Privacy Policy

1. Introduction

DoBartr LLC ("DoBartr," "we," "us," or "our") is committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and mobile application (collectively, the "Service").

By accessing or using the Service, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree to this Privacy Policy, please do not access or use the Service.

Important: Our Service is intended for users who are at least 18 years of age. We do not knowingly collect personal information from anyone under the age of 18.

2. Information We Collect

We collect information that you provide directly to us, information collected automatically when you use the Service, and information from third-party sources.

2.1 Information You Provide

2.2 Information Collected Automatically

When you access or use the Service, we automatically collect certain information:

2.3 Information from Third Parties

• If you sign in using a third-party service (e.g., Google, Apple), we may receive basic profile information from that service
• We may receive information from analytics providers to help us understand how users interact with the Service

3. How We Use Your Information

We use the information we collect for the following purposes:

3.1 To Provide and Operate the Service

• Create and manage your account
• Enable matching based on your location, offerings, and wants
• Facilitate messaging and communication between matched users
• Process and manage premium subscriptions
• Provide customer support

3.2 To Improve and Personalize the Service

• Analyze usage patterns to improve features and user experience
• Personalize content and recommendations based on your activity
• Develop new features and services
• Conduct research and analytics

3.3 To Communicate with You

• Send service-related notifications (e.g., matches, messages, account updates)
• Respond to your inquiries and support requests
• Send marketing communications (with your consent, where required)
• Notify you of changes to our policies or Service

3.4 For Safety and Security

• Detect, prevent, and respond to fraud, abuse, security threats, and illegal activities
• Enforce our Terms of Service and other policies
• Verify user identities and prevent fake accounts
• Investigate and resolve disputes and reports
• Protect the rights, property, and safety of DoBartr, our users, and others

3.5 Legal Compliance

• Comply with applicable laws, regulations, and legal processes
• Respond to lawful requests from government authorities
• Protect our legal rights and defend against legal claims

4. How We Share Your Information

We may share your information in the following circumstances:

4.1 With Other Users

Certain information is visible to other users as part of the Service's functionality:

• Your public profile (username, profile photo, bio, approximate location)
• Your listings and wants
• Messages you send to matched users
• Reviews and ratings you provide or receive

4.2 With Service Providers

We share information with third-party service providers who perform services on our behalf:

These service providers are contractually bound to protect your information and may only use it to provide services to us.

4.3 For Legal Reasons

We may disclose your information if required to do so by law or in response to:

• Subpoenas, court orders, or other legal processes
• Requests from law enforcement or government agencies
• To protect the rights, property, or safety of DoBartr, our users, or others
• To investigate potential violations of our Terms of Service
• To detect, prevent, or address fraud, security, or technical issues

4.4 Business Transfers

If DoBartr is involved in a merger, acquisition, sale of assets, bankruptcy, or other business transaction, your information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on the Service of any change in ownership and any choices you may have regarding your information.

4.5 With Your Consent

We may share your information with third parties when you have given us your explicit consent to do so.

5. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption: All data transmitted between your device and our servers is encrypted using HTTPS/TLS
• Password Security: Passwords are hashed using industry-standard algorithms; we never store passwords in plain text
• Access Controls: Access to personal data is restricted to authorized personnel on a need-to-know basis
• Infrastructure Security: Our hosting providers (Supabase, Vercel) maintain robust security certifications and practices
• Regular Reviews: We regularly review and update our security practices

Important: While we implement reasonable security measures, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for any activity that occurs under your account.

6. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

Active Accounts

For active accounts, we retain your data for as long as you maintain your account with us.

After Account Deletion

• Profile and Listings: Removed from public view immediately upon deletion
• Messages: May be retained for up to 90 days for safety, legal, and dispute resolution purposes
• Transaction Records: May be retained for up to 7 years for tax and legal compliance
• Log Data: Generally retained for 90 days, then deleted or anonymized
• Anonymized/Aggregated Data: May be retained indefinitely for analytics and service improvement

Legal Holds

We may retain information longer if required for legal proceedings, investigations, or to comply with legal obligations.

7. Your Rights and Choices

You have certain rights regarding your personal information. Depending on your location, these may include:

7.1 Access and Portability

• Access your personal information through your account settings
• Request a copy of your personal data in a portable format

7.2 Correction and Update

• Update your profile information through your account settings
• Request correction of inaccurate information

7.3 Deletion

• Delete your account through your account settings
• Request deletion of specific personal information

7.4 Communication Preferences

• Opt out of marketing emails by clicking the unsubscribe link in any marketing email
• Adjust notification settings in your account preferences
• Note: You cannot opt out of essential service-related communications

7.5 How to Exercise Your Rights

To exercise any of these rights, you may:

• Use the relevant features in your account settings
• Contact us at privacy@dobartr.com

We will respond to your request within 30 days (or as required by applicable law). We may ask you to verify your identity before processing your request.

