1. Summary
- We collect what we need to run a marketplace and show you nearby places.
- We do not sell your personal information.
- We do not show ads and no one can pay for placement in recommendations.
- If you sell, your ID is checked by Stripe Identity — we never store the document itself. See §6.
- You can access, export, correct, or delete your data — see §10.
2. Who is responsible
Jeffrey EmuejeVoke Ojuederhie, trading as Optimixr, is the controller of your personal data.
Data protection contact: privacy@optimixrtech.org If we offer the Service to users in the EU or UK without an establishment there, we will appoint a representative under GDPR Article 27 and publish their details here.
3. What we collect
You give us
| Data | Why |
|---|---|
| Name, email, phone | Account, security, transactional messages |
| Password (hashed) | Authentication |
| Profile photo, display name | Identifying you to other users |
| Listings, photos, descriptions, prices | Operating the marketplace |
| Messages between users | Delivering messages, resolving disputes |
| Reviews and ratings | Trust and safety |
| Payout account details | Paying sellers (held by our payment processor) |
| Government identity document (sellers only) | Identity verification, fraud prevention, legal compliance — see §6 |
| Support correspondence | Answering you |
Collected automatically
| Data | Why |
|---|---|
| Device type, OS, app version, identifiers | Compatibility, security, debugging |
| IP address | Security, fraud prevention, approximate location |
| Precise location (only with your permission) | Showing nearby places and calculating distance |
| Usage events — screens, searches, taps | Improving the Service, diagnosing faults |
| Crash and performance logs | Fixing faults |
From third parties
- Google Maps Platform — business names, addresses, ratings, hours, photos
- Brave Software, Inc. (Brave Search) — web results shown in the app
- Stripe, Inc. — payment status, chargeback and payout information
- Stripe Identity — the pass/fail result of verification (not the raw scan)
4. How we use it
We process your data to:
- Operate your account and the marketplace
- Process payments, hold funds in escrow, and pay sellers
- Generate recommendations, answers, and plans through the AI assistant
- Show nearby businesses and calculate distances
- Prevent fraud, verify identity, and enforce our Terms
- Resolve disputes between buyers and sellers
- Send transactional messages (orders, disputes, security)
- Send marketing messages where you have opted in, with an unsubscribe link in every one
- Improve the Service and fix problems
- Comply with legal obligations
Our legal bases
| Purpose | Basis |
|---|---|
| Providing the Service, processing orders | Contract |
| Fraud prevention, security, service improvement | Legitimate interests |
| Precise location; marketing | Consent |
| Tax, anti-money-laundering, responding to lawful requests | Legal obligation |
You may withdraw consent at any time; this does not affect processing already carried out.
5. The AI assistant
When you give the assistant a goal, we process your input to plan and run searches and to generate a recommendation.
- Your goal text is sent to a model provider to generate a response: Anthropic, PBC for paid plans, and Groq, Inc. for the free plan.
- Neither provider uses your prompts to train their models. Anthropic retains API inputs and outputs for a limited period for trust-and-safety purposes only. Provider terms change; we review them periodically and will update this page if the position changes.
- Searches may be sent to Google Places and Brave Software, Inc. (Brave Search).
- We store a short-lived record of your recent goals so follow-up questions ("cheaper", "closer") work. This expires after 30 minutes.
- We store what the assistant recommended and, where applicable, what you bought, to measure and improve recommendation quality.
Automated decision-making. The assistant ranks and recommends. It does not make decisions producing legal or similarly significant effects about you, and it does not act on your behalf. You always choose.
6. Identity verification (sellers only)
If you sell on Optimixr, we verify your identity before your first payout. This protects buyers from fraudulent sellers and satisfies the identity requirements that apply to receiving payments.
- Verification is performed by Stripe Identity, acting as our processor.
- You submit a government identity document. Stripe reads it and returns the result to us.
- Optimixr receives the outcome (verified / not verified) and the identity fields required for compliance. We do not receive or store your raw document images.
- Documents are retained by Stripe under their retention schedule, then deleted.
- We do not sell, lease, trade, or otherwise profit from identity data, and do not disclose it except as required by law or with your consent.
Facial scan. Verification also captures a short facial scan, matched against the photograph on your document. This is biometric data and is handled under stricter rules: we ask for your explicit consent before capture, the scan is processed by Stripe Identity and is never received or stored by Optimixr, and it is destroyed under the retention schedule in our Biometric Data Policy. You can ask for manual review by a person instead — no seller is locked out of their own money because an automated check failed.
7. Who we share with
We do not sell personal information and do not share it for cross-context behavioural advertising.
We share with:
| Recipient | What | Why |
|---|---|---|
| Other users | Your display name, photo, listings, ratings, and — for a transaction — the delivery details needed to complete it | Operating the marketplace |
| Stripe, Inc. | Payment and payout data | Processing payments |
| Stripe Identity | Identity document | Verification |
| Hostinger International Ltd. | Data at rest and in transit | Hosting |
| Anthropic, PBC and Groq, Inc. | Your goal text and search results | Generating responses |
| Search queries and approximate location | Places results | |
| Sentry | Usage and crash data | Diagnostics |
| Authorities | As legally required | Legal obligation |
| An acquirer | All of the above | Merger, acquisition, or asset sale — you'll be notified |
All processors are bound by contract to use data only on our instructions.
8. International transfers
Your data may be processed in the United States, the European Union, and the United Kingdom. Where data leaves the EEA or UK we rely on the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum. Ask us for a copy of the safeguards at privacy@optimixrtech.org.
9. How long we keep it
| Data | Retention |
|---|---|
| Account data | While your account is open, then 30 days |
| Transaction records | 7 years (tax and accounting law) |
| Messages between users | 24 months, or longer if part of an open dispute |
| Precise location | Not stored beyond the session unless you save an address |
| AI conversation state | 30 minutes |
| Recommendation and outcome logs | 12 months, then aggregated and anonymised |
| Identity documents | Held by Stripe Identity, per their retention schedule |
| Support tickets | 24 months |
| Security and fraud logs | 12 months |
Deleting your account removes personal data except where we must keep it for legal, tax, fraud-prevention, or dispute reasons.
10. Your rights
Depending on where you live you may have the right to:
- Access a copy of your data
- Correct inaccurate data
- Delete your data
- Port your data in a machine-readable format
- Object to or restrict certain processing
- Withdraw consent for location or marketing
- Not be discriminated against for exercising these rights (California)
Exercise them in Settings, or email privacy@optimixrtech.org. We respond within 30 days (45 days for CCPA requests). We may need to verify your identity first.
EU/UK: you may complain to your local supervisory authority. California: we do not sell or share personal information as those terms are defined in the CCPA/CPRA.
11. Security
We use encryption in transit and at rest, hashed passwords, access controls, and audit logging. Payment card details are handled by our PCI-DSS compliant processor and do not touch our servers.
No system is perfectly secure. If a breach affects you we will notify you and regulators as the law requires. Report a vulnerability to security@optimixrtech.org.
12. Children
Optimixr is not for anyone under 18. We do not knowingly collect data from children. If you believe a child has given us data, contact privacy@optimixrtech.org and we will delete it.
13. Changes
We'll post updates here and, for material changes, notify you in the app or by email at least 30 days in advance.
14. Contact
privacy@optimixrtech.org ·