Privacy Policy
Last updated: August 5, 2026
1. Introduction
EBLIT LLC, a Delaware limited liability company ("EBLIT", "we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use the EBLIT platform. By using EBLIT, you consent to the practices described in this policy. If you do not agree with this policy, please do not use the Platform.
2. Information We Collect
We collect the following categories of information: (a) Account Information: name, email address, password (hashed), phone number, street address, city, state, zip code; (b) Identity Verification Data: through Stripe Identity, we receive and store your verified legal name, your verified date of birth (used to confirm you are at least 18 years of age), the type of identity document you presented, its issuing state, the verification status and result, and an irreversible cryptographic hash of your identity document number used for fraud prevention. We do NOT store your identity document number itself, and we do NOT receive or store photographs or scans of your identity document — those remain with Stripe; (c) Transaction Data: product listings, purchase history, sale history, payment amounts, shipping addresses, tracking numbers; (d) Location Data: GPS coordinates collected at specific points during meetup and shipping transactions for verification purposes; (e) Device and Usage Data: IP address, browser type, device identifiers, pages visited, features used, time and date of access; (f) Communications: messages sent through the Platform's chat system, support tickets, and dispute communications; (g) Payment Data: payment method details processed and stored by Stripe; EBLIT does not store full payment card numbers; (h) Identity Photos: photographs taken during meetup transactions to confirm that the individuals completing the transaction are the parties associated with the relevant accounts. We retain these photographs only for as long as necessary to fulfil the purposes described in this policy, including the completion of transactions, the investigation and resolution of disputes and payment chargebacks, and the prevention of fraud, after which they are securely and permanently deleted; (i) LiveVerify Call Recordings: audio and video recordings of LiveVerify calls between a buyer and a seller, captured when a LiveVerify session takes place.
3. How We Use Your Information
We use your information to: operate and improve the Platform; process transactions and facilitate payments; verify your identity and prevent fraud; enforce our Terms of Service and other policies; communicate with you about your account and transactions; provide customer support; send transactional emails and notifications; comply with legal obligations; calculate and apply applicable sales tax based on the delivery destination (the shipping address for shipped items) or the meetup location for in-person exchanges; protect the rights, property, and safety of EBLIT, our users, and the public; detect and prevent fraudulent, unauthorized, or illegal activity; generate anonymized analytics to improve the Platform.
3A. Session Recording
We record a sample of web browsing sessions to diagnose errors and understand how the Platform is used — including clicks, scrolling, navigation, and timing. Recording is configured to mask all text, mask all form inputs, and block all images and video before any recording leaves your browser, and network request and response bodies are not recorded. We similarly record a sample of mobile app sessions — including taps, gestures, screen views, navigation, and timing — configured to mask all text (including text you type), mask all images, and mask all vector graphics before any recording leaves your device. As a result, on both the website and the mobile app, we do not capture your name, address, date of birth, identity document numbers, payment details, message contents, or photographs through session recording. We record approximately 10% of sessions, together with sessions in which an error occurs. Session recordings are processed and stored on our behalf by Sentry (Functional Software, Inc.) as our processor. We do not record our administrative interfaces.
3B. Text Messages
If you provide a mobile number, EBLIT may send you text messages, including one-time verification codes that you request and, if you have separately consented, messages about our launch and updates. Message frequency varies by the messages you request. Message and data rates may apply. You can reply STOP to any message to opt out, or HELP for support. We do not sell or share your SMS opt-in information or consent with third parties for marketing purposes.
3C. Support Correspondence
When you contact EBLIT support, or when EBLIT opens a support ticket about your account, the messages exchanged — the ticket, your messages, and our replies — are kept as a record of the matter. We retain this correspondence even after you delete your account. We do this because a support exchange is often the record of what happened in a dispute and may be needed to resolve that dispute, to investigate a payment chargeback or fraud, or to meet a legal or regulatory obligation. We do not anonymize the contents of these messages: the wording of what was said is frequently the evidence itself, and free-text messages cannot be reliably redacted without destroying that record. Support correspondence is retained for seven years, matching the retention period stated for transaction and dispute records in the Data Retention section below, and is then deleted.
