Privacy Policy
This policy explains what data Declassified Records (“we”) collects when you use the website or iOS app, why we collect it, who we share it with, and how to delete it. We try to keep this short and specific. If anything is unclear, write to support@declassifiedrecords.shop.
1. What we collect
- Account information. Email address, password (hashed with bcrypt), and optional name, username, profile photo, bio, and shipping address.
- Listings and transactions. Records you list for sale, photos you upload, prices, descriptions, orders you place, and messages you send to other users.
- Payment hand-off details.If you sell, the PayPal.me handle and/or PayPal email you choose to display so buyers can pay you. We do not store payment credentials and we never touch payment funds — see “Payments” below.
- Technical data. Server access logs (IP address, user agent, request path, timestamp) retained for security and debugging.
2. How we use it
- Operate the marketplace — show your listings, deliver your messages, fulfil orders.
- Send transactional email (sign-in links, password resets, order updates).
- Detect and respond to abuse, fraud, and policy violations.
- Improve the product. We do not sell your data and we do not run third-party advertising trackers on the site.
3. Who we share it with
We share the minimum data necessary with these vendors so the service can run. Each is contractually required to handle your data only for the purpose described.
- Vercel — hosts the website. Receives standard server logs.
- Neon — runs the database that stores your account, listings, orders, and messages.
- Cloudflare R2 — stores listing photos and profile images you upload.
- Resend — delivers transactional email (sign-in links, password resets, order notifications).
- Anthropic— when you upload a record photo to the seller flow, the image is sent to Anthropic’s Claude API to draft listing details (artist, album, genre). We do not send your photos anywhere else for AI processing.
- PayPal— when you tap a PayPal payment link, you leave Declassified and interact with PayPal directly. Payments happen entirely on PayPal’s servers; we never see card numbers, bank details, or PayPal credentials. PayPal’s privacy policy applies to that interaction.
4. Payments
Declassified does not process payments. Sellers display a PayPal.me handle and/or PayPal email; buyers pay sellers directly through PayPal’s own website or app, then mark “Payment sent” in Declassified, and the seller confirms receipt. The platform never holds funds, never collects payment credentials, and is not party to the financial transaction.
5. Your rights
- Access and correct. Edit your profile, listings, and shipping address at any time from Settings.
- Delete your account. Go to Settings → Account → Delete account in the app. Account deletion is permanent — your profile, listings, messages, and uploaded photos are removed. Some records (completed orders, audit entries required by law) may be retained for the period legally required and then deleted.
- Export. Email support@declassifiedrecords.shop and we will provide a copy of your account data within 30 days.
6. Children
Declassified is not directed to children under 13. We do not knowingly collect personal information from anyone under 13. If you believe we have, write to support@declassifiedrecords.shop and we will delete the account.
7. Changes
If we make material changes to this policy we will update the “Last updated” date and, where appropriate, notify you in-app or by email before the change takes effect.
8. Contact
Questions or requests: support@declassifiedrecords.shop.