Privacy Policy

Last updated: [INSERT DATE]

SurplusBOM is in pre-launch. Today this site does one thing: it lets you join a waitlist. This policy describes what we collect now and what we'll collect once the marketplace is live. This is a starting template — have it reviewed by a qualified attorney before public launch and before you process any payments.

This Privacy Policy explains how SurplusBOM ("SurplusBOM," "we," "us") collects, uses, and shares information when you visit surplusbom.com (the "Site") or join our waitlist. By using the Site, you agree to the practices described here.

1. Information we collect

Information you give us. When you join the waitlist, we collect the email address you provide and, if you choose to share it, your city or ZIP code. That's it — we don't ask for anything else at this stage.

Information collected automatically. When you visit the Site, our hosting and content-delivery providers (including Cloudflare) may process technical data such as your IP address, browser type, the pages you view, and the approximate region your request comes from. We store a one-way hashed version of your IP address with waitlist signups for abuse prevention — we do not retain your raw IP address alongside your signup.

Analytics. We may use a privacy-respecting analytics tool to understand aggregate traffic (for example, how many people visit and where from). We aim to use analytics that do not track individuals across sites.

2. How we use information

To notify you when SurplusBOM launches in or near your area.
To understand which cities have the most demand, so we can decide where to launch next.
To operate, secure, and improve the Site.
To prevent spam, fraud, and abuse of the waitlist.

We will not email you marketing unrelated to SurplusBOM's launch, and every email we send will include a way to unsubscribe.

3. How we share information

We do not sell your personal information. We share it only with service providers who help us run the Site and waitlist — for example, our hosting provider (Cloudflare) and our email provider — and only so they can perform those services for us. We may also disclose information if required by law, or to protect the rights, safety, and property of SurplusBOM and others.

4. Data retention

We keep waitlist information until you ask us to delete it or until it is no longer needed for the purpose of notifying you about launch. You can ask us to remove you from the waitlist at any time (see Section 7).

5. Cookies

The Site uses minimal cookies or local storage necessary for basic functionality. We do not use advertising cookies or third-party tracking cookies for behavioral advertising.

6. Your choices and rights

Depending on where you live (for example, California under the CCPA/CPRA, or other states with comprehensive privacy laws), you may have the right to access, correct, or delete the personal information we hold about you, and to opt out of certain processing. We honor these rights for all users regardless of location where practical.

7. Contacting us / removing your data

To unsubscribe, access your data, or request deletion, email privacy@surplusbom.com from the address you signed up with. We'll act on verified requests promptly.

8. Children

The Site is not directed to children under 13, and we do not knowingly collect their personal information.

9. Changes to this policy

We may update this policy as the product evolves — particularly once accounts, messaging, and payments go live. We'll change the "Last updated" date above and, for material changes, take reasonable steps to notify you.

10. Contact

Questions about privacy? Reach us at privacy@surplusbom.com.