Privacy Policy

1. Information We Collect

We collect information you provide directly, including: name, email address, phone number, and profile information when you create an account; identity verification documents when you register as a seller; payment and banking information processed through Stripe; and horse listing details including photos, videos, and competition records.

We also automatically collect: device and browser information, IP addresses, usage data and browsing patterns, and cookies and similar tracking technologies.

2. How We Use Your Information

We use your information to: operate and improve the Platform; process transactions and payments; verify your identity; send transactional notifications (bid updates, auction results, payment confirmations); provide customer support; detect and prevent fraud; and comply with legal obligations.

3. Third-Party Services

We share information with the following third-party service providers who process data on our behalf:

• Stripe — Payment processing, seller payouts, identity verification, and Connect onboarding. Stripe's privacy policy applies to data they process.
• Cloudinary — Image and video hosting for horse media uploads.
• Meilisearch — Search indexing for listings and price database queries.
• Resend — Transactional email delivery (OTP codes, notifications).

We do not sell your personal information to third parties.

4. Cookies

We use cookies and similar technologies to maintain your session, remember your preferences, and analyze Platform usage. Essential cookies are required for the Platform to function. You can control cookie preferences through your browser settings, though disabling essential cookies may affect Platform functionality.

5. Data Retention

We retain your account information for as long as your account is active. Transaction records are retained for 7 years for legal and tax compliance purposes. You may request deletion of your account data at any time, subject to our legal retention obligations. Anonymized data used for analytics may be retained indefinitely.

6. Data Security

We implement industry-standard security measures to protect your information, including encrypted data transmission (TLS), secure server infrastructure, access controls, and regular security audits. However, no method of electronic transmission or storage is 100% secure.

7. Your Rights

Depending on your jurisdiction, you may have the right to: access the personal data we hold about you; correct inaccurate information; request deletion of your data; restrict or object to processing; request data portability; and withdraw consent where processing is based on consent.

To exercise these rights, contact us at privacy@oxer.com. We will respond within 30 days.

8. Children's Privacy

The Platform is not intended for use by individuals under 18 years of age. We do not knowingly collect personal information from children. If we learn we have collected information from a child, we will take steps to delete it promptly.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place for such transfers in compliance with applicable data protection laws.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on the Platform and updating the "Last updated" date. Your continued use after changes constitutes acceptance of the revised policy.

Questions about this Privacy Policy? Contact us at privacy@oxer.com