Privacy Policy

Account Information

When you create a Rock My Auction account, we collect your name, email address, phone number, and profile details. Sellers may also provide business information, bank details, or payment method data for payouts.

Transaction Data

We record details of your bids, purchases, sales, wallet transactions, and payment history to process transactions, prevent fraud, and provide you with accurate financial records.

Usage & Device Information

We automatically collect information about how you interact with our platform, including pages visited, features used, IP address, browser type, device identifiers, and referral URLs. This helps us improve performance and personalize your experience.

Communications

Messages sent through our in-platform messaging system, support tickets, and chatbot interactions are stored to provide customer support and improve our services.

We use your information to operate, maintain, and improve the Rock My Auction platform. Specifically, we use your data to:

• Process bids, transactions, payments, and payouts securely
• Verify your identity and prevent fraudulent activity
• Personalize your auction recommendations and search results
• Send transactional emails (bid confirmations, ticket updates, payment receipts)
• Provide customer support through our ticketing system
• Analyze platform usage to improve features and performance
• Comply with legal obligations and enforce our Terms of Use
• Send promotional communications (only with your consent, and you can opt out anytime)

Essential Cookies

Required for authentication, session management, and security. These cannot be disabled as they are necessary for the platform to function.

Preference Cookies

Store your settings such as theme preference (dark/light mode), language, and notification preferences to provide a consistent experience across visits.

Analytics Cookies

Help us understand how visitors interact with our platform, which pages are most popular, and where users experience issues. This data is aggregated and anonymized.

Managing Cookies

You can manage cookie preferences through your browser settings. Disabling certain cookies may affect platform functionality. We do not use third-party advertising cookies.

We do not sell your personal information. We may share limited data with trusted third parties only in the following circumstances:

• Payment processors (e.g., Stripe, PayPal) to facilitate secure transactions
• Email service providers (e.g., Brevo) to deliver transactional and marketing emails
• Cloud infrastructure providers that host our platform securely
• Legal authorities when required by law, subpoena, or to protect our rights
• Other users — limited profile information (name, avatar, ratings) is visible to facilitate trust in transactions

All third-party providers are contractually obligated to handle your data securely and in accordance with applicable privacy laws.

We implement industry-standard security measures to protect your personal information:

• All data transmitted between your browser and our servers is encrypted using TLS/SSL
• Passwords are hashed using bcrypt with salt rounds — we never store plaintext passwords
• JWT-based authentication with secure token rotation and expiration
• Role-based access controls limit internal access to your data
• Regular security audits and vulnerability assessments
• Automated fraud detection on transactions and account activity

While no system is 100% secure, we are committed to protecting your data and promptly addressing any security incidents.

Depending on your location, you may have the following rights regarding your personal data:

• Access — Request a copy of the personal data we hold about you
• Correction — Update or correct inaccurate personal information
• Deletion — Request deletion of your account and associated data
• Portability — Receive your data in a structured, machine-readable format
• Objection — Object to processing of your data for certain purposes
• Withdrawal of Consent — Withdraw consent for marketing communications at any time

To exercise any of these rights, please contact us through our support ticket system or email us at privacy@rockmyauction.com. We will respond to verified requests within 30 days.

We retain your personal data for as long as your account is active or as needed to provide services. After account deletion:

• Profile data is deleted within 30 days
• Transaction records are retained for 7 years for legal and tax compliance
• Anonymized analytics data may be retained indefinitely
• Support ticket history is deleted within 90 days of account closure
• Backup copies are purged within 60 days

Rock My Auction is not intended for users under 18 years of age. We do not knowingly collect personal information from minors. If we discover that a child under 18 has provided us with personal data, we will promptly delete it. If you believe a minor has created an account, please contact our support team immediately.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will notify you via email or a prominent notice on our platform at least 14 days before the changes take effect. Your continued use of the platform after changes constitutes acceptance of the updated policy.

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, we are here to help:

• Email: privacy@rockmyauction.com
• Support Tickets: Visit your dashboard and open a new ticket under "Account" category
• Help Center: Browse our FAQ at /help-center for instant answers

We aim to respond to all privacy-related inquiries within 48 hours.