Privacy Policy

Last updated September 2026. Template drafted for review by counsel; not yet reviewed.

This policy describes what GPA Lord collects and how it is used.

What we collect

Your university email address and display name; listings and files you upload, with the ownership attestation and its timestamp; purchase records (listing, amount, time); and removal requests. Payment details are collected by Stripe, not by us. Stripe collects identity and bank information from sellers for payouts under Stripe's own privacy policy.

How we use it

To run the marketplace: authenticate you, display listings, deliver files to buyers, pay sellers, send transactional email (sign-in links, purchase and listing notices, removal notices), and enforce the Terms.

Sharing

Service providers only: Supabase (database and file storage), Stripe (payments), Vercel (hosting), Resend (email). We disclose account information to rights-holders, the university, or authorities where required by law or valid legal process, and to a rights-holder in connection with a removal dispute.

Retention and deletion

Files for removed listings are retained for 90 days for dispute handling, then deleted. Email [your email] to delete your account; purchase records are retained as required for tax and payment-processing purposes.

Cookies

Only a session cookie used to keep you signed in. No advertising trackers.

Contact

[your email]