Privacy Policy
Effective July 1, 2026 · Maintained by SLAB, Inc.
This Privacy Policy explains how SLAB, Inc. collects, uses, discloses, and safeguards personal information when you use the SLAB marketplace. It applies to buyers, sellers, and visitors. Capitalized terms not defined here have the meaning given in the Terms of Service.
1. Information We Collect
Account information: name, email, phone, password hash, profile photo, and role (buyer/seller). Listing information: parcel details, addresses, price, photos, maps, and descriptions you submit. Transaction information: offers, messages, payment status, and payout details (processed by Stripe; SLAB does not store full card numbers or bank credentials). Communications: in-app messages, support requests, and notification preferences. Technical information: IP address, device and browser identifiers, log data, cookies, and approximate location derived from IP. Verification information: identity documents you submit for KYC where required by our payment processor.
2. How We Use Information
We use personal information to operate the Service, create and secure accounts, publish listings you choose to make public, facilitate payments and payouts, prevent fraud and abuse, provide customer support, comply with legal obligations (including tax and anti-money-laundering requirements), send transactional and, where permitted, marketing communications, and improve the Service.
3. Legal Bases (EEA/UK users)
Where the GDPR or UK GDPR applies, we process personal data on the following bases: performance of a contract (operating your account and transactions), legitimate interests (fraud prevention, security, product improvement), consent (optional marketing and certain cookies), and legal obligation (tax, KYC, court orders).
4. Sharing & Disclosure
We share information with: (a) other users to the extent needed to complete a transaction (e.g., a buyer's contact details with a seller after an accepted offer); (b) service providers acting on our behalf, including Stripe (payments), our cloud hosting provider, Mapbox (maps), analytics, email delivery, and identity verification vendors, under contractual confidentiality; (c) authorities and third parties when required by law, subpoena, or to protect the rights, safety, or property of SLAB, its users, or the public; and (d) an acquirer in the event of a merger, financing, or sale of assets. We do not sell personal information for money.
5. Cookies & Analytics
We use strictly necessary cookies to keep you signed in and maintain session integrity, and optional analytics cookies to understand aggregate usage. You can control non-essential cookies through your browser or, where offered, an in-app preference. Disabling essential cookies may break parts of the Service.
6. Retention
We retain personal information for as long as your account is active and for a reasonable period thereafter to comply with legal, tax, accounting, and dispute-resolution obligations. Transaction records are typically retained for at least seven (7) years. Aggregated or de-identified data may be retained indefinitely.
7. Security
We use administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit (TLS), encryption of data at rest by our cloud provider, role-based access controls, and row-level authorization in our database. No system is perfectly secure; you use the Service at your own risk and are responsible for keeping your credentials confidential.
8. Your Rights
Depending on your jurisdiction, you may have rights to access, correct, delete, port, or restrict processing of your personal information, and to object to certain processing. Residents of California, Colorado, Virginia, and other U.S. states with comprehensive privacy laws have rights that include the right to know, delete, correct, and opt out of targeted advertising, sale, or profiling with legal effects. To exercise any right, contact privacy@slab.example; we will verify your request before responding. You may also lodge a complaint with your local supervisory authority.
9. Children
The Service is not directed to children under 18. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact privacy@slab.example and we will delete it.
10. International Transfers
SLAB is based in the United States. If you use the Service from outside the U.S., you understand that information will be transferred to and processed in the U.S., which may have data-protection laws different from those in your country. Where required, we rely on Standard Contractual Clauses or other lawful transfer mechanisms.
11. Changes
We will post any changes to this Policy on this page and update the effective date. Material changes will be communicated via email or in-app notice before they take effect.
12. Contact
Privacy inquiries: privacy@slab.example. Postal: SLAB, Inc., [Street Address], Delaware, USA.