Privacy Policy

Account information. We sign you in with Google, so we receive your name, email address, and profile photo. We also require a WhatsApp number, which you give us when you set up your account.

Profile & listing information. Anything you choose to add — a username, city or pincode, avatar, listing or auction details, photos of items you list or add to your collection, trade proposals, bids, and messages you send through the Platform.

Usage data. Basic technical information like pages viewed and listing view counts, used only to operate and improve the Platform.

• To create and maintain your account and public profile;
• To operate listings, trades, auctions, and the reporting/moderation tools;
• To keep the Platform safe — detecting scalping, fraud, and abuse; and
• To communicate with you about your account or activity on the Platform.

We do not sell your personal information.

Your username, display name, avatar, city, listings, and (if you choose to make it public) your collection are visible to anyone who views your public profile. Your email address is never shown to other users. Your WhatsApp number (required to trade) stays private until a trade you're part of is accepted — at that point it is shared with that one other person only, so the two of you can arrange the handover.

We use a small number of service providers to run the Platform, and share only what each needs to do its job:

• Google — for Google Sign-In authentication.
• Supabase — our database, authentication, and file storage provider, which hosts all account, listing, and photo data.
• India Post — we send a pincode you enter to India Post's public API to look up your city; no account-identifying information is sent.
• Vercel — hosts the Platform itself.

We may also disclose information if required by law, or to investigate fraud, scalping, or abuse reported through the Platform.

We use your browser's local storage to remember things like your theme preference, whether you've seen the welcome page before, and your wishlist/favorites — this stays on your device and isn't sent to us. We use cookies to keep you signed in securely across pages.

We keep your account information for as long as your account is active. If you delete your account (see below), we delete your personal information within a reasonable period, except where we're required to retain records for legal or fraud-prevention purposes.

You can review and update most of your information yourself from Settings — display name, avatar, city, pincode, and collection visibility. You can delete individual listings or inventory items at any time. For anything else, including deleting your account entirely, see the section below.

To request deletion of your account and associated personal data, email lotclub.help@gmail.com from the email address associated with your account (and include your WhatsApp number) with the subject “Account deletion request.” We will delete your profile, listings, inventory, and account data within 30 days, confirming once it's done.

Deleting your account does not delete messages or trade history you're part of that another user's account still references (for example, a completed trade's record on the other party's side) — those are retained in de-identified form where possible.

LotClub is not directed at children under 18. We do not knowingly collect information from anyone under 18.

We use industry-standard measures — including access controls and encryption in transit — to protect your information, but no method of transmission or storage is completely secure, and we can't guarantee absolute security.

We may update this Privacy Policy from time to time. If we make material changes, we'll post the updated policy here with a new “Last updated” date.

Questions about this policy, or requests regarding your data, can be sent to lotclub.in@gmail.com.