Privacy Policy

troimarket ("we", "our", or "us") operates the troimarket recipe marketplace platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

1. Information We Collect

We collect information you provide directly when creating an account and using our platform:

• Account Information: Your name, email address, and password (hashed). If you sign in with Google, we receive your name and email from Google.
• Profile Information: Your display name, avatar image, storefront name, bio, and social media links.
• Content: Recipes, bundles, images, and other content you create and publish on the platform.
• Transaction Data: Purchase history, sales records, and pricing information related to recipes you buy or sell.
• Payment Details: Payment card and banking details are collected and processed entirely by Whop, our payment partner. troimarket never receives or stores your card number or banking information.
• Usage Data: We collect first-party usage analytics — pages viewed, features used, and actions taken — stored on our own infrastructure. This data is gathered without cookies or persistent identifiers (sessions are identified by a random ID that expires when you close the tab), is never shared with third parties, and is never used for advertising. If you are signed in, usage events may be associated with your account; that association is removed if you delete your account.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the troimarket platform
• Process transactions between buyers and sellers
• Send you transactional emails (purchase confirmations, sale notifications, welcome emails)
• Send you notification emails based on your preferences
• Enforce our Terms of Service and protect against fraud
• Respond to your requests and provide customer support

3. Information Sharing

We do not sell your personal information. We may share your information in the following circumstances:

• Public Profile: Your storefront name, bio, and published recipes are visible to all users.
• Transactions: When you purchase a recipe, the seller receives a notification with your display name. When you sell, buyers see your author name.
• Service Providers: We use third-party services including Firebase (hosting, authentication, and database), Whop (payment processing), Resend (email delivery), and Google Fonts (font delivery — your browser requests font files from Google's servers). These providers access your data only to perform services on our behalf.
• Legal Requirements: We may disclose your information if required by law or in response to valid legal process.

4. Data Storage and Security

Your data is stored using Google Firebase (Firestore and Firebase Storage) with industry-standard security measures. We use Firebase Authentication to securely manage your account credentials. While we implement reasonable security measures, no method of transmission over the Internet is 100% secure.

5. Your Rights and Choices

• Access and Update: You can access and update your profile information through the Settings page at any time.
• Email Preferences: You can control which notification emails you receive through Settings > Notifications. You can disable all emails with the master toggle.
• Delete Account: You can delete your account through Settings > Account > Delete Account. This marks your account as deleted, and your account identifier is removed from our analytics records. Buyers who purchased your recipes retain access, and your recipes will show "from deleted user."
• Content Removal: You can take down any recipe or bundle you've published through the Seller Hub.

6. Cookies and Local Storage

We use Firebase Authentication, which may store session tokens in your browser, and we store small preference flags in your browser's local storage (for example, that you have already dismissed a one-time notice). During checkout, our payment partner Whop may use cookies or similar storage strictly necessary to process your payment securely. We do not use advertising cookies, analytics cookies, or third-party tracking cookies.

7. Children's Privacy

troimarket accounts are for adults (18+); minors who are at least 13 may use the platform only with a parent or guardian's permission and supervision, as described in our Terms of Service. troimarket is not intended for children under 13, and we do not knowingly collect personal information from children under 13. If we learn that we have collected such information, we will take steps to delete it.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

9. Contact Us

If you have any questions about this Privacy Policy, please contact us at privacy@troimarket.com.