Privacy Policy

Information we collect

• Account data: name, username, email address, phone number and password (stored in hashed form), and profile photo if you add one. If you sign in with Google, we receive your name, email and avatar from Google.
• Transaction data: orders, bids, bookings, wallet top-ups and balance, shipping addresses, and payment status. Card details are collected and processed directly by Stripe, our payment processor — Needo never stores your full card number.
• Seller data: store details, listings, sales, payout information and, for account verification, the information our payment partners require.
• Content you create: listings, reviews, chat messages with other users and support requests.
• Usage and device data: pages you visit, searches you run, listings you open, items you add to the cart and purchases, device and browser type, and the site you arrived from. We store a random visitor and session identifier in your browser to count visits; it carries no name or email. If you are signed in, usage measurement is linked to your account for 90 days. For these measurements your IP address is never stored in full: our server trims it to a network block and from that we keep only an approximate country, state and city.
• Error reports and technical session recordings: when something breaks we record the error, the page you were on and technical details of your browser. Our monitoring provider (Sentry) also receives your IP address, and it records a technical replay of roughly 10% of all sessions and of 100% of the sessions where an error happens. In those replays your text is masked and images and videos are blocked, but your clicks, the layout of the screens and the pages you go through are recorded.
• Notification tokens: if you enable push notifications we store a device token (Firebase Cloud Messaging) to deliver them.

How we use your information

• Provide the marketplace: accounts, listings, orders, auctions, service bookings, wallet, chat and notifications.
• Process payments, prevent fraud and secure the platform.
• Connect buyers and sellers: when you buy, the seller receives the information needed to fulfil your order (name, shipping address, contact for the order).
• Customer support and dispute resolution.
• Send transactional communications (order updates, auction results, receipts) and, only with your consent, marketing communications.
• For sellers who purchase promotion campaigns: create and measure advertising on external advertising platforms (currently Google Ads). Campaign advertising uses the seller’s listing content, not buyers’ personal data.
• Comply with legal obligations (tax, accounting, law enforcement requests).

Who we share information with

We do not sell your personal information. We share it only with:

• Stripe (payment processing and fraud prevention).
• Infrastructure providers that host the platform and its data: Supabase (database, authentication, storage), Fly.io (hosting) and Google Firebase (push notifications).
• Resend (transactional email delivery).
• Sentry (error and performance monitoring): receives error reports, the paths you navigate through, your IP address and the technical session recordings described above.
• Cloudflare, which checks from your browser that whoever signs in, signs up or resets a password is a person and not a bot. It receives your IP address and technical signals from your browser.
• Address services, to autocomplete and verify shipping addresses: Google Places (when you use the address search) and the public U.S. Census Bureau geocoder (to check that a manually typed address really exists). These lookups leave from our servers and carry only the address text — not your name, not your IP, not your account data.
• geojs.io, to know which state or city Needo is being used from: it receives the trimmed network block, never your full IP address or your identity.
• Sellers and suppliers, strictly to fulfil your orders (e.g. name and shipping address passed to the seller or their fulfilment partner).
• Shippo and the carriers it works with, to create shipping labels and track parcels: they receive the name, address and phone number of the order recipient.
• CJ Dropshipping, the supplier that stocks and ships part of the products sold by Needo’s own store: it receives the recipient’s name, address and phone number to deliver those orders.
• Google (Gemini), to translate listings and store texts between English and Spanish and to draft store content for sellers who use the AI store builder: it receives listing and store text, never buyers’ personal data.
• Advertising platforms (currently Google Ads) when a seller runs a promotion campaign — limited to campaign content and aggregate performance data.
• Google (Google Ads), to measure the conversions of our own ads. Two different things reach Google here. First, the tag runs on every page of the site except the password-reset page and, each time you open one, it tells Google the address of that page (without the parameters after the "?") and your IP address — this happens whether or not you accept measurement, because what your answer controls is cookies, not this visit signal. On the password-reset page the tag is not even loaded: nothing at all leaves that visit towards Google. Second, when you complete a purchase Google receives the purchase signal with an order identifier, the amount and the address of that page, from which we first strip any sensitive parameter (the payment identifier when you come back from Stripe) — never your name or your email. It only sets advertising cookies if you accept measurement in our cookie notice (see "Cookies and similar technologies").
• Google (Customer Reviews), only if you accept it. After you place an order for products sold by Needo’s own store, Google shows its own notice on the confirmation screen. If you accept, Needo shares with Google your email address, the order number, the delivery country, the estimated delivery date and, where they exist, the barcodes (GTIN) of the products, so that Google can send you a survey about your purchase. It is optional and you decide in Google’s notice; if you do not accept, nothing is shared. Google handles this data under its Privacy Policy at https://policies.google.com/privacy.
• Authorities, when required by law or to protect the rights and safety of Needo and its users.

