Privacy Policy

Our identity provider processes your identification documents and selfie. We receive verification status and retrieve your verified name, date of birth and, when available, document number. We keep your verified name as your account name. Your date of birth and document number are used, together with your name, only to compute identity matching hashes and are not stored themselves. We retain those hashes, not copies of your identification documents, to prevent the same person from opening another verified account, including after account closure.

• Fraud prevention and platform safety
• Reputation scoring and trust level calculation
• Facilitating transactions between users
• Account security and session management
• Service-related email communications

We use a limited number of third-party services to operate the platform. Data shared with each provider is the minimum necessary for the service to function:

• Payment processor: handles subscriptions and billing
• Identity verification provider: verifies user identity (see above)
• Email delivery provider: sends transactional emails
• Shipping verification service: confirms delivery of shipped items
• Cloud hosting provider: hosts and serves the application, and provides our cookieless page analytics

We use privacy-focused page analytics from our cloud hosting provider to count page views and understand which parts of RepChecked are useful. It is designed to tell us about pages, not about people:

• No cookies and no persistent identifiers. It does not follow you across other websites or build a profile of you.
• It records the page address, the referring site, your approximate country, and general device details such as browser, operating system and device type.
• We remove query strings from every page address before it is sent. Pages reached through private links, such as transaction confirmation, deal room, response and password reset links, are never sent at all.
• Analytics data is reported to us only in aggregate and is never linked to your account.
• We never sell analytics data or share it with advertisers.

• Sell your personal data to anyone, ever
• Share your information with advertisers or data brokers
• Use tracking or advertising cookies
• Use advertising pixels, cross-site trackers, or analytics that identify you
• Monetize your data in any way beyond providing our core service

We implement industry-standard security measures to protect your data, including encrypted data transmission over HTTPS, secure session management, and encrypted data storage. We regularly review our security practices to ensure your information remains protected.

Closing your account anonymizes your name and email, deletes your profile photo and uploaded files that are not part of a report, transaction or case record, clears your ZIP code, revokes sign-in sessions and credentials, and disconnects platform accounts. We also ask our identity provider to delete the verification data it holds for your most recent verification, and ask our payment provider to delete your customer profile; the payment provider keeps records of past payments as the law requires. We keep the account row and reserve its username, displaying Closed account on shared profiles. Transactions, feedback, reports, counterparty marks, trust history, suspension records and identity matching hashes are retained for fraud prevention and other members’ reputation. Closing an account does not erase its transaction history or allow its holder to verify a fresh identity. Retained records are pseudonymous, not fully anonymous, and remain subject to applicable privacy rights. Contact us for review of personal information in evidence or historical records and for questions about provider-held data.

You do not need an account or a purchase to request access, correction or erasure. Use our contact page, identify the handle or record concerned, and explain your request. Do not send identity documents through the contact form. We may ask for proportionate proof that the request concerns you. We acknowledge requests within five business days and respond within one calendar month, or sooner where required. We explain any information retained, the reason, and any applicable extension or complaint options. Public registry summaries contain platform handles, report counts, categories, amounts, dates and a verified subject response. Evidence is restricted to reviewers. Email, phone and payment contact values are never published; contact matching uses hashes and is limited to verified members. See the Scam Alert Registry policy.

RepChecked uses only essential session cookies required to keep you signed in and maintain your session security. We do not use tracking cookies or advertising cookies, and our page analytics do not use cookies at all.

You have the right to access, correct, or delete your personal information at any time. To exercise any of these rights, please reach out through our contact page.

We may update this privacy policy from time to time. If we make material changes, we will notify you via email or through a prominent notice on the platform. We encourage you to review this page periodically for the latest information.