Privacy Policy

Last Updated: 4.30.2026
Effective Date: 4.30.2026

1. Introduction

Hobby Box, Inc. (“Hobby Box,” “we,” “us,” or “our”) operates the HobbyBox application, website (HobbyBox.app), and the HobbyPay service (collectively, the “Services”).

This Privacy Policy explains how we collect, use, disclose, and safeguard personal information when you use the Services.

By accessing or using the Services, you agree to the practices described in this Privacy Policy. If you do not agree, you should not use the Services.

2. Information We Collect

We collect information you provide directly, information generated through your use of the Services, and information from third parties.

2.1 Information You Provide

  • Name, username, email address, and phone number
  • Profile information (photo, bio, location)
  • Authentication data from third-party sign-in providers (Google, Apple, etc.)
  • Content you create, including listings, messages, uploads, and comments

2.2 HobbyPay Vendor Information

If you use HobbyPay, we collect:

  • Business name, address, and tax identification information
  • Booth/table identifiers at events
  • Subscription billing details
Identity Verification (KYC)

When enrolling in credit card acceptance:

  • Identity verification is conducted by Stripe, Inc. (“Stripe”)
  • Data may include full name, date of birth, address, SSN (full or partial), government ID, and bank account details
  • This data is collected and processed by Stripe in accordance with applicable financial regulations
  • Hobby Box does not store full SSNs or ID documents
  • We may receive limited verification status information from Stripe

2.3 Transaction and Deal Data

When using HobbyPay, we collect:

  • Item descriptions, cost basis, and sale price
  • Payment method used (e.g., cash, Venmo, Zelle, credit card)
  • Trade-in details and assigned values
  • Event/show information
  • Profit and margin calculations
  • Buyer email address (optional, for receipts)
  • Refunds and transaction adjustments

We do not collect credentials or login details for third-party payment apps.

2.4 Buyer Photos (Chargeback Protection)

Vendors may capture a photograph of a buyer during a credit card transaction to deter and defend against fraudulent chargebacks.

Use and Limitations
  • Photos are used solely for chargeback dispute defense
  • Photos are not used for facial recognition or identity matching
  • Hobby Box does not collect, store, or derive biometric identifiers or biometric information from photographs
  • Photos are never sold, shared for marketing, or used for AI training
Retention
  • Buyer photos are retained for 540 days, then permanently deleted
Consent Requirements
  • Buyers must provide explicit, informed consent before any photo is taken
  • If a buyer declines, no photo is captured
Vendor Obligations

Vendors must:

  • Use the in-app consent flow without modification
  • Not photograph individuals who appear to be under 18
  • Respect a buyer’s right to decline
  • Offer alternative payment methods if consent is not provided

2.5 Automatically Collected Information

We may automatically collect:

  • Device and browser information
  • Usage and interaction data
  • IP-based location data
  • App performance and diagnostic data
  • Cookies and similar tracking technologies

2.6 Information from Third Parties

We may receive:

  • Authentication data from login providers
  • Verification status data from Stripe
  • Aggregated analytics data from partners

3. How We Use Information

We use collected information to:

  • Provide, operate, and maintain the Services
  • Process payments and subscriptions
  • Verify identity and comply with legal obligations
  • Generate reports, analytics, and insights
  • Prevent fraud and manage disputes
  • Communicate with users
  • Improve and personalize the Services

4. How We Share Information

We share information only as described below:

4.1 Service Providers

Including:

  • Stripe (payment processing, identity verification, payouts)
  • Cloud hosting providers
  • Analytics and product tools
  • Messaging and communication services

4.2 Other Users

  • Public-facing content may be visible to other users
  • HobbyPay transaction data and buyer photos are not publicly shared

4.3 Legal and Compliance

We may disclose information if required to:

  • Comply with legal obligations
  • Respond to lawful requests
  • Prevent fraud or security issues

4.4 Business Transfers

Information may be transferred in connection with a merger, acquisition, or sale of assets.

5. Data Retention

We retain personal information as follows:

Data Category
Retention Period

Account information

Duration of account + 90 days

HobbyPay transaction records

Up to 7 years

Buyer photos

540 days

Product photos

Until deleted by user or account closure

KYC data (via Stripe)

As required by Stripe and applicable law

Server logs

~90 days

Backups

Up to 30 days

We may retain certain data longer where required to comply with legal obligations, resolve disputes, or enforce agreements.

6. Your Rights and Choices

You may:

  • Access and update your account information
  • Request deletion of your data
  • Export HobbyPay data
  • Opt out of marketing communications

Certain information may be retained as required by law.

7. California and Other State Privacy Rights

Residents of certain jurisdictions (including California) may have rights to:

  • Access personal data
  • Correct inaccuracies
  • Request deletion
  • Opt out of certain data uses

To exercise your rights, contact: privacy@hobbybox.app

8. Data Security

We use reasonable technical and organizational safeguards, including:

  • Encryption in transit
  • Access controls
  • Secure infrastructure

Payment data is processed by Stripe. We do not store full card numbers or CVVs.

9. Children

The Services are intended for users aged 18 and older.

We do not knowingly collect personal information from children under 13. If we become aware of such data, we will delete it.

10. Vendor Responsibilities

HobbyPay vendors are independent businesses and are responsible for:

  • Complying with applicable laws
  • Obtaining required buyer consent
  • Handling refunds and customer obligations
  • Managing tax compliance

Hobby Box is not responsible for vendor-buyer disputes outside payment processing.

11. Important Disclaimers

  • Hobby Box is not a bank, payment processor, or money transmitter
  • Payment services are provided by Stripe
  • Chargeback protection tools do not guarantee dispute outcomes

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated where required.

13. Contact Information

Hobby Box, Inc.
20533 Biscayne Blvd., Ste 4-811
Aventura, FL 33180

Email: