Last updated: March 24, 2026
EBLIT ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use the EBLIT platform. By using EBLIT, you consent to the practices described in this policy. If you do not agree with this policy, please do not use the Platform.
We collect the following categories of information: (a) Account Information: name, email address, password (hashed), phone number, street address, city, state, zip code; (b) Identity Verification Data: through Stripe Identity, we receive a verification result and status; we do not store copies of your government-issued ID documents; we generate and store a cryptographic hash derived from your verified identity for fraud prevention purposes; (c) Transaction Data: product listings, purchase history, sale history, payment amounts, shipping addresses, tracking numbers; (d) Location Data: GPS coordinates collected at specific points during meetup and shipping transactions for verification purposes; (e) Device and Usage Data: IP address, browser type, device identifiers, pages visited, features used, time and date of access; (f) Communications: messages sent through the Platform's chat system, support tickets, and dispute communications; (g) Payment Data: payment method details processed and stored by Stripe; EBLIT does not store full payment card numbers; (h) Identity Photos: photos taken during meetup transactions for identity verification purposes; these are automatically deleted within 72 hours of transaction completion.
We use your information to: operate and improve the Platform; process transactions and facilitate payments; verify your identity and prevent fraud; enforce our Terms of Service and other policies; communicate with you about your account and transactions; provide customer support; send transactional emails and notifications; comply with legal obligations; protect the rights, property, and safety of EBLIT, our users, and the public; detect and prevent fraudulent, unauthorized, or illegal activity; generate anonymized analytics to improve the Platform.
EBLIT uses a proprietary system to generate a pseudonymous identifier (the "FirmSecureHash" or "FSH") linked to your verified identity. This system enables EBLIT to track product ownership history and detect unauthorized re-listings without storing your raw government ID information. The specific methodology used to generate FSH identifiers is a proprietary trade secret. Your FSH number is never displayed in any user-facing interface. In the event of a data breach, exposure of FSH data does not expose your underlying government identification information.
We share your information only in the following circumstances: (a) With other users, as necessary to complete transactions (e.g., shipping address shared with seller after payment, buyer name shared with seller for meetup); (b) With Stripe, Inc. for payment processing and identity verification; (c) With EasyPost for shipping label generation and carrier tracking; (d) With Amazon Web Services for infrastructure, storage, and communication services; (e) With law enforcement or government authorities when required by law or legal process, or to protect the safety of users or the public; (f) With successors in the event of a merger, acquisition, or sale of assets, in which case users will be notified; (g) With service providers who assist in operating the Platform under confidentiality obligations. We do not sell your personal information to third parties. We do not share your personal information with advertisers.
We retain your personal information for as long as your account is active or as needed to provide services. Financial records and transaction data are retained for a minimum of seven years for legal and compliance purposes. Dispute records are retained for a minimum of seven years. Identity photos are deleted within 72 hours of transaction completion. After seven years, financial records are anonymized — your name and contact information are removed while the financial record is preserved. You may request deletion of your account and associated data subject to our retention obligations for financial and legal records.
We implement industry-standard technical and organizational measures to protect your personal information, including encryption in transit (TLS), hashed passwords using bcrypt, row-level security on sensitive database tables, access controls limiting employee access to personal data, and regular security assessments. No method of transmission over the Internet is 100% secure; we cannot guarantee absolute security of your data. In the event of a data breach that affects your personal information, we will notify you as required by applicable law.
We use cookies and similar tracking technologies to operate the Platform, authenticate users, and analyze usage. Please see our Cookie Policy for full details on the types of cookies we use and how to manage your preferences.
Depending on your jurisdiction, you may have the following rights regarding your personal information: (a) Right of Access: request a copy of the personal information we hold about you; (b) Right of Correction: request correction of inaccurate personal information; (c) Right of Deletion: request deletion of your personal information, subject to retention obligations; (d) Right of Portability: request your personal information in a portable format; (e) Right to Object: object to certain processing of your personal information; (f) Right to Withdraw Consent: withdraw consent where processing is based on consent. To exercise your rights, contact us through the Support section of the Platform. We will respond within 30 days.
The Platform is not directed at children under 18 years of age. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to delete that information promptly.
EBLIT is operated from the United States. If you access the Platform from outside the United States, your information may be transferred to and processed in the United States. By using the Platform, you consent to the transfer of your information to the United States.
The Platform may contain links to third-party websites. We are not responsible for the privacy practices of those websites. We encourage you to review the privacy policies of any third-party websites you visit.
We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last Updated" date and, where appropriate, by email. Your continued use of the Platform after changes constitutes your acceptance of the updated policy.
For privacy-related questions or to exercise your rights, please contact us through the Support section of the Platform.