Privacy policy
Draft privacy policy for buyer leads and seller marketplace activity.
Parts Masters collects the information needed to operate a direct-contact marketplace, route buyer inquiries, support sellers, prevent abuse, and measure pilot performance.
Information we collect
- Buyer inquiry details such as name, email, phone, company, location, timeline, message, listing, seller, and source page.
- Seller profile and listing details such as company name, contacts, locations, inventory data, media, pricing labels, status, and verification notes.
- Operational data such as listing views, call clicks, text clicks, email clicks, search terms, zero-result searches, report-listing submissions, notification status, and admin audit events.
- Technical data such as IP-derived request context, user agent, timestamps, session identifiers, and security or abuse signals.
How lead information is used
- Buyer inquiries may be shared with the relevant seller and Parts Masters admins so the seller can respond.
- Parts Masters may use lead, listing, and event data to measure seller performance, improve search quality, troubleshoot notifications, prevent spam, and support marketplace operations.
- Submitting a lead does not create checkout, payment, order fulfillment, or purchase protection through Parts Masters.
Seller and admin access
Authorized marketplace admins can access listings, sellers, leads, reports, import batches, media, and audit logs. Seller-facing access should be scoped to the seller's own listings, leads, profile, and reporting as the seller portal matures.
Service providers and security
Parts Masters may use hosting, database, email, analytics, CAPTCHA, storage, and security providers to operate the marketplace. Access should be limited to the data needed for each service, and production credentials must not use scaffold defaults.
Retention and requests
Parts Masters may retain listing, lead, event, import, and audit records for marketplace operations, compliance, dispute prevention, abuse investigation, reporting, and backup recovery. Privacy, correction, or deletion requests should be routed through the contact page until a formal self-service process is approved.