Privacy Policy

Last updated: May 21, 2026

This Privacy Policy explains how DomainSpace ("we," "us," "our"), operated by DomainSpace LLC, a Wyoming limited liability company, collects, uses, and shares information about you when you use our marketplace at domainspace.app.

Information We Collect

Information you provide

Account data: Email address, username (handle), display name, bio, profile picture, password (hashed).
Listings: Domain names, prices, descriptions, and other content you post.
Communications: Messages you send to other users through the Platform, support requests, and feedback.
Payment data: Processed by Stripe. We do not store full card numbers, CVV, or bank details. We do receive a Stripe Customer ID, transaction amounts, and payment status.

Information we collect automatically

Usage data: Pages visited, listings viewed, bids placed, features used, browser type, device type, approximate location (from IP).
Cookies and similar technologies: Session cookies for authentication; we do not use third-party advertising cookies.

Information from third parties

Stripe: Payment status, refund records, subscription state.
AI providers (Anthropic): Domain valuations are generated using Claude. The domain string you appraise is sent to Anthropic's API; no personal information is included in those requests.

How We Use Information

To provide, maintain, and improve the marketplace.
To process transactions, deliver Pro Seller benefits, and provide customer support.
To detect, prevent, and address fraud, abuse, and security issues.
To send transactional emails (password resets, sale confirmations, dispute updates) and, with your consent, marketing emails.
To comply with legal obligations and respond to lawful requests.
To enforce our Terms of Service.

How We Share Information

We do not sell your personal information. We share information only in the following circumstances:

Other users: Your username, profile picture, listings, posts, comments, ratings, and reviews are public. Buyer/seller messaging threads are visible only to thread participants and our admin team for moderation.
Service providers: Supabase (hosting, database, authentication, file storage), Stripe (payments and subscriptions), Anthropic (AI valuation), Netlify (web hosting). These providers process data on our behalf under contractual obligations.
Legal requirements: If required by law, subpoena, or court order, we may disclose information to government authorities or in response to a legitimate legal process.
Business transfers: In a merger, acquisition, or sale of assets, your information may be transferred to the successor entity.

Data Retention

We retain your account information as long as your account is active. Transaction records are kept for at least seven years for tax and compliance purposes. You may delete your account at any time; some information (transaction logs, audit trails) may be retained where required by law.

Your Rights

Depending on where you live, you may have the right to:

Access: Request a copy of the personal data we hold about you.
Correction: Update inaccurate or incomplete data.
Deletion: Request that we delete your data (subject to legal retention requirements).
Portability: Request your data in a structured, machine-readable format.
Opt out of marketing: Unsubscribe from marketing emails at any time.

To exercise any of these rights, email us at josephreyes2728@gmail.com.

California Residents (CCPA / CPRA)

If you are a California resident, you have the rights described above plus the right to know what categories of personal information we have collected, sold, or disclosed. We do not sell personal information as defined under CCPA.

EU/UK Residents (GDPR)

If you are in the European Economic Area or United Kingdom, our legal basis for processing your data is: (a) contract performance (to provide the marketplace), (b) legitimate interest (fraud prevention, service improvement), (c) legal obligation (tax records), and (d) consent (for marketing emails). You have the right to lodge a complaint with your local data protection authority.

Data may be processed in the United States. We rely on appropriate safeguards (such as Standard Contractual Clauses with our service providers) for international transfers.

Children's Privacy

The Platform is not intended for users under 18. We do not knowingly collect personal information from anyone under 18. If we learn that we have collected such information, we will delete it. Contact us if you believe a minor has used the Platform.

Security

We use industry-standard practices to protect your data, including encryption in transit (HTTPS/TLS), encryption at rest (Supabase), hashed passwords, and restricted access to personal information. No system is completely secure, however, and we cannot guarantee absolute security.

If we become aware of a data breach affecting your personal information, we will notify you and applicable authorities as required by law.

Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated by updating the "Last updated" date and, where appropriate, by email or in-product notice.

Contact

Questions or concerns about your privacy? Contact us at josephreyes2728@gmail.com or via our contact page.