Privacy Policy

This Privacy Policy explains how RC Paddock ("we", "us", "our") collects, uses, and shares information about you when you use rc-paddock.com (the "Service"). By using the Service you agree to the data practices described here.

1. Information we collect

1a. Information you give us

• Account: email address, password (stored hashed), display name, handle, optional avatar.
• Profile: bio, location, shop blurb, notification preferences, racing-scale and surface preferences.
• Two-factor authentication: TOTP secret (if enabled).
• Listings and content: photos, descriptions, specs, prices, setup sheets, messages, reviews, comments, Q&A.
• Addresses: shipping and billing addresses you save for orders.
• Reports and disputes: any information you submit when reporting a user or opening a dispute.

1b. Information we collect automatically

• Session and authentication cookies (necessary for the Service to function).
• Server logs: IP address, user agent, request path, timestamps. Retained for as long as needed for security and abuse-prevention purposes.
• Error telemetry: stack traces, environment metadata, and a session ID, sent to a self-hosted error-monitoring system on infrastructure we control when something goes wrong.
• Usage analytics: aggregate page-view data (pages visited, referrer, approximate region, device type) via a privacy-focused analytics system self-hosted on infrastructure we control. It is cookieless — no cross-site tracking and no advertising profiles.
• Image metadata: on upload we strip EXIF data (including any GPS coordinates) from photos before they are made viewable.

1c. Information from third parties

• If you sign in with a third-party provider (e.g., Google or Facebook), we receive your email, name, and avatar from that provider.

2. How we use information

• Operate the Service (authentication, listings, messaging, offers, orders, notifications).
• Communicate with you about your account, transactions, and Service updates.
• Detect, prevent, and respond to fraud, abuse, and violations of our Acceptable Use Policy.
• Improve the Service (debugging, performance, product decisions).
• Comply with legal obligations.

3. Sharing

We do not sell your personal information. We share information only as follows:

• With other Users: your handle, display name, avatar, location (if you choose to display it), public listings, public garages, reviews, comments, and Q&A are visible to other Users. When you complete a purchase, the seller receives your shipping address; when you sell, the buyer receives your shipping address.
• Service providers: a hosting/infrastructure provider, object storage for images, and a transactional email provider. Each provider is bound by contract to use the data only to provide the service. Error monitoring and usage analytics run on self-hosted systems on infrastructure we control — not third-party vendors.
• Legal: when required by law, subpoena, or to protect the rights, safety, or property of RC Paddock, our Users, or the public.
• Successor entity: in the event of a merger, acquisition, or sale of substantially all assets, with notice to affected Users.

4. Your choices

• Profile visibility: set your default garage visibility (PUBLIC / UNLISTED / PRIVATE), hide your location, and configure per-event notification preferences in Settings.
• Block: block another User from interacting with you.
• Deactivate: deactivate your account to hide it without permanent deletion.
• Delete: permanently delete your account from Settings → Delete. Account deletion is blocked while you have open orders. After deletion we retain transaction records and audit logs as required for legal, accounting, and dispute-resolution purposes.

5. Retention

• Account, profile, listing, message, and order data: kept while your account is active.
• We keep personal information for as long as needed to provide the Service and for the purposes described in this Policy.
• After account deletion, we retain the minimum business records (such as transaction history and moderation audit logs) for as long as needed to meet tax, accounting, fraud-prevention, dispute-resolution, and other legal obligations, after which we delete or anonymize them.
• Server logs are retained only as long as needed for security and abuse prevention.

6. Security

We use industry-standard measures to protect your information, including TLS in transit, hashed passwords, optional two-factor authentication, rate limiting on sensitive endpoints, and EXIF stripping on image uploads. No system is perfectly secure; you use the Service at your own risk.

7. Children

The Service is not directed to children under 18 and we do not knowingly collect information from anyone under 18. If you believe a child has provided information to us, contact support@rc-paddock.com and we will delete it.

8. International users

The Service is operated from the State of Nebraska, USA. If you access the Service from outside the State of Nebraska, USA, you consent to the transfer and processing of your information in the State of Nebraska, USA, which may have data-protection laws different from those in your country.

9. Your rights

Depending on your jurisdiction, you may have rights to access, correct, port, or delete the personal information we hold about you, and to object to or restrict certain processing. To exercise these rights, contact support@rc-paddock.com. We will respond within the time required by applicable law.

10. Changes

We may update this Policy from time to time. Material changes will be announced via in-app notification or email at least seven (7) days before they take effect.

11. Contact

Questions, requests, or complaints? Email support@rc-paddock.com.