Privacy Policy | MatesMarket

1. Information We Collect

Personal Information

HKUST student email address (for account verification)
Profile information (name, profile picture - optional)
Account credentials (encrypted passwords)
Communication messages between users

Marketplace Data

Product listings (title, description, price, images)
Interest expressions and inquiries
Transaction history and communication logs
Search queries and browsing activity

Technical Information

Device information and browser type
IP address and location data
Login timestamps and session data
Cookies and local storage data

2. Data Storage and Security

Secure Data Infrastructure

All your data is securely stored using enterprise-grade cloud infrastructure with built-in security protocols, automatic scaling, and real-time monitoring to ensure maximum data protection and availability.

We implement industry-standard security measures including:

End-to-end encryption for data transmission and storage
Multi-factor authentication and secure authorization protocols
Regular security audits and vulnerability assessments
Automated backups and comprehensive disaster recovery plans
Role-based access controls and user permission management
SOC 2 Type II compliant infrastructure and data handling practices

3. How We Use Your Information

Platform Operations

• Account creation and verification
• Product listing and search functionality
• Facilitating buyer-seller communication
• Maintaining marketplace integrity

Service Improvement

• Analytics and usage patterns
• Performance optimization
• Feature development
• User experience enhancement

Security & Safety

• Fraud prevention and detection
• Terms of service enforcement
• Account security monitoring
• Community safety measures

Communication

• Account notifications
• Important updates
• Security alerts
• Platform announcements

4. Data Sharing and Third Parties

What We DON'T Do

Sell, rent or disclose your personal information
Share your personal information with advertisers or marketers

Third-Party Services We Use

Cloud Infrastructure Providers: Secure hosting and content delivery networks
Authentication Services: Industry-standard identity verification systems
Essential Cookies: Required for platform functionality and user sessions
Security Monitoring: Fraud detection and platform protection services

We may only share your information in the following limited circumstances:

When legally required by law enforcement or court orders
To protect our rights, safety, or property
Between marketplace users for legitimate transactions
To Business Partners: Only Statistical, non-personal data about the platform’s overall usage (e.g., total transactions per month, average prices, or general user demographics). No personal identifiers (emails, names, or message content) are included.

5. Cookies and Tracking

Essential Cookies

Required for authentication, security, and core platform functionality. Cannot be disabled.

Optional Cookies

Analytics, preferences, and search history. You can opt out in cookie settings.

No Tracking: We do not use third-party tracking cookies, advertising pixels, or cross-site tracking technologies.

6. Your Privacy Rights

Access Your Data

Request a complete copy of all personal data we have about you

Correct Information

Update or correct any inaccurate personal information

Delete Your Account

Permanently delete your account and all associated data

Data Portability

Export your data in a machine-readable format

Restrict Processing

Limit how we use your data for specific purposes

Object to Processing

Object to certain types of data processing activities

7. Data Retention and Deletion

Retention Periods

• Active accounts: Data retained while account is active
• Deleted accounts: Data permanently removed within 30 days
• Legal requirements: Some data may be kept longer if required by law
• Security logs: Retained for 90 days for fraud prevention

When you delete your account, we will permanently remove:

Your profile information and personal data
All product listings and images
Message history and communication logs
Search history and preferences
All cookies and stored session data

8. International Data Transfers

Your data may be stored and processed in secure data centers located in different jurisdictions to ensure optimal performance and redundancy. We ensure that any international data transfers comply with applicable privacy laws and regulations, including:

Implementation of appropriate technical and organizational safeguards
Use of standard contractual clauses and adequacy decisions where applicable
Full compliance with GDPR, CCPA, and other applicable privacy regulations
End-to-end encryption during transit and at rest in all storage locations
Regular compliance audits and third-party security certifications

9. Children's Privacy

Age Restriction: MatesMarket is designed for university students aged 18 and above. We do not knowingly collect personal information from anyone under 18 years of age. If you believe we have inadvertently collected such information, please contact us immediately.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make significant changes, we will:

Send you an email notification to your registered address
Display a prominent notice on our platform
Update the "Last Updated" date at the top of this policy
Provide a summary of changes made

11. Disclaimer and Limitations

Platform Nature: MatesMarket is a student-operated marketplace platform that facilitates connections between HKUST students. While we implement robust security measures and follow privacy best practices, users engage with the platform at their own discretion. We encourage all users to exercise caution when sharing personal information and conducting transactions.

Contact Us About Privacy

If you have questions about this Privacy Policy, want to exercise your rights, or need to report a privacy concern, please contact us:

Email: hkustmarketplace@gmail.com

Subject Line: "Privacy Policy Inquiry - [Your Request Type]"

Response Time: We aim to respond within 72 hours