1.Introduction
This Privacy Policy explains how Advero ("we," "us") collects, uses, discloses, and protects your personal information when you use our marketplace platform. We are committed to handling your information responsibly and in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws.
2.Information We Collect
Account information
- Name, email address, phone number, and city provided at signup
- Password (stored securely, never in plain text)
- Verification status (email confirmed, phone verified)
Listing & content information
- Photos, titles, descriptions, prices, and categories you post
- Messages exchanged with other users through the Platform
- Reviews and ratings you give or receive
Usage & device information
- IP address, browser type, device type, and general location (city-level)
- Pages viewed, searches performed, and interactions with listings
3.How We Use It
- To create and manage your account, and verify your identity
- To display your listings and connect you with buyers or sellers
- To power AI-assisted features — photo categorization, title/description suggestions, and price estimates
- To detect and prevent fraud, spam, and abuse (including bot detection)
- To send account-related notifications (e.g., new messages, listing status)
- To improve and maintain the Platform
- To comply with legal obligations
4.How We Share It
We do not sell your personal information to advertisers or data brokers. We share information only as follows:
| Service Provider | Purpose | Data Involved |
|---|---|---|
| Supabase | Database hosting, authentication, file storage | Account data, listings, messages, images |
| Anthropic | AI-powered photo analysis, title/description/price suggestions | Listing photos and text you submit for suggestions |
| Twilio (via Supabase) | SMS phone verification codes | Phone number |
| Google Sign-In (OAuth) and reCAPTCHA bot protection | Email/profile info (if you use Google login), browsing signals for CAPTCHA | |
| Vercel | Website hosting and server infrastructure | Standard web request/log data |
We may also disclose information where required by law, in response to a valid legal request, to protect the rights and safety of our users, or in connection with a merger, acquisition, or sale of assets.
5.What's Public vs. Private
Private: Your email address and phone number are never shown publicly. They're only used for account verification and are shared with another user only if you choose to disclose them directly (e.g., in a message).
6.Cookies & Tracking
We use essential cookies to keep you logged in and remember your preferences. We may also use analytics tools to understand how the Platform is used, in aggregate and non-identifying ways where possible. You can control cookies through your browser settings, though disabling essential cookies may affect site functionality.
7.Data Retention
We retain your account information for as long as your account is active. If you delete your account, we will delete or anonymize your personal information within a reasonable period, except where retention is required for legal, security, or fraud-prevention purposes (e.g., records of policy violations).
8.Your Rights
Under PIPEDA, you have the right to:
- Access the personal information we hold about you
- Correct inaccurate or outdated information
- Withdraw consent for certain uses of your data, subject to legal or contractual limits
- Request deletion of your account and associated personal information
- Complain to the Office of the Privacy Commissioner of Canada if you believe we've mishandled your information
To exercise these rights, contact us using the details in Section 13.
9.Data Security
We use industry-standard safeguards to protect your information, including encrypted connections (HTTPS), row-level database security so users can only access and modify their own data, secure password hashing, and server-side verification of sensitive actions. No system is completely secure, and we encourage you to use a strong, unique password.
10.Children's Privacy
Advero is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children. If we become aware that a user is under 18, we will take steps to delete their account and associated data.
11.International Data Transfers
Some of our service providers (listed in Section 4) may process or store data on servers located outside Canada, including in the United States. Where this occurs, we take reasonable steps to ensure your information continues to receive an appropriate level of protection.
12.Changes to This Policy
We may update this Privacy Policy periodically. Material changes will be reflected by an updated "Last updated" date at the top of this page. We encourage you to review this page periodically.
13.Contact Us
Questions, concerns, or requests regarding your personal information can be directed to: