1. INTRODUCTION AND SCOPE
1.1 About this Policy. This Privacy Policy explains how ForGrabs, a company registered in the State of Delaware ("ForGrabs", "we", "us" or "our"), collects, uses, shares and protects personal information when you use our website at https://itsforgrabs.com (the "Website"), the ForGrabs mobile application (the "App"), and our marketplace, payment, messaging and AI features (together, the "Services").
1.2 Who it covers. This Policy applies to buyers, sellers, waitlist members and visitors, including users aged 13 to 17 and the parents or guardians who consent to their use. It does not cover the practices of other users you deal with on the marketplace, or of third-party services we do not control.
1.3 Relationship to our Terms. This Policy forms part of our Terms and Conditions. Capitalized terms not defined here, such as Listing, Order, Condition Grade and GearGrader, have the meanings given in the Terms and Conditions.
1.4 Earlier policy. From the Effective Date, this Policy replaces any privacy policy previously published on the Website or in the App.
2. WHO WE ARE AND HOW TO CONTACT US
2.1 Business responsible for your information. ForGrabs is responsible for the personal information described in this Policy.
2.2 Contact details.
- Address: 4140 North Central Avenue, Phoenix, Arizona 85012
- Email: contact@itsforgrabs.com
- Website: https://itsforgrabs.com
3. INFORMATION YOU GIVE US
3.1 Waitlist and account information. Your email address when you join the waitlist; and, when you create an account, your name, email address, phone number if provided, password or sign-in credentials, profile photo, general area and date of birth or age confirmation.
3.2 Parental consent information. For users aged 13 to 17, the name and email address of the consenting parent or legal guardian, and your confirmation that they have consented.
3.3 Listings and photographs. Photographs, descriptions, prices, sizes, brand and model details, delivery options and other information you include in Listings.
3.4 Transactions. Details of Orders you make or receive, shipping names and addresses, pickup arrangements, refund requests and the evidence you submit in support of them.
3.5 Payment and payout information. Buyers' payment card details are entered into and processed by our payment processor, Stripe. Sellers provide identity, bank account and taxpayer information, which may include date of birth, home address, the last four digits or full Social Security number or Employer Identification Number, and government identification where Stripe requires it for verification. Most of this information is collected directly by Stripe. We receive limited details, such as the card brand and last four digits, payout status and verification status.
3.6 High-volume seller information. If you are a high-volume seller under the federal INFORM Consumers Act, the bank account, contact, tax identification and business information the law requires us to collect and verify.
3.7 Messages, ratings and reviews. Messages you send to other users through the Services, ratings and reviews you give, and reports you make.
3.8 AI Feature inputs. Text you enter into the listing assistant or gear question tool, and photographs reviewed by GearGrader.
3.9 Support and feedback. Information you provide when you contact us, take part in a survey or send feedback.
4. INFORMATION COLLECTED AUTOMATICALLY
4.1 Device and usage information. When you use the Services, we and our service providers automatically collect information such as your IP address, device type and model, operating system, app version, browser type, device identifiers, push notification token, language settings, the pages you view on the Website, Listings you save, referring links and the date and time of your activity.
4.2 Diagnostics. Crash reports and performance data, which may include device information and technical details about errors.
4.3 Security signals. Information used to detect bots, fraud and abuse, such as IP address and how often requests are made from a device or account.
4.4 Cookies and similar technologies. Section 14 explains the cookies, software development kits and similar technologies we use.
5. LOCATION INFORMATION
5.1 Why we use location. ForGrabs connects buyers and sellers in their local communities. We use location to show Items near you, sort results by distance, show the general area of Listings and support local pickup.
5.2 Precise location. With your permission through your device settings, the App collects your device's precise location and uses it only for the purposes in Section 5.1 and to help prevent fraud. You can withdraw permission at any time in your device settings, and you can enter a ZIP code or city instead, although distance-based features may then be less accurate.
5.3 What other users see. Other users see only the general area of a Listing or profile, such as the city or neighborhood, and the approximate distance. We do not display your precise location or your home address. A pickup location is shared only if you choose to share it in a message.
5.4 Approximate location. We may also infer your approximate location, such as your city or state, from your IP address.
5.5 Users under 18. For users under 18, we use precise location only where it is reasonably necessary to provide the distance-based features you request, and we never display it to other users.
6. INFORMATION FROM THIRD PARTIES
6.1 Stripe. Payment status, payout status, identity verification results and fraud risk signals.
6.2 Sign-in providers. If you sign in with a third-party account, such as Apple or Google, where we offer that option, we receive your name and email address, or a relay email address, as permitted by your settings with that provider.
6.3 Shipping carriers. We do not connect to shipping carriers. If a buyer or seller gives us tracking or delivery information, we use it to handle the Order.
6.4 Other users. Information other users provide about you, such as ratings, reviews, reports and messages.
6.5 Analytics provider. Aggregated information about Website use from Vercel Web Analytics.
7. PHOTOGRAPHS AND CHILDREN'S INFORMATION
7.1 Photograph the gear, not the child. Many Items on ForGrabs are children's gear. We ask users not to upload photographs showing a child's face, name, school, team or jersey number, and to crop or blur these details before uploading. Listing photographs are public.
7.2 Our approach. We may use automated tools and human review to detect and remove, crop or blur photographs that show children. If you see a photograph of a child that you believe should not be on ForGrabs, report it in the App or email contact@itsforgrabs.com and we will review it promptly.
7.3 Sizes and sports information. Listings and searches involve sizes, sports and age ranges of gear. We do not ask for, and do not want, information about your child's name, date of birth, school, health or performance. Please do not include it in Listings or messages.
8. HOW WE USE PERSONAL INFORMATION
8.1 Purposes. We use personal information to:
- create and manage accounts, verify users and keep the Services secure;
- publish Listings and seller pages, power search and distance-based results, and show relevant Items;
- process Orders, hold payments, release payouts, handle refunds and resolve requests under the Terms and Conditions;
- operate GearGrader, the listing assistant and the gear question tool;
- enable messaging between users, and send transactional emails and push notifications about accounts, Orders, payouts and safety;
- detect, investigate and prevent fraud, prohibited Items, unsafe conduct and breaches of the Terms and Conditions, including moderating content and acting on reports;
- send waitlist invitations and, where permitted, marketing emails;
- understand how the Services are used, fix problems and improve the Services;
- meet legal obligations, including tax reporting, marketplace facilitator sales tax, the INFORM Consumers Act, product safety and recall cooperation, and responses to lawful requests; and
- establish, exercise or defend legal claims and enforce our agreements.
8.2 De-identified information. We may create de-identified or aggregated information, such as marketplace statistics, and use it for any lawful purpose. We will not attempt to re-identify de-identified information except to test our de-identification methods or as permitted by law.
9. AI FEATURES
9.1 Our AI provider. GearGrader, the listing assistant and the gear question tool are powered by artificial intelligence models provided by Anthropic, PBC, which acts as our service provider.
9.2 What is sent. For GearGrader, we send the Listing photographs and relevant Listing details. For the listing assistant and gear question tool, we send the text you enter and relevant Listing details. We do not send your payment information or precise location to our AI provider.
9.3 No model training. Our AI provider processes this information only to return results to us so that we can provide the Services. It is not used to train our AI provider's models. We do not use your messages or payment information to train any AI model.
9.4 Automated outputs. Condition Grades and Safety Checks are generated automatically from Listing photographs and are displayed on Listings. They describe an Item, not a person, and we do not use AI Features to make decisions that produce legal or similarly significant effects concerning you. A Seller may ask us to review a Condition Grade by contacting support.
10. PAYMENTS AND SELLER PAYOUTS
10.1 Stripe. Stripe, Inc. processes payments and payouts. Stripe collects and uses payment, identity and verification information as an independent business under its own privacy policy, available at https://stripe.com/privacy, as well as to provide services to us.
