privacy policy

Your email address, when you join the waitlist or create an account. Solstead uses passwordless sign-in, so your email is also your account identity. There is no separate password to store.

If you are a seller, the description and details you submit for a listing.

Sellers upload two kinds of files: public listing screenshots, shown to anyone browsing, and private supporting evidence, like revenue dashboards or analytics exports, submitted only for our manual review.

Private evidence is never shown to buyers or made public. It is used to verify a listing's claims and then kept as our review record.

Solstead never sees your card or bank account details. Payments run through Stripe: Stripe Connect for sellers receiving payouts, Stripe Checkout for buyers paying.

Our database stores only references to those transactions, like a session or transfer ID, not the underlying financial data.

When a buyer and seller accept a purchase agreement, we record each party's legal name, email, and IP address at the moment of acceptance.

This is kept as a compliance and dispute record tied to that specific transaction, not used for anything else.

We log IP addresses briefly on public submission endpoints, like the waitlist form, to prevent abuse.

These logs are kept in a separate table, not linked to your profile or retained long-term.

We use PostHog to track pageviews and understand how visitors move from the waitlist page to a signup.

As of this policy's last update, we also capture first-touch marketing attribution, the UTM parameters, referrer, and landing page tied to a waitlist signup, so we know which channels bring people in. PostHog sets its own analytics cookies and local storage to do this.

To run the account and listing system, process and verify payments, review submitted listings, resolve disputes under a purchase agreement, and understand which marketing channels work.

That is the full list. We do not use your data for anything beyond operating the marketplace.

Stripe, to process payments and payouts. PostHog, to run analytics. Nobody else.

We do not sell data to third parties, and we do not use ad networks.

Account and transaction data is kept for as long as your account is active and for a reasonable period after, to meet tax, dispute, and recordkeeping obligations.

Rate-limiting IP logs are kept briefly and then deleted. Private review evidence is kept as long as the listing it supports remains under review or live.

You can ask us what we hold on you, correct it, or ask us to delete your account and associated data, subject to what we are required to keep for legal and financial recordkeeping.

Email hello@solstead.com to make a request.

If this policy changes in a way that matters, we will update the date above and, where required, tell account holders directly.