Privacy Policy

1. Introduction

DormSweep LLC is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use DormSweep.

2. Information We Collect

Account Information

• Name
• College or university email address
• School affiliation
• Phone number (if provided)

Platform Activity

• Listings, descriptions, photos, prices, and categories
• Messages exchanged through the platform
• Orders, purchases, and sales history
• Reports and disputes submitted
• Saved and favorited items
• Handoff evidence photos

Payment Information

• DormSweep does not store full payment card information.
• Limited transaction information is received from Stripe, including transaction IDs, amounts, and payout status.
• Stripe payout account connection status for sellers.

Technical Information

• IP address and device information
• Browser type and version
• Usage data and feature usage
• Error logs and performance data via Sentry

3. How We Use Your Information

• Create and manage accounts
• Verify student eligibility
• Enable buying, selling, and transactions
• Process payments and payouts through Stripe
• Operate the handoff confirmation system
• Store evidence photos for dispute purposes
• Send transactional emails and pickup codes via Resend
• Prevent fraud and investigate disputes
• Enforce platform policies
• Monitor platform security and performance
• Improve and maintain the platform
• Comply with legal, tax, and accounting obligations

4. How We Share Your Information

With Other Users

After a transaction is completed, limited information necessary to complete the pickup may be shared with the other party.

With Service Providers

• Stripe — payment processing and seller payouts
• Supabase — database and storage services
• Vercel — hosting and deployment
• Sentry — error monitoring and performance tracking
• Resend — transactional email delivery

These providers may access information only as necessary to provide services to DormSweep.

Legal Requirements

We may disclose information when required by law, subpoena, court order, or when necessary to protect the rights, property, or safety of DormSweep, our users, or the public.

5. Data Retention

We retain account information and transaction records for as long as your account is active and for a reasonable period thereafter.

DormSweep retains certain records regardless of account deletion, including orders, payment records, dispute records, audit logs, fraud prevention records, legal compliance records, and tax and accounting records.

Handoff evidence photos are retained for a minimum of 90 days following transaction completion and longer if a dispute is active.

DormSweep may maintain audit logs, abuse-prevention systems, security monitoring, and Redis-based rate limiting records to protect platform integrity and investigate fraud or misuse.

6. Data Security

We implement reasonable administrative, technical, and physical safeguards to protect your information. Our platform is hosted on Vercel with data stored in Supabase. No method of internet transmission is 100% secure.

In the event of a data breach affecting your personal information, we will provide notice as required by applicable law.

7. Your Rights

• Request access to your personal information
• Correct inaccurate account information
• Request account deletion
• Unsubscribe from non-transactional emails

8. FERPA

DormSweep collects institutional email addresses solely to verify student status. DormSweep does not access, collect, or process education records maintained by educational institutions and is not a school official under FERPA.

9. Children's Privacy

DormSweep requires users to be at least 18 years old and does not knowingly collect personal information from individuals under 18.

10. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be posted on the platform with an updated effective date.

11. Contact

For privacy questions: support@dormsweepco.com