Privacy Policy
Last updated: October 12, 2026
This policy explains what information Bonbba collects, why we collect it, who we share it with, and the choices you have. It applies to buyers, sellers, and visitors.
The short version: we collect what we need to run the marketplace, process payments, ship orders, and stop fraud. Payment card, bank, and ID verification data for payouts are handled by Stripe. Bonbba does not store full card numbers or full bank account numbers. We do not sell your personal information.
1. Information We Collect
Account information. Your email address, username, and password (stored in hashed form). If you sign up to sell, also your shop details and any social links you choose to add.
Listings and orders. Photos and descriptions you post, prices, order history, shipping addresses, tracking numbers, and the messages you exchange with other users through Bonbba.
Identity, tax, and payout information (sellers). Before a seller can be paid, the seller verifies identity with a government-issued ID and a Tax ID (SSN or EIN) and provides bank details. This verification and the bank details are collected and processed by Stripe Connect, our payment processor. Bonbba receives confirmation that verification is complete and limited status information. Bonbba does not store your full bank account number or a copy of your full payment card details.
Payment information (buyers). Card payments are entered into Stripe's secure payment fields and processed by Stripe. Bonbba never sees or stores your full card number.
Device and usage information. Pages visited, features used, device type, browser, IP address, and similar technical data. We use this to run the site, keep accounts secure, and understand how the marketplace is used.
Communications. Emails and messages you send us, including support requests and dispute evidence you submit.
2. Why We Collect It
- To create and secure your account.
- To process payments, hold funds safely, and pay sellers.
- To verify seller identity and meet tax and legal requirements, including the INFORM Consumers Act and IRS Form 1099-K reporting.
- To create shipping labels and track deliveries.
- To prevent fraud and counterfeit sales, and to investigate reports and disputes.
- To send order updates, account notices, and support replies.
- To improve the marketplace.
3. Who We Share Information With
We share information only where the marketplace needs it to work:
- Stripe — payment processing, seller identity verification, Tax ID and bank details for payouts, and tax reporting support. Stripe processes and stores this data under its own privacy policy and security standards.
- Shipping providers — the name, address, and order details needed to create a label and deliver a package.
- The other party to your order — for example, a seller receives the buyer's shipping name and address; both sides can see order status and tracking.
- Service providers — companies that host the site, send email, and provide infrastructure for us, under contract to use the data only for that work.
- Legal and safety — when the law requires it, when a court or government agency lawfully requests it, or when sharing is needed to investigate fraud or protect users.
We do not sell your personal information. We do not share it with advertisers for their own marketing.
4. Email and Authentication Providers
Account emails — such as confirmations, password resets, and order notices — are sent through our email and authentication providers. Those providers process your email address and message data only to deliver mail and run sign-in securely.
5. Cookies
- We use cookies and similar storage that are needed for the site to work — for example, keeping you signed in and remembering your cart.
- We may use privacy-respecting usage measurement to understand which features are used. This data is used to improve the site.
- You can block cookies in your browser settings. Some parts of Bonbba, including sign-in and checkout, will not work without essential cookies.
6. How Long We Keep Information
- Account and order records are kept while your account is active.
- Records needed for tax, accounting, fraud prevention, and legal compliance are kept for as long as the law requires, even after an account is closed. Tax records connected to Form 1099-K are retained as required by IRS rules.
- When information is no longer needed, we delete it or remove the parts that identify you.
7. Security
- Passwords are stored in hashed form, never in plain text.
- Data is transmitted over encrypted connections (HTTPS).
- Payment, ID, and bank data for payouts are handled by Stripe, which maintains its own certified security program.
- Access to user data inside Bonbba is limited to what is needed to operate the marketplace and resolve disputes.
- No system is perfectly secure. If we learn of a breach affecting your information, we will notify you as the law requires.
8. Your Rights and Choices
- Access: you may ask for a copy of the personal information we hold about you.
- Correction: you may ask us to fix information that is wrong. Most account details can also be updated in your account settings.
- Deletion: you may ask us to delete your personal information. We will delete what we can. We must keep some records — for example, tax and transaction records — where the law requires it, and we will tell you if that applies.
- Marketing: you may opt out of marketing emails at any time using the unsubscribe link. Order and account notices will still be sent, because they are part of the service.
To make any of these requests, contact support@bonbba.com. We respond to privacy requests within 30 days. Depending on where you live, you may have additional rights under state privacy laws such as the California Consumer Privacy Act, including the right to know what is collected and the right not to be discriminated against for exercising your rights. The contact above is the way to exercise them.
9. Children
Bonbba is for users 18 and older. We do not knowingly collect information from children. If you believe a child has given us information, contact support@bonbba.com and we will remove it.
10. Changes to This Policy
We may update this policy. We will notify users of material changes by email at least 14 days before they take effect, and we will update the date at the top of this page.