Privacy Policy
Last Updated: 4.30.2026
Effective Date: 4.30.2026
1. Introduction
Hobby Box, Inc. (“Hobby Box,” “we,” “us,” or “our”) operates the HobbyBox application, website (HobbyBox.app), and the HobbyPay service (collectively, the “Services”).
This Privacy Policy explains how we collect, use, disclose, and safeguard personal information when you use the Services.
By accessing or using the Services, you agree to the practices described in this Privacy Policy. If you do not agree, you should not use the Services.
2. Information We Collect
We collect information you provide directly, information generated through your use of the Services, and information from third parties.
2.1 Information You Provide
- Name, username, email address, and phone number
- Profile information (photo, bio, location)
- Authentication data from third-party sign-in providers (Google, Apple, etc.)
- Content you create, including listings, messages, uploads, and comments
2.2 HobbyPay Vendor Information
If you use HobbyPay, we collect:
- Business name, address, and tax identification information
- Booth/table identifiers at events
- Subscription billing details
Identity Verification (KYC)
When enrolling in credit card acceptance:
- Identity verification is conducted by Stripe, Inc. (“Stripe”)
- Data may include full name, date of birth, address, SSN (full or partial), government ID, and bank account details
- This data is collected and processed by Stripe in accordance with applicable financial regulations
- Hobby Box does not store full SSNs or ID documents
- We may receive limited verification status information from Stripe
2.3 Transaction and Deal Data
When using HobbyPay, we collect:
- Item descriptions, cost basis, and sale price
- Payment method used (e.g., cash, Venmo, Zelle, credit card)
- Trade-in details and assigned values
- Event/show information
- Profit and margin calculations
- Buyer email address (optional, for receipts)
- Refunds and transaction adjustments
We do not collect credentials or login details for third-party payment apps.
2.4 Buyer Photos (Chargeback Protection)
Vendors may capture a photograph of a buyer during a credit card transaction to deter and defend against fraudulent chargebacks.
Use and Limitations
- Photos are used solely for chargeback dispute defense
- Photos are not used for facial recognition or identity matching
- Hobby Box does not collect, store, or derive biometric identifiers or biometric information from photographs
- Photos are never sold, shared for marketing, or used for AI training
Retention
- Buyer photos are retained for 540 days, then permanently deleted
Consent Requirements
- Buyers must provide explicit, informed consent before any photo is taken
- If a buyer declines, no photo is captured
Vendor Obligations
Vendors must:
- Use the in-app consent flow without modification
- Not photograph individuals who appear to be under 18
- Respect a buyer’s right to decline
- Offer alternative payment methods if consent is not provided
2.5 Automatically Collected Information
We may automatically collect:
- Device and browser information
- Usage and interaction data
- IP-based location data
- App performance and diagnostic data
- Cookies and similar tracking technologies
2.6 Information from Third Parties
We may receive:
- Authentication data from login providers
- Verification status data from Stripe
- Aggregated analytics data from partners
3. How We Use Information
We use collected information to:
- Provide, operate, and maintain the Services
- Process payments and subscriptions
- Verify identity and comply with legal obligations
- Generate reports, analytics, and insights
- Prevent fraud and manage disputes
- Communicate with users
- Improve and personalize the Services
4. How We Share Information
We share information only as described below:
4.1 Service Providers
Including:
- Stripe (payment processing, identity verification, payouts)
- Cloud hosting providers
- Analytics and product tools
- Messaging and communication services
4.2 Other Users
- Public-facing content may be visible to other users
- HobbyPay transaction data and buyer photos are not publicly shared
4.3 Legal and Compliance
We may disclose information if required to:
- Comply with legal obligations
- Respond to lawful requests
- Prevent fraud or security issues
4.4 Business Transfers
Information may be transferred in connection with a merger, acquisition, or sale of assets.
5. Data Retention
We retain personal information as follows:
Data Category
Retention Period
Account information
Duration of account + 90 days
HobbyPay transaction records
Up to 7 years
Buyer photos
540 days
Product photos
Until deleted by user or account closure
KYC data (via Stripe)
As required by Stripe and applicable law
Server logs
~90 days
Backups
Up to 30 days
We may retain certain data longer where required to comply with legal obligations, resolve disputes, or enforce agreements.
6. Your Rights and Choices
You may:
- Access and update your account information
- Request deletion of your data
- Export HobbyPay data
- Opt out of marketing communications
Certain information may be retained as required by law.
7. California and Other State Privacy Rights
Residents of certain jurisdictions (including California) may have rights to:
- Access personal data
- Correct inaccuracies
- Request deletion
- Opt out of certain data uses
To exercise your rights, contact: privacy@hobbybox.app
8. Data Security
We use reasonable technical and organizational safeguards, including:
- Encryption in transit
- Access controls
- Secure infrastructure
Payment data is processed by Stripe. We do not store full card numbers or CVVs.
9. Children
The Services are intended for users aged 18 and older.
We do not knowingly collect personal information from children under 13. If we become aware of such data, we will delete it.
10. Vendor Responsibilities
HobbyPay vendors are independent businesses and are responsible for:
- Complying with applicable laws
- Obtaining required buyer consent
- Handling refunds and customer obligations
- Managing tax compliance
Hobby Box is not responsible for vendor-buyer disputes outside payment processing.
11. Important Disclaimers
- Hobby Box is not a bank, payment processor, or money transmitter
- Payment services are provided by Stripe
- Chargeback protection tools do not guarantee dispute outcomes
12. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated where required.
13. Contact Information
Hobby Box, Inc.
20533 Biscayne Blvd., Ste 4-811
Aventura, FL 33180
Email: