October 9, 2026 · 2026-10-09
Porch Market operates a local marketplace for homemade goods, garden produce, and handmade crafts in the United States. This policy covers our website and mobile app. Contact privacy@porch-market.com with privacy questions or requests.
Account and profile: name, email, password hash, profile photo, biography, city, state, and ZIP code. Listings and transactions: product descriptions, ingredients, photos, pickup and delivery addresses, orders, payment references, seller certifications, and tax forms where applicable. Stripe processes payments; we do not store full card numbers. Communications: messages, reviews, support requests, and content you submit. Device and usage: IP address, device identifiers or fingerprints used for security, push tokens, app/browser information, usage events, and crash diagnostics. Location: ZIP/address-based location and, if you grant permission, foreground device location for nearby searches. We do not request background location tracking. Biometric unlocking is performed by your device. We do not receive your Face ID or fingerprint biometric templates.
We use information to operate the marketplace, fulfill orders, process payments, communicate with you, verify seller eligibility, prevent fraud, moderate content, resolve disputes, and meet legal and tax obligations. Privacy settings let you manage analytics and marketing preferences. Essential security and transaction processing are not disabled by opting out of optional analytics or marketing.
Public profiles, listings, and reviews are visible to other users. Buyers and sellers receive information needed to arrange fulfillment, such as pickup/delivery details and messages. Providers process information needed for their services: Stripe for payments; Cloudflare R2 for uploaded files; database and application hosting providers; email and push-delivery providers; Sentry for crash/error diagnostics; and configured AI providers, including Google Gemini, for AI tools, seller verification, or moderation. AI processing may include submitted product text, ingredients, label images, and certification documents. Do not submit unnecessary sensitive information to AI tools. We may disclose records for legal requirements, security investigations, disputes, or a business transfer subject to applicable protections. We do not sell personal information for money or share it for cross-context behavioral advertising.
Open Profile → Privacy & Delete Account in the mobile app, or Profile → Privacy Settings on the website, to manage preferences, export data, or request deletion. You can update profile information and device permissions separately. You may request correction, restriction, or an appeal through privacy settings or privacy@porch-market.com. We may verify your identity and respond within applicable legal deadlines, ordinarily within 45 days. We do not discriminate for exercising privacy rights.
When account-deletion processing is activated, you can request deletion within the app or website without contacting support. You receive a scheduled date with a 14-day cancellation period and can cancel before processing starts. Repeating a request does not extend this period. Once processing starts, removal cannot be undone. Completion removes your profile, authentication credentials, personal messages and public content, notification registrations, preferences, and other non-required account data. Future recurring marketplace orders are cancelled, and listings become unavailable. Minimal non-identifying record references may remain so other users' transaction histories continue to work. Outstanding orders or payment obligations may require settlement before completion. We will not treat a scheduled request or an administrative status change as completed deletion. Tax/payment records and evidence needed for legal obligations or unresolved disputes may be retained with restricted access. When completion is delayed, the request remains open for follow-up. We send a completion confirmation; contact information needed to deliver that notice is retained only until delivery.
We keep information while it is needed for the purposes described here. After account deletion, retention is limited to applicable legal/tax requirements, unresolved transactions or disputes, and proportionate security/fraud-prevention needs. Retention depends on the record type and applicable obligation; it is not a blanket seven-year rule for messages or device fingerprints. We review retained records and remove or de-identify them when their purpose or required retention ends. Payment and hosting providers may also have independent legal retention duties. Backup copies are subject to the hosting provider's backup lifecycle and must not be restored as active accounts.
We use password hashing, encrypted transport, access controls, and security monitoring. No service can guarantee absolute security. Keep your password private and use available two-factor authentication. We handle security incidents and notifications under applicable law.
Porch Market is intended for adults 18 and older. We do not knowingly collect children's personal information. Contact us if you believe a child supplied personal information so we can investigate and remove it as appropriate.
We provide notice of material policy changes through the platform or email before they take effect where required. The policy version is shown on this page and in privacy settings. Privacy contact: privacy@porch-market.com.