10.2 Card data. We do not receive or store full payment card numbers.
10.3 Fraud prevention. Stripe and we use automated tools to assess the risk of fraud in transactions. If a payment or payout is blocked or held, you may contact us to ask for it to be reviewed by a person.
10.4 Tax reporting. Stripe or we may report a seller's gross payments and taxpayer information to the Internal Revenue Service and state tax authorities where the law requires.
11. WHAT OTHER USERS CAN SEE
11.1 Public information. Your first name and last initial, profile photo, general area, Listings and their photographs, Condition Grades, items sold, ratings, reviews, verification label and when you were last active are visible to other users and, for Listings, to the public, including through search engines.
11.2 Transaction partners. When you buy or sell, the other party sees the information needed to complete the Order, such as your first name and last initial, messages and, for shipped Orders, the seller sees the buyer's shipping name and address.
11.3 High-volume sellers. Where the INFORM Consumers Act requires, a high-volume seller's name, physical address and contact information are disclosed to buyers.
11.4 Use by other users. Users may use other users' information only to complete transactions on ForGrabs. If another user misuses your information, please report it to us.
12. HOW WE SHARE PERSONAL INFORMATION
12.1 Service providers. We share personal information with service providers that process it on our behalf under contracts that limit their use of it, including:
| Provider | Purpose |
|---|---|
| Anthropic, PBC | AI models for GearGrader, the listing assistant and the gear question tool |
| Supabase, Inc. | Database, authentication and file storage |
| Resend, Inc. | Account, order and safety emails |
| Stripe, Inc. | Payments, payouts, identity verification and fraud prevention |
| Vercel Inc. | Website hosting, Website analytics and performance monitoring |
| Expo | Push notification delivery |
| Sentry | Error and crash reporting |
12.2 Other categories. We also share personal information with professional advisers such as lawyers, accountants and auditors.
12.3 Legal and safety. We disclose information where we believe in good faith that it is needed to comply with law, legal process or a lawful government request; to protect the rights, property or safety of ForGrabs, our users or the public, including by cooperating with law enforcement or the U.S. Consumer Product Safety Commission; or to enforce our Terms and Conditions.
12.4 Business transfers. Information may be transferred as part of a merger, acquisition, financing, reorganization, bankruptcy or sale of all or part of our business, subject to this Policy.
12.5 With your direction. We share information when you ask us to, for example when you share a Listing to social media.
12.6 Changes to providers. We may change service providers from time to time and will keep the list in Section 12.1 up to date.
13. NO SALE OF PERSONAL INFORMATION AND TARGETED ADVERTISING
13.1 No sale. We do not sell personal information for money or other valuable consideration.
13.2 No targeted advertising. We do not share personal information with third parties for cross-context behavioral advertising, and we do not use it for targeted advertising on other websites or apps. If this changes, we will update this Policy beforehand and give you the opt-out rights the law requires.
13.3 Global Privacy Control. If your browser sends a Global Privacy Control signal, we treat it as a request to opt out of any sale or sharing of personal information through that browser.
14. COOKIES, ANALYTICS AND SIMILAR TECHNOLOGIES
14.1 What we use. We use cookies, local storage, software development kits and similar technologies on the Website and in the App for the following purposes:
| Type | Purpose | Examples |
|---|---|---|
| Strictly necessary | Sign-in, security, fraud and bot prevention, checkout and remembering your settings | Supabase authentication, Stripe |
| Analytics | Understanding how the Website is used so we can improve it | Vercel Web Analytics |
| Performance and diagnostics | Measuring speed and fixing errors | Vercel Speed Insights, Sentry |
14.2 Analytics. We use Vercel Web Analytics on the Website, which measures page visits without using cookies. The App does not use analytics tools.
14.3 Emails. Our account, order and safety emails are sent through Resend.
14.4 Your choices. You can block or delete cookies through your browser settings, and reset your device advertising identifier or limit app tracking through your device settings. Blocking strictly necessary cookies may stop parts of the Services from working. Our Cookie Policy gives more detail on the cookies we use and how to manage them.
15. MARKETING COMMUNICATIONS AND NOTIFICATIONS
15.1 Marketing emails. If you join the waitlist or agree to receive marketing, we may send emails about launches, features and offers. You can unsubscribe at any time using the link in any marketing email or by emailing contact@itsforgrabs.com. We will still send transactional messages about your account and Orders.
15.2 Push notifications. With your permission, the App sends push notifications about messages, offers, Orders, payouts and Items you save. You can turn them off in your device settings.
15.3 Text messages. We do not currently send marketing text messages. If we introduce them, we will ask for your express consent first.
16. MESSAGES, MODERATION AND SAFETY
16.1 Review of messages. Messages between users are stored so that both parties can see them and so that we can resolve requests. Until an Order is placed between two users, automated tools hide phone numbers, email addresses and social media handles in their messages, to help keep payment on ForGrabs. Our team may read messages that are reported or relevant to a refund request or investigation.
16.2 Reports. When you report a Listing, conversation or comment, we use the information in your report to investigate. We do not tell the reported user who reported them, unless the law requires it.
17. DATA RETENTION
17.1 General rule. We keep personal information only for as long as we need it for the purposes in this Policy, including to provide the Services, meet legal, tax and accounting obligations, resolve disputes and enforce our agreements.
17.2 Typical periods.
- Account and profile information: while your account is open, then deleted or de-identified within 90 days after closure, unless needed for a purpose below.
- Listings and photographs: while the Listing is live and, for sold Items, as part of the Order record.
- Order, payment and payout records: for the period required by tax, accounting and financial reporting laws.
- Messages: while both accounts are open; if a conversation is under review for a safety or policy report when an account is deleted, we may keep a copy for up to 12 months after deletion, or longer where needed for a legal claim.
- Information about accounts removed for fraud or safety reasons: as long as needed to prevent the person from returning.
- Waitlist and marketing information: until you unsubscribe, after which we keep your email on a suppression list so we do not email you again.
- Analytics and diagnostic data: for the periods set by our analytics and diagnostics providers or our settings, after which it is deleted or aggregated.
17.3 Backups. Deleted information may remain in secure backups for a limited period until it is overwritten.
18. DATA SECURITY
18.1 Our safeguards. We use administrative, technical and physical safeguards designed to protect personal information, including encryption in transit, access controls that limit access to staff and providers who need it, and the security measures of our hosting and payment providers.
18.2 No guarantee. No system is completely secure. Please use a strong, unique password, keep your device secure and tell us immediately at contact@itsforgrabs.com if you believe your account has been compromised.
18.3 Breach notification. If a security breach affects your personal information, we will notify you and the relevant authorities where the law requires.
19. YOUR CHOICES AND CONTROLS
19.1 Account settings. You can review and update your profile and account information in the App settings.
19.2 Location and notifications. You can control location access and push notifications in your device settings.
19.3 Delete your account. You can close your account in the App settings or by emailing contact@itsforgrabs.com. We will delete or de-identify your information as described in Section 17.
19.4 Rights for all users. Wherever you live in the United States, you may ask us for access to, a copy of, correction of or deletion of your personal information, and we will respond to the request in line with Section 21, subject to the exceptions the law allows.
20. YOUR STATE PRIVACY RIGHTS
20.1 State laws. Several states, including California, Colorado, Connecticut, Oregon, Texas, Virginia and others, give residents rights over their personal information. Depending on where you live and whether the law applies to us, these may include the right to:
- know or confirm whether we process your personal information, and access it, including the categories and specific pieces collected;
- correct inaccurate personal information;
- delete personal information;
- receive a portable copy of your personal information;
- opt out of the sale of personal information, sharing for cross-context behavioral advertising, targeted advertising, and profiling in furtherance of decisions that produce legal or similarly significant effects; we do not engage in these activities;
- limit the use of sensitive personal information; and
- not be discriminated against for exercising your rights.
20.2 Sensitive information. Some states treat precise geolocation, account login credentials, Social Security numbers and government identification as sensitive personal information. We collect precise location only with your device permission and use sensitive personal information only to provide the Services, verify identity, prevent fraud, meet legal obligations and as otherwise permitted by law. We do not use it to infer characteristics about you.
