy

This policy explains what we do with personal information when you use Honest Phones as a buyer, seller, or visitor. It should be read with our Terms of Service. By using the Service you agree to this policy.

• Account information: email address, password (stored only as a secure hash by our authentication provider), display name, and your seller status.
• Listing information: the device details you enter, including make, model, structured condition fields, and the device IMEI/serial number, plus the photos you upload.
• Transaction information: orders, amounts, fees, shipping tracking, delivery and inspection events, disputes, and reviews. Card details and bank details are collected and stored by Stripe, our payment processor — not by us.
• Identity verification: where required for sellers or higher-volume accounts, identity information is collected and verified through Stripe Identity. We receive the verification result and limited confirmation data, not the underlying documents.
• Communications: messages you send us (for example, support or dispute correspondence).
• Technical and usage data: IP address, device and browser information, and log data generated as you use the Service, and strictly necessary cookies used to keep you signed in.

• To operate the marketplace: create listings, process orders, hold and release escrow, and enable payouts.
• For trust and safety: to screen device IMEIs against a blacklist before publishing, verify seller identity, detect and prevent fraud and abuse, and enforce our Terms and Prohibited Items Policy.
• To resolve disputes and provide support.
• To send transactional messages (confirmations, shipping, dispute and account notices).
• To comply with legal obligations, including tax, and to respond to lawful requests — including, where a device is reported stolen or its IMEI is flagged, sharing information with the relevant authorities or reporting bodies.
• To maintain, secure, and improve the Service.

We do not sell your personal information. We share it only as needed to run the Service:

• With the other party to a transaction: a buyer and seller receive the information necessary to complete an order (for example, the buyer’s shipping address is provided to the seller; the seller’s display name and identity-verification status are shown to the buyer).
• Stripe (payments, payouts, escrow, and identity verification) and Supabase (our database, authentication, and file storage), and other service providers who process data on our behalf under confidentiality obligations.
• IMEI screening providers for the blacklist check.
• Authorities and third parties where required by law, to enforce our Terms, to address fraud or a stolen-device report, or in connection with a merger, acquisition, or sale of assets.

Payment card and bank information is collected and processed by Stripe under Stripe’s own terms and privacy policy. We receive confirmation of payment, payout, and identity-verification status and limited related data, but we do not receive or store your full card number.

We use strictly necessary cookies to keep you signed in and to keep the Service secure. These are required for the Service to function; we do not use them for third-party advertising.

We keep information for as long as your account is active and as long as needed to provide the Service, and afterward as required to comply with legal, tax, accounting, fraud-prevention, and dispute-resolution obligations. Transaction and IMEI records in particular may be retained after an account closes for these purposes.

We protect data with access controls, database row-level security, and encryption in transit, and we rely on Stripe and Supabase for payment and infrastructure security. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security.

Depending on where you live, you may have rights to access, correct, delete, or port your personal information, or to object to or restrict certain processing. To make a request, contact us at support@honestphones.com. We will respond as the law requires. Some information must be retained even after a deletion request — for example, transaction, tax, and fraud-prevention records, and IMEI history tied to a device’s provenance.

The Service is not directed to anyone under 18, and we do not knowingly collect personal information from children.

Where the GDPR or UK GDPR applies, we process personal information on these bases: to perform our contract with you (operating your account and transactions); our legitimate interests in running a safe marketplace (fraud prevention, IMEI screening, security, and improving the Service); compliance with legal obligations (tax, accounting, responding to lawful requests); and your consent where we ask for it. You may object to processing based on legitimate interests as described below.

If you are a California resident, you have rights under the CCPA/CPRA to know what personal information we collect and how we use and share it, to access and delete it, and to correct it, subject to legal exceptions. We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We will not discriminate against you for exercising these rights. Submit a request at support@honestphones.com; we will verify it before acting.

We and our service providers (including Stripe and Supabase) are based in or process data in the United States. If you access the Service from outside the United States, your information will be transferred to and processed in the United States and other countries whose data laws may differ from yours. Where required, we rely on appropriate safeguards for such transfers.

If a security incident affects your personal information, we will notify you and the relevant authorities where and as required by applicable law.

We may update this policy; we will change the version and effective date when we do. Questions or requests: support@honestphones.com.