Privacy Policy
10thbiz (“we,” “us”) handles the personal information of users of the 10thbiz website and services (the “Service”) in accordance with the Personal Information Protection Act of the Republic of Korea and, where they apply to you, the data protection laws of the country where you live, such as the EU and UK General Data Protection Regulation (GDPR). This policy explains what we collect, why, and the choices you have.
1. Why we use your information
We use personal information only for the purposes below. If a purpose changes, we will take the steps the law requires, such as asking for your consent first.
- Accounts: identifying you, signing you in, resetting your password, preventing duplicate accounts and closing accounts
- The Service: creating, editing and removing listings and auctions, showing search results and seller pages, and messages and offers between users
- Safety: handling reports, investigating and acting on policy violations, and preventing fraud and abuse
- Notices and support: telling you about changes to the Service or our policies, and answering questions and appeals
- Improvement: fixing errors and understanding how the Service is used
2. What we collect
| Type | Information | When |
|---|---|---|
| Account (required) | Email address, password, nickname | When you sign up |
| Profile (optional) | Profile photo | When you add one |
| Listings and auctions | Photos, brand, title, description, size, category, condition, price, auction settings, ships-from location, shipping fees by region | When you list or edit an item |
| Messages and offers | Message content, offer amounts, time sent, the people in the conversation | When you use messages or make an offer |
| Push notifications (app, optional) | A device token issued by Apple for your phone, and the type of device | When you allow notifications in the app |
| Reports and inquiries | What you reported, the reason and details you gave, the content of your inquiry and your reply address | When you report or contact us |
| Collected automatically | IP address, access times, browser and device information, records of use, and sign-in session data stored in your browser | While you use the Service |
Passwords are stored using one-way encryption (hashing). We cannot see your password.
We do not currently collect your real name, phone number, postal address or payment information. If we add features such as payments that require new information, we will update this policy and ask for any consent required.
Anything you type into a listing or a message yourself, such as contact details or account numbers, is also stored on the Service. Please do not share such information unless you need to.
3. Information that is public
Because of how the Service works, the following can be seen by anyone, including people who are not signed in:
- Your nickname, profile photo and the month you joined
- Your listings and auctions, including photos, item information, prices and status (available, sold, ended)
- Your seller page, which gathers your listings and auctions
Public information can be saved or shared by others, and deleting it from the Service does not remove copies made elsewhere. Make sure your photos do not show your face, the inside of your home, mail or anything else that could identify you.
Messages can only be seen by the people in the conversation. Our team may review a conversation that has been reported, as described in Section 11.
4. How long we keep information
We delete personal information without delay once it is no longer needed. Retention periods are:
| Information | Kept until |
|---|---|
| Account and profile (email, nickname, profile photo) | You close your account |
| Listings, auctions and their photos | You delete them or close your account |
| Messages and offers | The related listing or auction is deleted, or you close your account |
| Device tokens for push notifications | You sign out on that device, turn off notifications or delete the app, or close your account |
| Email address and violation records of accounts restricted for policy violations | 1 year from the restriction (to prevent evasion by signing up again) |
| Records of reports and appeals | 3 years after they are resolved |
| Access logs (IP address, access times) | 3 months (Protection of Communications Secrets Act) |
If we introduce payments, we will keep contract and payment records (5 years) and consumer complaint and dispute records (3 years) as required by Korea’s Act on Consumer Protection in Electronic Commerce.
5. How we delete information
Information whose retention period has ended, or that is no longer needed, is deleted within 5 days. Information we must keep by law is stored separately and deleted when that period ends.
Electronic files are deleted so they cannot be recovered. Where information cannot be deleted at once for technical reasons, such as backups, we stop using it and it is deleted when the backup cycle ends.
6. Sharing with third parties
We use personal information only for the purposes in Section 1 and do not give it to third parties except:
- with your consent;
- where the law specifically requires it, or where investigators or other authorities request it through legal procedures; or
- where it is needed to prevent an urgent threat to someone’s life, body or property.
We do not sell your personal information or use it for advertising.
7. Service providers
We use the following companies to run the Service. They process information only on our behalf.
| Company | Work |
|---|---|
| Supabase, Inc. | Sign-in and accounts, database, photo storage, real-time messaging |
| Vercel Inc. | Website hosting and access logs |
| Apple Inc. | Delivering push notifications to the iPhone app (Apple Push Notification service) |
We require these providers to use the information only for this work and to keep it secure. If the providers or their work change, we will update this policy.
8. International transfers
Our service providers store and process information on cloud servers outside Korea, so your information is transferred abroad as follows.
| Recipient | Location | Information | Purpose | When and how | Kept for |
|---|---|---|---|---|---|
| Supabase, Inc. (privacy policy) | Cloud servers outside Korea | Everything listed in Section 2 | Accounts, data storage, messaging | Sent over the network as you use the Service | The periods in Section 4 |
| Vercel Inc. (privacy policy) | United States and other countries | IP address, access times, browser and device information | Hosting, access logs | Sent over the network when you visit the Service | Vercel’s log retention period |
| Apple Inc. (privacy policy) | United States and other countries | Device token, and the notification itself (the sender’s nickname and a preview of the message or offer) | Delivering push notifications | Sent over the network when someone messages you, if you allowed notifications | Only as long as needed to deliver the notification |
You may refuse this transfer, but we cannot provide the Service without these providers, so refusing means closing your account.
9. Your rights
You can ask at any time to see, correct or delete your personal information, or to stop us using it.
- You can change your nickname and profile photo on your profile page.
- You can edit or delete your listings and auctions yourself.
- You can delete your account yourself in your profile settings (Delete account). This removes your profile, listings, auctions and messages.
- For any other request, email 2donee@gmail.com. We will reply within 10 days.
Some requests may be limited where the law requires us to keep information, or where it would affect someone else’s rights (for example, messages another user sent you). If so, we will tell you why.
10. How we protect information
- Passwords stored with one-way encryption
- Encrypted connections (HTTPS)
- Database access rules so users can only read and change their own data and conversations they are part of
- Admin tools limited to our team
- As few people as possible handling personal information
11. Reviewing reported conversations
When a conversation is reported, our team may read it to establish the facts. We only review the reported conversation and use it only to handle the report. We do not read conversations that have not been reported, except where required by law.
12. Cookies and browser storage
The Service stores sign-in session data in your browser to keep you signed in. We do not use advertising cookies or third-party analytics tools.
You can block or clear this data in your browser settings. If you do, you will not stay signed in and cannot list items or send messages.
13. Children
The Service is not for anyone under 16, and they may not sign up. If we learn that someone under 16 has signed up, we will delete the account and its information without delay. A parent or guardian who believes their child has given us information can contact us at 2donee@gmail.com.
14. Privacy contact
For questions, complaints or help with your personal information, contact 10thbiz at 2donee@gmail.com.
15. Users in the EEA, UK and Switzerland
If you are in the European Economic Area, the United Kingdom or Switzerland, 10thbiz is the controller of your personal information, and the following also applies.
Legal bases
| Purpose | Legal basis |
|---|---|
| Your account, listings, auctions, messages and offers | Performance of our contract with you |
| Handling reports, preventing fraud and abuse, keeping the Service secure, fixing errors | Our legitimate interest in a safe, working marketplace |
| Keeping records the law requires | Legal obligation |
| Anything we ask your permission for | Consent, which you can withdraw at any time |
Your rights
In addition to the rights in Section 9, you have the right to restrict or object to our use of your information, to receive the information you gave us in a commonly used, machine-readable format (data portability), and to withdraw consent at any time. To use these rights, email 2donee@gmail.com. You also have the right to complain to the data protection authority in the country where you live or work.
Transfers
The European Commission and the UK have recognized Korea as providing an adequate level of data protection. Where our service providers process your information in other countries, such as the United States, the transfer relies on safeguards such as the Standard Contractual Clauses in their data processing terms.
16. Governing law
10thbiz is operated from the Republic of Korea, and this policy is governed by Korean law. This does not take away any rights you have under the data protection laws of the country where you live.
17. Changes to this policy
We will post changes to this policy on the Service at least 7 days before they take effect. Important changes, such as collecting new information or sharing it with third parties, will be posted at least 30 days in advance, and we will ask for consent again where needed.
18. For users in Korea
Users in Korea can also contact the following organizations for advice or to resolve a dispute about personal information:
| Organization | Phone | Website |
|---|---|---|
| Personal Information Dispute Mediation Committee | 1833-6972 | www.kopico.go.kr |
| Personal Information Infringement Report Center (KISA) | 118 | privacy.kisa.or.kr |
| Supreme Prosecutors’ Office | 1301 | www.spo.go.kr |
| Korean National Police Agency | 182 | ecrm.police.go.kr |
See also our Listing Policy.