CLUTCHGRAB POLICIES
Privacy Policy
This policy explains what ClutchGrab collects from visitors and members, why we use it, and the choices available to you.
Information we collect
- Account information: email address, authentication provider, verification status, and security events.
- Google sign-in information: the basic profile information Google shares with your permission, including name, email address, and profile image.
- Member profile: username, ZIP code, city, state, and optional riding styles.
- Marketplace content: listings, photographs, saves, availability changes, seller disclosures, and sale-confirmation responses.
- Communications and safety: member messages, blocks, reports, appeals, evidence, and moderation records.
- Operational data: device, browser, IP-address, request, authentication, delivery, error, and privacy-safe pilot event information processed by us or our service providers.
- Product analytics: visits, registration and sign-in, and listing creation steps. Pilot session recordings mask form inputs and page text. We do not send message contents or passwords to analytics.
How we use information
We use information to authenticate members; operate listings, messaging, notifications, and sale acknowledgments; secure the service; investigate reports; enforce our policies; maintain and improve the pilot; and comply with legal obligations. We do not use Google user data for advertising or sell personal information.
What anyone can see
Published, available listings show the seller’s username, listing content, photos, and approximate city and state to anyone, including signed-out visitors. Conversation participants can see the messages they exchange. ClutchGrab does not publish a member’s email address, precise street address, password, or private moderation material.
Service providers and disclosure
We use service providers including Supabase for authentication, database, and storage; Vercel for hosting and operational logs; Resend for email; PostHog for product analytics and pilot session recordings; and Google when a member chooses Google sign-in. They process information for the services they provide to us. We may also disclose information when reasonably necessary to protect members, investigate abuse, comply with law, or respond to valid legal process.
Retention
Active account and marketplace data is generally retained for the life of the account. A deletion request has a 30-day waiting period. Messages may remain in anonymized participant history and may be retained for safety or legal holds. Closed reports, evidence, privileged audit events, and privacy-safe pilot metrics may be retained for up to 24 months; authentication security events for 90 days; and rolling backups for 30 days. Data may be retained longer when required by law or an active safety investigation.
Your choices
Members can update profile information, manage security, sign out other sessions, and request account deletion through Account settings. You can ask to review or correct information by emailing our privacy contact at admin@clutchgrab.com. Authentication and essential security messages cannot be opted out of while an account remains active.
Cookies and tracking signals
ClutchGrab uses authentication cookies and limited first-party operational measurement. We do not currently use cross-site behavioral advertising. Because there is no uniform Do Not Track standard, the service does not currently respond to browser Do Not Track signals.
Children
ClutchGrab is for adults age 18 and older and is not directed to children. We do not knowingly collect personal information from children under 13.
Security and changes
We use administrative and technical safeguards appropriate to this pilot, but no online system is perfectly secure. We will post material policy changes here and require renewed acceptance when appropriate.
For marketplace-specific risks, read Marketplace Safety.