Privacy policy.
Legal · last updated 2026-05-04
Final policy pending legal review
What we collect
Account email and verification status. Profile data: legal name, optional entity name, optional phone, and country, which verification records as the United States today. KYC verification result and reference ID from our identity vendor (Persona). Listing intake fields submitted by sellers. Transaction metadata.
How we use it
To verify identity, facilitate listings, gate access to private listing details via tri-party NDAs, and complete transactions through Escrow.com and Stripe Connect.
Third parties
Persona for KYC. PandaDoc for NDA execution. Escrow.com for transaction value custody. Stripe Connect for commission collection. Resend for transactional email. Supabase for database and authentication. Vercel for hosting. Each handles your data per their own terms.
Retention
Account and transaction data retained for the duration of regulatory record-keeping requirements. KYC verification artifacts retained per Persona's data retention policy.
Your rights
Email privacy@publisherinabox.com to request access, correction, or deletion of your data.
This page is a draft. Final policy ships after legal review in Milestone 10.