Auction Stand Privacy Policy

Who this policy covers

Auction Stand is a service operated by Luxabyte Inc., a corporation incorporated under the Canada Business Corporations Act, and Luxabyte Inc. is the organization responsible for the personal information described here. This policy explains how Auction Stand handles personal information for platform accounts and services. An independent seller also handles information connected with its storefront, auctions, orders, pickup, shipping, and customer support. Its storefront privacy policy explains that role.

Information we collect

We collect account and contact details; authentication identifiers and profile details supplied by Google, Facebook, or Microsoft when you choose social login; tenant and membership information; device, browser, IP address, security, cookie, and usage data; communications and support records; and records of legal consent. The platform also processes bids, order, payment-status, fulfillment, and audit data on behalf of sellers.

How we use information

We use information to create and secure accounts, connect you with seller storefronts, operate bidding and transaction workflows, deliver service messages, prevent fraud and abuse, troubleshoot and improve the service, comply with law, and establish or defend legal claims. We use consent where required and otherwise rely on contractual necessity, legitimate operational interests, or legal obligations as applicable.

Sharing and service providers

We do not sell personal information. We disclose it to the seller whose storefront you use and to vendors needed to operate the service, including payment processing (such as Stripe), cloud hosting and storage, transactional email delivery, monitoring and security, customer support, the social-login provider you select, and Google for website analytics and advertising measurement if you accept those cookies. We may also disclose information for a business transfer, with your direction, or where legally required. Providers may process information in Canada, the United States, or other jurisdictions where they operate.

Payments

Payment-card details are collected and processed by the connected payment processor rather than stored as full card numbers by Auction Stand. We receive transaction identifiers, status, amounts, and related account details needed to operate and support payment workflows.

Retention and safeguards

We retain information only as long as reasonably needed for the purposes above, including security, tax, accounting, dispute, backup, and legal requirements. Retention periods differ by record type. We use administrative, technical, and organizational safeguards appropriate to the information, but no system can guarantee absolute security.

One record is kept beyond account closure and is called out here because of that. When someone opens a store, we record who agreed to the store operator terms and the commercial terms they agreed to — the signatory’s name and business email address, the store, the date, the plan, the subscription price, the commission rate, and the version of the terms displayed. This is our record of a commercial agreement and of what a store authorized us to charge, so closing an account or deleting a store does not remove it. We keep it while the store agreement is active and for seven years after the later of the store closing or the last related financial transaction, and longer only where an active dispute, audit, or legal obligation requires it.

Your choices and rights

You may update account details, manage communication choices, revoke a social provider connection through that provider, or request access, correction, account closure, or other rights available under applicable law. Some records may be retained where legally required or necessary for security and transaction integrity. Withdrawing consent does not affect processing already completed and may limit services that require the information.

Cookies and external links

We use cookies and similar storage needed for sessions, security, preferences, and service operation. On the Auction Stand website these are auction_stand_session (keeps your session, ends two hours after your last visit), XSRF-TOKEN (protects forms against forgery, two hours), site_locale (remembers your language, one year), remember_central_web_… (keeps you signed in when you choose Remember me, 400 days), and cookie_consent (remembers your cookie choice, six months). Cloudflare Turnstile checks sign-up forms for automated abuse. Linked third-party sites and seller-controlled destinations have their own privacy practices.

On the Auction Stand website, but not on seller storefronts, we also ask whether you accept two optional kinds of cookies, and you can accept either, both, or neither. Analytics: Google Analytics sets cookies such as _ga and _ga_<id> to count visits and see which pages are used; they last up to two years. Advertising: Google Ads sets cookies such as _gcl_au to measure how well our advertising works, and lets Google show you Auction Stand ads on other sites; they last up to 90 days. If you reject them, they are not used and any already set are removed. You can change your choice at any time through the Cookie settings link at the bottom of the website, and we ask again after six months.

Google processes this information under its own privacy terms. How Google uses information from sites that use its services explains what Google does with it, and you can turn off personalised ads from Google at any time in Google’s ad settings.

We keep a record of each cookie choice made on the website so we can show that consent was given: a random identifier that is also stored in your browser, the choices, the date, the policy version, and the language shown. It contains no IP address or account details, and we delete it after two years.

Contact and changes

Privacy questions and rights requests can be sent to . We may update this policy prospectively and will identify the version and effective date. Material changes that require renewed acknowledgement will be presented through the service.