Privacy Policy

This Privacy Policy explains how SNA2 LLC, doing business as Cricket Sport Shop, operating Cricket Market (“we,” “us,” or “Company”), collects, uses, and protects information about you when you use our Platform at https://css-marketplace-frontend.vercel.app.

1. Information We Collect

1.1 Information You Provide

• Account registration: Name, email address, and role (buyer or seller).
• Listings: Item title, description, category, condition, price, and photos you upload.
• Messages: In-platform messages between buyers and sellers related to orders.
• Dispute filings: Reason text you submit when filing a dispute.
• Reviews: Star ratings and optional review text you leave after a completed order.

1.2 Information Collected Automatically

• Order data: Transaction amounts, order status history, timestamps, and Stripe payment identifiers (charge ID, transfer ID).
• Log data: Server request logs including IP address, browser type, and pages visited, retained for security and debugging.

1.3 Payment Information

We do not store your full card number, CVV, or bank account details. All payment card data is handled directly by Stripe, Inc., which is PCI-DSS compliant. We receive only tokenized references (payment intent IDs, charge IDs) from Stripe.

2. How We Use Your Information

• To create and manage your account and authenticate your sessions.
• To process transactions, hold funds in escrow, and release payments to sellers.
• To display listings to other users and power search.
• To facilitate messaging between buyers and sellers within orders.
• To send transactional emails (order updates, dispute notifications, verification links).
• To detect fraud, enforce Platform policies, and comply with legal obligations.
• To improve the Platform through aggregate, anonymized analytics.

We do not sell your personal information to third parties. We do not use your data for targeted advertising on third-party platforms.

3. Information Sharing

3.1 Between Users

When you buy or sell, your name and order status are visible to the other party. Seller reviews are publicly visible on seller profiles. Your email address is never shared with other users.

3.2 Service Providers

We share data with the following third-party service providers:

• Stripe, Inc. — payment processing and seller payout. Stripe receives transaction amounts, buyer card data, and seller banking details for connected accounts.
• Railway Technologies, Inc. — cloud hosting and database infrastructure. All backend services and databases run on Railway’s platform.
• Vercel, Inc. — frontend hosting and content delivery.

3.3 Legal Requirements

We may disclose your information if required by law, court order, or government authority, or when we believe disclosure is necessary to protect the rights, property, or safety of the Company, our users, or the public.

3.4 Business Transfer

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you via email before your information becomes subject to a different privacy policy.

4. Stripe & Payment Data

For sellers, connecting a Stripe account requires you to provide Stripe with personal and banking information directly on Stripe’s hosted onboarding pages. We never see or store that information; it is governed by Stripe’s Privacy Policy. We store only your Stripe connected account identifier to route payouts.

5. Cookies & Session Tokens

We use a minimal number of cookies and tokens:

• Refresh token cookie — an HTTP-only cookie used to refresh your login session without re-entering your password. It expires after 7 days.
• Access token — a short-lived JWT stored in memory (not in localStorage or a persistent cookie) used to authenticate API requests. It expires after 15 minutes.

We do not use advertising cookies, analytics cookies, or third-party tracking pixels.

6. Data Retention

We retain your account information and order history for as long as your account is active and for a minimum of 5 years thereafter to comply with financial record-keeping obligations. You may request deletion of your account; however, we may retain transaction records required by law or for dispute resolution.

7. Your Rights

You have the right to:

• Access the personal information we hold about you.
• Correct inaccurate information.
• Request deletion of your account (subject to legal retention requirements).
• Opt out of non-transactional communications. Note: we cannot opt you out of transactional emails (order updates, dispute notices) while your account is active.

To exercise these rights, email us at cricketsportshop@gmail.com with the subject line “Privacy Request.” We will respond within 30 days.

Texas residents may have additional rights under the Texas Data Privacy and Security Act (TDPSA). Contact us at cricketsportshop@gmail.com to submit a request under the TDPSA.

8. Security

We implement technical safeguards including HTTPS encryption in transit, HTTP-only and Secure-flagged session cookies, JWT-based authentication with short-lived access tokens, and database access restricted to private network infrastructure. No system is completely secure; we cannot guarantee absolute security of your data.

9. Changes to This Policy

We will post any material changes to this Privacy Policy on this page and update the “Last updated” date above. If changes are significant, we will notify registered users by email at least 14 days before they take effect.

10. Contact

For privacy questions or requests:
SNA2 LLC d/b/a Cricket Sport Shop
11003 Bluewater Lagoon Cir, Cypress, Texas 77433
cricketsportshop@gmail.com