Last updated: January 2, 2025 | Effective date: January 2, 2025

Introduction

Welcome to Exorra ("we," "our," or "us"). This Privacy Policy explains how Exorra collects, uses, discloses, and protects your personal information when you access or use our marketplace platform, website, mobile applications, and related services (collectively, the "Services").

Your Trust Matters

We are committed to maintaining your trust by protecting your privacy and being transparent about our data practices. This policy is designed to help you understand your privacy rights and how you can exercise them.

By using our Services, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, do not use our Services.

Information We Collect

Information You Provide Directly

We collect information that you voluntarily provide to us, including:

  • Account Information: Name, email address, phone number, date of birth, and password when you create an account
  • Profile Information: Profile photos, bio, location, and other information you choose to add to your profile
  • Payment Information: Billing address, payment method details (processed securely through our payment providers)
  • Communication Data: Messages you send through our platform, customer service interactions, and feedback
  • Listing Information: Product descriptions, photos, prices, and other details when you create listings
  • Transaction Data: Purchase history, order details, shipping information, and payment records

Information Collected Automatically

When you use our Services, we automatically collect certain information:

  • Device Information: Device type, operating system, browser type, IP address, and device identifiers
  • Usage Data: Pages visited, time spent on pages, click patterns, search queries, and feature usage
  • Location Data: Approximate location based on IP address (precise location only with your consent)
  • Log Data: Server logs including access times, requested pages, and system activity

Information from Third Parties

We may receive information about you from third parties, including:

  • Social Media: When you connect your social media accounts or use social login features
  • Payment Processors: Transaction verification and fraud prevention information
  • Marketing Partners: Information to help us provide relevant advertisements
  • Public Sources: Publicly available information for identity verification purposes

How We Use Information

We use the information we collect for various purposes, including:

Platform Services

  • Creating and managing your account
  • Processing transactions and payments
  • Facilitating communication between buyers and sellers
  • Providing customer support and responding to inquiries
  • Verifying seller identity and maintaining marketplace quality

Personalization and Improvement

  • Personalizing your experience and showing relevant content
  • Recommending products and services that may interest you
  • Analyzing usage patterns to improve our Services
  • Conducting research and developing new features

Safety and Security

  • Detecting and preventing fraud, spam, and abuse
  • Enforcing our Terms of Service and policies
  • Protecting the security and integrity of our platform
  • Complying with legal obligations and law enforcement requests

Marketing and Communications

  • Sending transactional emails and notifications
  • Providing marketing communications (with your consent)
  • Informing you about platform updates and new features
  • Conducting surveys and gathering feedback

Marketing Communications

You can opt out of marketing communications at any time by using the unsubscribe link in our emails or updating your account preferences.

Information Sharing

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

With Other Users

  • Your public profile information is visible to other users
  • Transaction-related information is shared between buyers and sellers
  • Messages and communications within our platform
  • Reviews and ratings you provide or receive

Service Providers

We work with trusted third-party service providers who assist us in operating our platform:

  • Payment Processors: To handle secure payment transactions
  • Cloud Services: For data storage and platform infrastructure
  • Analytics Providers: To understand platform usage and performance
  • Customer Support: To provide user support services
  • Marketing Partners: For advertising and promotional activities

Legal Requirements

We may disclose your information when required by law or to:

  • Comply with legal processes or government requests
  • Enforce our Terms of Service and policies
  • Protect the rights, property, or safety of Exorra, our users, or others
  • Investigate potential violations or fraudulent activity

Business Transfers

In the event of a merger, acquisition, or sale of assets, user information may be transferred as part of the transaction. We will provide notice before your information becomes subject to a different privacy policy.

Data Security

We implement robust security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.

Technical Safeguards

  • Encryption: All data is encrypted in transit and at rest using industry-standard encryption protocols
  • Secure Servers: Our servers are protected by firewalls and advanced security monitoring
  • Access Controls: Strict access controls limit who can view your information
  • Regular Audits: We conduct regular security audits and assessments

Operational Safeguards

  • Employee training on data protection and privacy practices
  • Background checks for staff with access to personal information
  • Incident response procedures for data breaches
  • Regular security updates and patches

Account Security

You are responsible for maintaining the security of your account credentials. Use a strong, unique password and enable two-factor authentication when available.

While we strive to protect your information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security but will notify you promptly if we become aware of any security breach affecting your data.

Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience on our platform:

Types of Cookies We Use

  • Essential Cookies: Required for basic platform functionality and cannot be disabled
  • Performance Cookies: Help us understand how you use our platform to improve performance
  • Functional Cookies: Remember your preferences and settings
  • Marketing Cookies: Used to deliver relevant advertisements and track campaign effectiveness

Managing Cookies

You can control cookies through your browser settings:

  • View and delete existing cookies
  • Block all or specific types of cookies
  • Receive notifications when cookies are set

Cookie Preferences

You can manage your cookie preferences in your account settings or through our cookie consent banner when you first visit our website.

Other Tracking Technologies

We may also use:

  • Web Beacons: Small images that help us track email opens and website usage
  • Local Storage: To store user preferences and improve performance
  • Analytics Tools: To understand user behavior and improve our Services

Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information:

Access and Portability

  • Access: Request a copy of the personal information we hold about you
  • Portability: Receive your information in a structured, machine-readable format
  • Correction: Update or correct inaccurate personal information

Control and Deletion

  • Deletion: Request deletion of your personal information (subject to certain limitations)
  • Restriction: Limit how we process your information
  • Objection: Object to certain types of processing, including marketing

How to Exercise Your Rights

To exercise any of these rights:

  • Contact us at privacy@exorra.com
  • Use the privacy controls in your account settings
  • Submit a request through our privacy request form

Identity Verification

To protect your privacy, we may need to verify your identity before processing certain requests. This helps ensure that only you can access or modify your personal information.

We will respond to your request within 30 days (or as required by applicable law). Some requests may take longer if they are particularly complex or numerous.

Data Retention

We retain your personal information only as long as necessary to provide our Services and fulfill the purposes described in this Privacy Policy.

Retention Periods

  • Account Information: Retained while your account is active and for 3 years after closure
  • Transaction Data: Retained for 7 years for tax and legal compliance purposes
  • Communication Records: Retained for 2 years for customer service purposes
  • Marketing Data: Retained until you opt out or for 3 years of inactivity
  • Log Data: Typically retained for 12 months for security and analytics

Factors Affecting Retention

Retention periods may vary based on:

  • Legal and regulatory requirements
  • Ongoing business relationships
  • Dispute resolution needs
  • Security and fraud prevention

When we no longer need your information, we will securely delete or anonymize it in accordance with our data retention schedule.

International Data Transfers

Exorra operates globally, and your information may be processed in countries other than where you reside. We ensure appropriate safeguards are in place for international data transfers.

Safeguards for International Transfers

  • Adequacy Decisions: Transfers to countries with adequate protection as determined by relevant authorities
  • Standard Contractual Clauses: Legally binding agreements that provide appropriate protection
  • Binding Corporate Rules: Internal policies that ensure consistent data protection standards
  • Certification Programs: Participation in recognized data protection certification schemes

By using our Services, you consent to the transfer of your information to countries that may have different data protection laws than your country of residence.

Children's Privacy

Exorra is not intended for children under the age of 13 (or the minimum legal age in your jurisdiction). We do not knowingly collect personal information from children under 13.

Age Restrictions

  • Users must be at least 13 years old to create an account
  • Users under 18 must have parental consent to use our Services
  • We may require age verification for certain features or transactions

If We Discover Child Information

If we become aware that we have collected information from a child under 13 without parental consent, we will:

  • Delete the information immediately
  • Terminate the associated account
  • Notify the parents if contact information is available
  • Implement additional safeguards to prevent future occurrences

If you believe we have collected information from a child under 13, please contact us immediately at privacy@exorra.com.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.

How We Notify You of Changes

  • Email Notification: For significant changes that affect your rights
  • Platform Notice: Prominent notice on our website and app
  • Account Dashboard: Updates will be highlighted in your account
  • Updated Date: The "Last Updated" date at the top of this policy will be revised

Your Continued Use

By continuing to use our Services after changes take effect, you agree to the updated Privacy Policy. If you do not agree with the changes, you may close your account.

Material Changes

For material changes that significantly affect your privacy rights, we will provide at least 30 days advance notice and may require your explicit consent to continue using our Services.

Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Privacy Team

Response Time

We will respond to your privacy inquiries within:

  • General Questions: 5 business days
  • Data Requests: 30 days (as required by law)
  • Urgent Security Matters: 24 hours

Data Protection Officer

For residents of the European Union, you may contact our Data Protection Officer directly at dpo@exorra.com for matters related to GDPR compliance.

Questions About Your Privacy?

Our privacy team is here to help you understand and exercise your privacy rights.