4. Identity Hashing and the FirmSecureHash System
EBLIT uses a proprietary system to generate a pseudonymous identifier (the "FirmSecureHash" or "FSH") linked to your verified identity. This system enables EBLIT to track product ownership history and detect unauthorized re-listings without storing your raw government ID information. The specific methodology used to generate FSH identifiers is a proprietary trade secret. Your FSH number is never displayed in any user-facing interface. In the event of a data breach, exposure of FSH data does not expose your underlying government identification information.
4A. Display of Your Verified Name
When you complete identity verification, the legal name on your identity document becomes the name displayed on your EBLIT account — including on your profile, your listings, your messages, and your transaction records. We notify you when this happens. Displaying your verified legal name is how buyers and sellers know who they are dealing with on the Platform. If the legal name on your identity document differs from the name you ordinarily use, please contact us before completing verification.
5. Information Sharing
We share your information only in the following circumstances: (a) With other users, as necessary to complete transactions (e.g., shipping address shared with seller after payment, buyer name shared with seller for meetup); (b) With Stripe, Inc. for payment processing and identity verification; (c) With EasyPost for shipping label generation and carrier tracking; (d) With Amazon Web Services for infrastructure, storage, and communication services, including Amazon Chime, which carries and records LiveVerify video calls; (e) With Sentry (Functional Software, Inc.) for error monitoring and session recording; (f) With law enforcement or government authorities when required by law or legal process, or to protect the safety of users or the public; (g) With successors in the event of a merger, acquisition, or sale of assets, in which case users will be notified; (h) With service providers who assist in operating the Platform under confidentiality obligations. We do not sell your personal information to third parties. We do not share your personal information with advertisers.
6. Data Retention
We retain your personal information for as long as your account is active or as needed to provide services. Financial records and transaction data are retained for a minimum of seven years for legal and compliance purposes. Dispute records are retained for a minimum of seven years. Identity Photos taken during meetup transactions are retained only for as long as is reasonably necessary to fulfil the purposes for which they were collected, principally the completion of the transaction, the investigation and resolution of disputes and payment chargebacks, and the prevention and detection of fraud. Because a payment chargeback may be initiated for a period of time after a transaction is completed, these photographs are retained for a limited period following completion sufficient to allow such disputes to be investigated and resolved, and are then securely and permanently deleted. During this period, and to limit the data we hold, these photographs may be moved to secure archival storage. Where a dispute is opened, the associated photographs are retained until that dispute is fully resolved. LiveVerify call recordings are retained for approximately 20 days after the session and are then deleted; if a dispute is opened, the recording is retained until that dispute is fully resolved. After seven years, financial records are anonymized -- your name and contact information are removed while the financial record is preserved. You may request deletion of your account and associated data subject to our retention obligations for financial and legal records.
7. Data Security
We implement industry-standard technical and organizational measures to protect your personal information, including encryption in transit (TLS), hashed passwords using bcrypt, row-level security on sensitive database tables, access controls limiting employee access to personal data, and regular security assessments. No method of transmission over the Internet is 100% secure; we cannot guarantee absolute security of your data. In the event of a data breach that affects your personal information, we will notify you as required by applicable law.
8. Cookies and Tracking
We use cookies and similar tracking technologies to operate the Platform, authenticate users, and analyze usage. Please see our Cookie Policy for full details on the types of cookies we use and how to manage your preferences.
9. Your Rights
Depending on your jurisdiction, you may have the following rights regarding your personal information: (a) Right of Access: request a copy of the personal information we hold about you; (b) Right of Correction: request correction of inaccurate personal information; (c) Right of Deletion: request deletion of your personal information, subject to retention obligations; (d) Right of Portability: request your personal information in a portable format; (e) Right to Object: object to certain processing of your personal information; (f) Right to Withdraw Consent: withdraw consent where processing is based on consent. To exercise your rights, contact us through the Support section of the Platform. We will respond within 30 days.
10. Children's Privacy
The Platform is not directed at children under 18 years of age. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to delete that information promptly.
11. International Transfers
EBLIT is operated from the United States. If you access the Platform from outside the United States, your information may be transferred to and processed in the United States. By using the Platform, you consent to the transfer of your information to the United States.
12. Third-Party Links
The Platform may contain links to third-party websites. We are not responsible for the privacy practices of those websites. We encourage you to review the privacy policies of any third-party websites you visit.
13. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last Updated" date and, where appropriate, by email. Your continued use of the Platform after changes constitutes your acceptance of the updated policy.
14. Contact
For privacy-related questions or to exercise your rights, please contact us through the Support section of the Platform.