Google appears six times on this list for six different reasons: Firebase for push notifications, Places for shipping addresses, its advertising platforms for seller campaigns, Google Ads to measure our own ads, Gemini to translate listings, and Customer Reviews if you accept its survey.

Cookies and similar technologies

Needo uses a small number of cookies and browser storage, in three groups:

• Essential: keeping your session open (authentication), your cart, security and fraud prevention (including cookies set by Stripe during checkout and by Cloudflare when it checks you are not a bot as you sign in or sign up). The platform cannot work without these.
• Preferences: remembering your language, theme and similar settings.
• Measurement and diagnostics: a random visitor and session identifier stored in your browser, which we use to count visits and page views, plus the browser storage our monitoring provider uses to group the errors and the technical recording of one same session, and — only if you accept — the advertising cookies of the Google Ads tag described below.

Google Ads conversion measurement: we use the Google Ads tag (gtag.js) to know which purchases come from our own ads. The tag is on every page except the password-reset page: each time you open one it tells Google the address of that page — only the domain and the path, never what follows the "?" — and your IP address, and it does so whether or not you accept measurement — what your answer changes is the cookies, not that visit signal. On the password-reset page the tag is not even loaded: nothing leaves that visit towards Google, neither the visit signal nor the one-time code in the link. When you complete an order, Google also receives the purchase signal with an order identifier, the amount and the address of that page, from which we first strip any sensitive parameter (the payment identifier when you return from Stripe) — never your name or your email. The tag only sets advertising cookies if you accept measurement in our cookie notice; if you choose "essential only", it works without cookies (Google Consent Mode): Google receives the signals without identifying you through cookies and, according to Google, does not link them to you as a person. Google explains how it uses this data at https://policies.google.com/technologies/ads and you can manage your ad settings at https://adssettings.google.com.

The first time you visit we ask you about measurement (our own analytics and Google Ads conversion measurement), and until you answer we measure nothing of our own and Google sets no cookies — the Google Ads tag does report the page visit described above, which needs no cookies. If you choose "essential only", we keep your session, cart and preferences working, nothing is sent to our analytics and the Google Ads tag works without cookies. You can change your mind whenever you like from "Cookie preferences" at the bottom of any page on needo.shop.

You can also delete or block cookies in your browser settings; blocking essential cookies may prevent you from signing in or completing purchases.

Data retention

We keep your data while your account is active. Detailed usage measurements are deleted after 90 days; all that survives them is aggregate daily totals, which identify no one.

Deleting your account means this: we block access, we stop sending you push and email notifications, and we delete your profile photo, the chat attachments you sent and your identity document. Your chat messages are removed from the conversations; the copy we keep for moderation is deleted after 90 days. If you are a seller, your store is closed and its public contact details are cleared. We keep only what accounting and the law require — the account’s internal identifier, the amounts and dates of your orders, movements and claims, and the last four digits of the payout account — for the legally required period. We also keep what documents an operation for the other party involved: your claims with their messages and photos, your support requests, the notes on your services and your reviews, which stay without your name. If you are a seller, any live auctions of yours are cancelled and the bidders get their deposits back. The deletion is permanent and cannot be undone.

We handle a deletion request within 30 days at most from the day we receive it. Before that we check that you have no orders in progress, no open claims and no pending balance.

If you apply to become a seller, the identity document you send us is deleted 90 days after your application is resolved; the application record is kept without the document.

Card payments are processed by Stripe, which keeps its own records of the charge under its own policies and the law that applies to it; those records do not depend on your Needo account existing.

Security

All traffic is encrypted with HTTPS/TLS. Access to personal data is restricted through row-level security and role-based permissions, payments are handled by PCI-DSS compliant processors, and passwords are stored hashed. No system is 100% secure, but we review and improve our security controls continuously.

Your rights and choices

You can access and update your profile data from your account. In addition, you may request from us:

• A copy of the personal data we hold about you.
• Correction of inaccurate data.
• Deletion of your account and personal data, with the limits explained under "Data retention".
• To opt out of marketing communications at any time (transactional messages about your orders will still be sent).

To exercise these rights, write to support@needo.shop from your account email. Residents of states with consumer privacy laws (e.g. California) may exercise the rights those laws grant through the same channel; we do not discriminate for exercising them.

Minors

Needo is intended for adults aged 18 or over. We do not knowingly collect data from minors; if we become aware of such data we will delete it.

Changes to this policy

We may update this Privacy Policy. Material changes will be announced on the platform and the "Last updated" date will be revised.

Contact

Needo Technologies · Miami, Florida, United States · support@needo.shop.