Privacy Policy
Last updated: May 7, 2026🔒 The short version: BenefitsFromBenefits is designed with privacy first. We collect only what's needed to run the platform — your email for authentication, your listings, and your messages. We don't track you, run ads, or sell data to anyone.
1. Our Privacy Commitment
BenefitsFromBenefits ("the Platform") is built around anonymous, local sharing. We believe you should be able to share and browse work benefits without giving up unnecessary personal information. This Privacy Policy explains what data we collect, where it lives, and how it's handled.
2. Data We Collect
2.1 Data You Provide
When you use the Platform, you may provide:
| Data Type | Purpose | Storage |
|---|---|---|
| Email address | Account authentication and password recovery | Supabase Auth (cloud) |
| Display name | Personalize your identity within the Platform | Supabase Database (cloud) |
| Listing details (title, description, price, category, location) | Display your listing to other users | Supabase Database (cloud) |
| Images (uploaded) | Visual representation of your listing | Supabase Storage (cloud) |
| Messages | Communication with other users about listings | Supabase Database (cloud) |
| Preferences (theme, default location) | Customize your experience | Your browser (localStorage) |
2.2 Data Generated Automatically
The Platform automatically generates:
- User ID: A unique identifier assigned by Supabase Auth when you create an account. This is used to associate your listings and messages.
- Timestamps: When listings are created, messages are sent, and accounts are registered.
- Authentication tokens: Session tokens stored in your browser to keep you logged in.
2.3 Data We Do NOT Collect
We do not collect, store, or process:
- Your real name (display name is optional and can be anything)
- Your phone number or social media accounts
- Your browsing history or behavior analytics
- Your precise location (GPS/geolocation) — you manually select state and city
- Payment or financial information
- Tracking cookies or advertising identifiers
3. Where Your Data Lives
Your data is stored across the following services:
- Supabase (Backend): Your account, listings, messages, and uploaded images are stored on Supabase's cloud infrastructure (hosted on AWS). Supabase provides authentication, PostgreSQL database, and file storage. Supabase Privacy Policy.
- Cloudflare (Hosting & CDN): The Platform's website files (HTML, CSS, JavaScript) are served through Cloudflare Pages. Cloudflare may process standard web request data (IP addresses, request headers) for security and performance. Cloudflare Privacy Policy.
- Your Browser: Theme preferences and UI settings are stored locally in your browser's localStorage.
4. How Your Data Is Used
Your data is used exclusively to:
- Authenticate your account and manage sessions
- Display your listings to other users on the Platform
- Enable messaging between users about listings
- Save your preferences and personalization settings
- Enforce platform rules and moderate reported content
- Provide the core functionality of the Platform
Your data is never used for advertising, profiling, behavior tracking, or sold to third parties.
5. Data Sharing
- Your listings are publicly visible to all Platform users
- Your messages are visible only to you and the recipient
- Your email is visible only to Platform administrators and is never shared publicly
- We share data with our infrastructure providers (Supabase, Cloudflare) only as necessary to operate the Platform
- We do not share data with advertisers, data brokers, or marketing companies
- We may disclose data if required by law or to protect the safety of our users
6. Your Rights & Control
You have full control over your data:
- View: All your data is visible within the Platform (My Listings, Inbox, Saved, Settings)
- Edit: You can edit your listings and display name at any time
- Delete: You can delete individual listings and remove messages from your inbox
- Account Deletion: Contact us to request full account deletion
7. Data Security
We take data security seriously:
- All data in transit is encrypted via HTTPS/TLS (enforced by Cloudflare)
- Database access is protected by Row Level Security (RLS) policies — users can only access their own data
- Authentication is handled by Supabase Auth with secure password hashing
- Image uploads are stored in private Supabase Storage buckets with access controls
- Administrative access requires verified admin credentials
8. Third-Party Services
The Platform uses the following external services:
- Supabase: Authentication, database, real-time data sync, and file storage. Privacy Policy.
- Resend: Transactional email delivery (account verification, password resets). Resend processes your email address solely to deliver these messages. Privacy Policy.
- Cloudflare Pages: Website hosting, CDN, and DDoS protection. Privacy Policy.
- Google Fonts (Inter): Typography. Privacy Policy.
- Unsplash: Sample listing images for demonstration purposes only.
No advertising networks, behavior trackers, or analytics tools are used.
9. Data Retention
We retain your data for as long as your account is active. Deleted listings and messages may be retained in our database for moderation and compliance purposes but are not visible to other users.
10. Children's Privacy
The Platform is not intended for use by individuals under the age of 18. We do not knowingly collect data from minors.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. We encourage you to review this page periodically.
12. Contact
If you have questions or concerns about this Privacy Policy, please contact us at admin@benefitsfrombenefits.com.