8. Cookies and Tracking Technologies

8.1 What We Use

We use cookies and similar tracking technologies to operate and improve the Service:

• Essential Cookies: Required for the Service to function (authentication, security, preferences)
• Performance Cookies: Help us understand how users interact with the Service
• Functional Cookies: Remember your preferences and settings

8.2 Third-Party Cookies

We do not currently use third-party advertising cookies. If we implement third-party analytics, we will update this policy and provide appropriate disclosures.

8.3 Your Cookie Choices

Most web browsers allow you to control cookies through their settings. However, disabling cookies may affect the functionality of the Service.

8.4 Do Not Track

Some browsers have a "Do Not Track" feature. We do not currently respond to Do Not Track signals, as there is no industry standard for how to respond to such signals.

9. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

9.1 Your California Privacy Rights

• Right to Know: You have the right to request information about the categories and specific pieces of personal information we have collected about you, the sources of that information, the business purposes for collecting it, and the categories of third parties with whom we share it.
• Right to Delete: You have the right to request deletion of your personal information, subject to certain exceptions.
• Right to Correct: You have the right to request correction of inaccurate personal information.
• Right to Opt-Out of Sale/Sharing: You have the right to opt out of the "sale" or "sharing" of your personal information. Note: We do not sell or share your personal information as defined by the CCPA/CPRA.
• Right to Limit Use of Sensitive Personal Information: You have the right to limit the use and disclosure of sensitive personal information.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your privacy rights.

9.2 Categories of Personal Information

In the past 12 months, we have collected the following categories of personal information:

• Identifiers (email, username, IP address)
• Personal information categories listed in Cal. Civ. Code § 1798.80(e) (name, address)
• Geolocation data (zip code)
• Internet or network activity (browsing history, usage data)
• Inferences drawn from the above

9.3 How to Submit a Request

To exercise your California privacy rights, please contact us at privacy@dobartr.com or use the contact information in Section 14. We will verify your identity before processing your request.

9.4 Authorized Agents

You may designate an authorized agent to submit requests on your behalf. We may require verification of your identity and the agent's authority.

9.5 Financial Incentives

We do not offer financial incentives in exchange for the retention or sale of personal information.

10. International Users and Data Transfers (GDPR)

DoBartr is operated from the United States. If you are located outside the United States, please be aware that your information will be transferred to, stored, and processed in the United States.

10.1 European Economic Area (EEA), United Kingdom, and Switzerland

If you are located in the EEA, UK, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR):

• Legal Basis for Processing: We process your personal data based on: (a) your consent; (b) performance of a contract with you; (c) compliance with legal obligations; or (d) our legitimate interests.
• Right to Access: Request access to your personal data.
• Right to Rectification: Request correction of inaccurate data.
• Right to Erasure: Request deletion of your data ("right to be forgotten").
• Right to Restrict Processing: Request limitation of how we use your data.
• Right to Data Portability: Request a copy of your data in a machine-readable format.
• Right to Object: Object to processing based on legitimate interests.
• Right to Withdraw Consent: Withdraw consent at any time (without affecting the lawfulness of processing before withdrawal).
• Right to Lodge a Complaint: File a complaint with your local supervisory authority.

10.2 Data Transfers

When we transfer personal data outside the EEA/UK/Switzerland, we rely on appropriate safeguards such as Standard Contractual Clauses approved by the European Commission.

10.3 Data Controller

DoBartr LLC is the data controller for the personal data we collect. For questions or to exercise your rights, contact us at privacy@dobartr.com.

11. Children's Privacy

12. Third-Party Links and Services

The Service may contain links to third-party websites, applications, or services that are not owned or controlled by DoBartr. This Privacy Policy applies only to our Service. We have no control over and assume no responsibility for the privacy practices of any third-party sites or services. We encourage you to review the privacy policies of any third-party sites you visit.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes:

• We will update the "Last updated" date at the top of this policy
• We will notify you by email (if you have provided one) or by posting a prominent notice on the Service
• For significant changes, we may seek your consent before the changes take effect

Your continued use of the Service after any changes indicates your acceptance of the updated Privacy Policy. We encourage you to review this Privacy Policy periodically.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

We will respond to your inquiry as soon as possible, and in any event within 30 days (or as required by applicable law).

15. Additional State-Specific Disclosures

Virginia Residents

If you are a Virginia resident, you may have additional rights under the Virginia Consumer Data Protection Act (VCDPA), including rights to access, correct, delete, and obtain a copy of your personal data. To exercise these rights, contact us at privacy@dobartr.com.

Colorado, Connecticut, and Other States

Residents of states with comprehensive privacy laws (Colorado, Connecticut, Utah, etc.) may have similar rights. Please contact us to exercise your rights under applicable state law.