Privacy Policy

• We collect what we need to run a safe marketplace: your account, your orders, your messages and your payments.
• We never sell your data and we don’t use advertising or tracking cookies.
• Other members only see your public profile — never your email. A seller sees your shipping address only for an order you place with them.
• Payments go through Binance and NOWPayments; they receive what they need to process the payment.
• You can update most of your data in Settings and ask us to close your account at any time.

Account: email, username, password (stored only as a one-way hash), optional display name, bio, country, profile and cover photos, and — if you turn it on — your 2-step verification secret (stored encrypted). If you sign in with Google we receive your name, email and Google account ID.

Selling: your shop details (hours, languages, links you choose to show, policy), listings, photos, digital files and codes you upload (codes are stored encrypted), and the payout destinations you save (Binance ID or email, wallet addresses).

Orders and payments: what you buy and sell, prices, shipping addresses and tracking numbers, balance movements, deposits and withdrawals (amounts, coin and network, deposit addresses and transaction IDs).

Communication: chat messages and attachments, support requests, reviews, reports and dispute evidence.

Security and technical: the devices you’re signed in on (browser, IP address, last activity), sign-in events, and actions our staff take on your account. We keep these to protect your account and investigate fraud.

• To run your account, show your listings and profile, and process orders, escrow, payouts and refunds.
• To keep the marketplace safe: review listings, detect fraud and account takeovers, enforce our Terms and settle disputes.
• To send you service messages — order updates, security alerts, password resets — and, if you allow it, email notifications.
• To answer support requests and improve rebitx using aggregate statistics (no individual profiling for ads).
• To meet legal, tax and anti-money-laundering obligations.

Your username, display name, profile and cover photos, bio, country, shop details, listings, ratings and reviews are public. Reviews you leave show a masked version of your name.

Your email is never shown to other members. Someone can start a chat with you only by entering your exact username — or your exact email if you allow it (Settings → Privacy). We never suggest or list members.

A seller sees the buyer’s shipping address only for orders that buyer placed with them, and only to deliver that order.

We share only what each service needs to do its job:

• Binance (Binance Pay and withdrawals) and NOWPayments (crypto wallet deposits) — payment amounts, order or withdrawal IDs, and the destination you choose.
• Cloudflare — stores uploaded photos and files.
• Google — only if you use “Continue with Google”.
• Our email provider — to deliver account and order emails.
• Hosting and security providers that run our servers and backups.
• Authorities — when the law requires it, or to protect members from fraud or harm.

These providers may process data outside your country. We only use providers that protect it under contract.

• Sign-in cookie — keeps you signed in. It’s secure, can’t be read by scripts, and expires when you sign out.
• “Ship to” country — remembers where you want items delivered.
• We don’t use advertising, analytics or cross-site tracking cookies.

We keep your account data while your account is open. Order, payment and balance records are kept for as long as the law requires for accounting, tax and anti-money-laundering purposes — even after an account is closed. Chat messages, reviews and dispute evidence linked to orders are kept for the same period so disputes and fraud can be investigated.

A signed-in device’s record is deleted when you sign that device out.

• Passwords are hashed; 2-step verification secrets, digital codes and private files are encrypted or kept in private storage.
• 2-step verification is required to sell, withdraw and use staff tools. Manual balance changes by staff need the admin’s own 2-step code and can’t be made on their own account.
• Every order is held in escrow, and staff actions on accounts are logged.
• No system is perfectly secure — if we discover a breach affecting you, we’ll tell you without undue delay.

You can view and update your profile, photos, email preferences and privacy settings in Settings, and sign out other devices in Security.

You can ask us for a copy of your data, to correct it, or to close your account and delete what we don’t have to keep — email [email protected]. Depending on where you live you may have further rights (for example to object or to complain to a data-protection authority).

rebitx is for people aged 18 and over. We don’t knowingly collect data from anyone younger.

We’ll update this page when our practices change and tell you about important changes by email or in the app. Questions? Email [email protected] or message rebitx Support.