Privacy Policy
We collect only what we need to run safe local auctions, and we never sell your information.
Draft, under legal review. This page describes how Lotzo works today and may change before launch. Last updated October 23, 2026.
What we collect
- Account: your name, email address, and a password (stored only as a secure hash).
- Phone number: verified by text message, needed to bid or sell.
- Listings: photos, descriptions, prices, your pickup area and pickup address.
- Activity: your bids, orders, and any problems you report.
- Payments: card and bank details go straight to Stripe. Lotzo never sees your full card or bank numbers; we keep only a reference to them.
What other people see
- Anyone: your listings, your name as a seller, and your pickup area (the first 3 characters of your postal code).
- After a sale is paid: the buyer sees the seller's name, phone number and pickup address, and the seller sees the buyer's name and phone number, so you can arrange the pickup.
- Your exact address is never shown before payment, and the lowest price you'll accept is never shown to anyone.
Services we use
These companies process information on our behalf, only to provide their service. Some of them store data outside Canada, including in the United States.
- Stripe: payments, payouts and seller identity checks
- Supabase: our database
- Cloudflare: photo storage and bot protection
- Vercel: website hosting
- Twilio: text-message verification codes
- Resend: emails such as outbid alerts and pickup details
- Anthropic: if you choose to have AI write your listing, your photos are sent to Anthropic's Claude to draft it
Cookies and your browser
We use a cookie to keep you signed in. If you enter a postal code to see distances, it's saved in your browser only, not on our servers. We don't use advertising cookies.
How long we keep it
We keep your information while your account is open. Records of sales and payments are kept as long as the law requires, for example for tax purposes, even after an account is closed.
Your rights
Under Canadian privacy law you can ask to see the personal information we hold about you, correct it, or have your account and data deleted. Contact us and we'll help. You can change your name, phone number and card yourself in My Lotzo → Settings.