20.3 Categories in the past 12 months. In the past 12 months we have collected the following categories of personal information, as described in Sections 3 to 6: identifiers; customer records; commercial information; internet or other electronic network activity information; geolocation data; audio or visual information, such as photographs; and, for sellers, sensitive personal information used for verification and tax reporting. We disclosed each category for business purposes to the service providers and other recipients in Section 12. The sources are described in Sections 3 to 6, and the purposes in Section 8.
20.4 Shine the Light. We do not share personal information with third parties for their own direct marketing purposes.
21. HOW TO SUBMIT A REQUEST AND APPEAL
21.1 Submitting a request. Email contact@itsforgrabs.com with the subject line "Privacy Request", stating the request you are making and the state you live in.
21.2 Verification. We will verify your identity by matching information you provide with information we hold, for example by asking you to confirm the request from the email address on your account. We may ask for more information where needed.
21.3 Authorized agents. An authorized agent may submit a request on your behalf where the law allows. We may ask for proof of the agent's authority and ask you to verify your identity directly.
21.4 Response times. We will respond within 45 days, and may extend this by a further 45 days where reasonably necessary and permitted by law, telling you why.
21.5 Appeals. If we decline your request, you may appeal by replying to our decision with the subject line "Privacy Appeal". We will respond to your appeal within the time the law of your state requires. If you are not satisfied with the outcome, you may contact the attorney general or privacy regulator of your state.
22. CHILDREN'S PRIVACY
22.1 Minimum age. Users must be at least 13 years old. Users aged 13 to 17 may use the Services only with the consent of a parent or legal guardian, as set out in the Terms and Conditions.
22.2 Children under 13. The Services are not directed to children under 13, and we do not knowingly collect personal information from them. We ask for date of birth or age confirmation at sign-up. If we learn that we have collected personal information from a child under 13, we will close the account and delete the information promptly. If you believe this has happened, contact us at contact@itsforgrabs.com.
22.3 Protections for users aged 13 to 17. For users under 18, we:
- do not sell their personal information or share it for cross-context behavioral advertising, and do not use it for targeted advertising or for profiling that produces legal or similarly significant effects;
- use precise location only as described in Section 5.5; and
- may limit features, such as messaging with users they have not transacted with, for safety reasons.
22.4 Parents and guardians. A parent or legal guardian who consented to a minor's use of the Services may ask to review, correct or delete the minor's personal information, or withdraw consent and close the minor's account, by emailing contact@itsforgrabs.com. We will verify the requester's identity and relationship to the minor before acting.
22.5 Removal of content posted by minors. If you are under 18, you may ask us to remove content or information you posted publicly on the Services by emailing contact@itsforgrabs.com with a link to the content. Removal may not ensure complete deletion, for example where another user has copied or reposted it, and we may keep information where the law requires or permits.
22.6 Photographs of children. Section 7 explains how we handle photographs that may show children.
23. USERS OUTSIDE THE UNITED STATES
23.1 US service. The Services are designed for users in the United States, and personal information is stored and processed in the United States. If you access the Website from another country, your information will be transferred to and processed in the United States, where data protection laws may differ from those in your country.
24. THIRD-PARTY LINKS AND SERVICES
24.1 Third parties. The Services may link to third-party websites and services, such as shipping carriers, recall databases, app stores and social media platforms. Their privacy practices are governed by their own policies, and we are not responsible for them.
25. CHANGES TO THIS POLICY AND CONTACT
25.1 Changes. We may update this Policy to reflect changes in the Services, our providers or the law. We will post the updated Policy with a new Effective Date and, for material changes, notify you by email or in the App before the changes take effect. Where the law requires your consent to a change, we will ask for it.
25.2 Contact. Questions or requests about this Policy can be sent to:
- ForGrabs
- Address: 4140 North Central Avenue, Phoenix, Arizona 85012
- Email: contact@itsforgrabs.com
- Website: https://itsforgrabs.com