Privacy Policy

SpotMark (“SpotMark,” “we,” “us,” or “our”) operates the real-world physical brand placement marketplace located at spotmark.shop. This Privacy Policy describes how we collect, use, and protect your personal information when you access or use our website, services, and applications.

1. Information We Collect

We collect information you provide directly to us when interacting with the marketplace:

• Account & Contact Details: Email address, full name, and authentication data used for email and password sign-in, account confirmation, and password resets.
• Creator Profile Information: Display name, public bio, profile avatar photo, and social links or athletic credentials you choose to share.
• Listing & Route Content: Item and apparel photographs (front and back views), mapped bounding-box placement coordinates, category selections, event details, and commuter route descriptions.
• Buyer & Brand Information: Brand name, official website URL, and vector/raster brand logos uploaded for placement display.
• Fulfilment & Proof Evidence: Timestamped photographs and location confirmation submitted by sellers as proof of physical placement delivery.

2. Payments and Financial Data

• Buyers: When placing a bid or purchasing a placement, your payment is processed directly through Stripe-hosted Checkout under Stripe's PCI-DSS compliant infrastructure.
• Sellers & Creators: Payout onboarding is handled via Stripe Connect. Stripe collects and verifies bank account routing numbers, identity documentation, and tax details in accordance with applicable financial regulations.

3. How We Use Your Information

We use collected data solely to deliver, secure, and improve marketplace operations:

• Facilitating the discovery, auctioning, and booking of physical brand placements.
• Holding buyer payments in SpotMark's Stripe account until fulfilment approval and transferring the seller's share through Stripe Connect.
• Transmitting essential transactional email notifications (e.g., outbid notices, auction victory alerts, and payout confirmations) via Resend.
• Preventing fraud, mitigating payment disputes, and enforcing marketplace safety standards.
• Understanding aggregate website visits and page views through Vercel Web Analytics.

4. Data Storage, Security & Infrastructure

We employ industry-standard technical safeguards to protect your personal information. Our database and cloud object storage are hosted through Supabase with strict Row Level Security (RLS) policies. All communication between your browser and our servers is encrypted using Transport Layer Security (TLS 1.3 / HTTPS).

5. Third-Party Service Providers

We work with trusted third-party providers who process data strictly on our behalf:

• Stripe, Inc.: Payment processing, platform account balances, Connect transfers, and payout onboarding.
• Supabase Inc.: Authentication, PostgreSQL database storage, and secure media storage buckets.
• Resend, Inc.: Transactional email delivery.
• Vercel Inc.: Application hosting, content delivery, and anonymous website analytics. Web Analytics does not use tracking cookies.

We never sell, rent, or trade your personal information or brand assets to third-party advertisers or data brokers.

6. Your Rights and Data Deletion

You have the right to access, review, modify, or permanently delete your account information and associated listings. You may submit an export or account deletion request at any time by emailing privacy@spotmark.shop. We will process your verified request within 30 days, subject to legal record-keeping requirements for completed financial transactions.

7. Contact Us

If you have questions about this Privacy Policy or our data practices, please reach out to us: