1. About this Policy
Your privacy matters to us. This Policy explains what information Buy This Square collects, why we use it, and how we protect it when you visit https://buythissquare.com, sign in, submit a listing, buy a homepage square, or contact us.
2. Information we collect
We collect information directly connected to providing the service:
- Google account information, including your Google account identifier, verified email, name, and profile image link. We use it to create your account and connect your listings and purchases to it. We do not receive your Google password or store Google access tokens.
- Listing information, including the product name, homepage URL, contact email, descriptions, features, use cases, pricing details, categories, logo, screenshot, and review status.
- Badge checks. When a badge is verified, our server requests the public HTML of the listed homepage, identifying itself as BuyThisSquare-BadgeVerifier, and stores only the result and the time of the check.
- Placement information, including the grid position, square image, promoted listing, visibility, and purchase status.
- Transaction information, such as the amount, the email address used for checkout, Creem checkout and order references, payment status, and refund status. We do not receive or store card details.
- Technical information, including IP addresses and request details used to deliver pages, limit repeated attempts, and investigate errors. Our hosting provider may keep standard server logs.
- Communications, including information you send when asking for support, a refund, or a privacy request.
- Administrative records. Changes that our administrators make to accounts, listings, purchases, categories, and coupons are logged with the administrator and the affected record.
3. How we use your information
We use this information to:
- Create your account and keep you signed in.
- Review, publish, and maintain listings and verify their badges.
- Reserve squares, process purchases and refunds, and display placements.
- Respond to support, legal, and privacy requests.
- Prevent abuse, investigate errors, and comply with legal obligations.
We do not send automated or marketing emails. If that changes, we will update this Policy.
4. Public information
The directory and the grid are public by design. A published listing shows its name, homepage, descriptions, features, use cases, pricing details, categories, logo, screenshot, and badge status. A placement shows its image, the listing's name and homepage link, and its grid position. This information is visible to anyone, including search engines, so do not include private or sensitive information.
Listings waiting for review or rejected are not public. Your account name, account email, listing contact email, payment references, and support messages are never displayed publicly.
5. Confidentiality and data sharing
We do not sell or rent personal information. We share it only when needed to provide the service, protect the Website, or comply with law. This may include:
- Google, to sign you in.
- Creem, our merchant of record, which receives the purchase reference and your account email for checkout, payment, tax, fraud, and refund processing.
- Hosting, database, and security providers that process information on our behalf.
- Authorities or other parties when required by law or reasonably necessary to prevent fraud or protect rights and safety.
6. Cookies and data security
We use only essential cookies. We do not use advertising or analytics cookies, and no third-party tracking scripts run on the Website.
- Sign-in cookie: protects the Google sign-in flow and expires after 10 minutes.
- Session cookie: keeps you signed in for up to 30 days. We store only a hashed version of it. Logging out, suspension, or a permission change ends the session.
- Purchase status cookie: lets you open the status of a purchase after checkout and expires after one hour.
We apply reasonable technical and organizational safeguards to protect information. However, no internet transmission or storage system can be guaranteed to be completely secure.
7. Retention and your choices
Sign-in attempts expire after 10 minutes and sessions after 30 days. Unpaid reservations release their square after 30 minutes but remain in our purchase records. We keep accounts, listings, purchase, and administrative records for as long as reasonably necessary to operate the service, resolve disputes, prevent fraud, and meet legal or accounting obligations.
Depending on where you live, you may request access to, correction of, or deletion of your personal information, including the removal of a listing. Certain transaction or fraud-prevention records may need to be retained where permitted or required by law.
8. Children
The service is intended for adults and is not directed to children under 18. If you believe a child has provided personal information, contact us so we can review and address it.
9. Changes and contact
We may update this Policy when the service or legal requirements change. The updated version will be posted here with a revised effective date.
For privacy questions or requests, contact support@buythissquare.com. We may need to verify your identity before completing a request.