Privacy Policy (US / CCPA)

Last updated: October 22, 2026

Elefair International Inc ("Elefair") respects your privacy. This policy explains what we collect, how we use it, and your choices. It applies to buyers, sellers, drivers, support agents and visitors in the United States and worldwide. EU/UK residents also have the GDPR Privacy Notice.

1. Information we collect

• Account data: name, email, phone, password hash, store details, tax and payout details (sellers), driver licence/vehicle details (drivers).
• Transaction data: orders, items, shipping addresses, payment status (card numbers are held by Stripe, not Elefair).
• Verification data (KYC): government ID images, business documents and bank proof for sellers, stored encrypted in private storage and visible only to authorised staff.
• Communications: messages, support chats, voice-call metadata (we do not record calls unless you are told at the start), reviews.
• Device & usage data: IP address, browser, pages viewed, referrers, cookies and similar technologies (see Cookie Policy), location pings from drivers while online.
• Third-party data: order data from channels (eBay, Walmart), payment outcomes from Stripe, product data imported by sellers.

2. How we use it

• Operate the marketplace: accounts, listings, checkout, shipping, payouts, local delivery, support.
• Trust & safety: fraud detection (Order Pattern Monitor), VeRO/IP checks, KYC, dispute resolution.
• Communications: order updates, security alerts, and marketing you can opt out of.
• Improvement and analytics, including AI-assisted listing and support tools.
• Legal compliance: tax reporting (e.g., IRS Form 1099-K where applicable), sanctions screening, lawful requests.

3. Sharing

We share data with: the Seller fulfilling your order (name, address, phone, items); drivers delivering it; service providers (Cloudflare hosting, Stripe payments, Amazon SES email, carriers, sales channels); professional advisers; authorities when required by law; and successors in a merger or acquisition. We do not sell personal information and we do not share it for cross-context behavioural advertising.

4. Retention

Account data while your account is active and up to 7 years after for tax, accounting and dispute purposes; KYC documents for 5 years after account closure as required by anti-fraud and financial rules; support chats 2 years; driver location pings 90 days.

5. Your rights (CCPA/CPRA and other US state laws)

Depending on your state you may have the right to know, access, correct, delete and port your personal information, to opt out of sale/sharing and targeted advertising, to limit use of sensitive information, and not to be discriminated against for exercising rights. Use Download my data / Delete account in your account, email support@elefairtech.com. We verify requests using your account email. You may designate an authorised agent. We respond within 45 days (extendable once).

6. Security

Encryption in transit (TLS) and at rest, hashed passwords, two-factor authentication for staff, role-based access, audit logs and daily backups. No system is perfectly secure; notify us immediately of suspected unauthorised access.

7. Children

The Platform is not directed to children under 16 and we do not knowingly collect their data.

8. International transfers

Data is processed in the United States and on Cloudflare's global network. Sellers and buyers outside the US consent to transfer to the US; EU/UK transfers rely on Standard Contractual Clauses (see GDPR notice).

9. Changes & contact

We will post updates here. Questions: support@elefairtech.com, Elefair International Inc, New York, USA.

Last updated October 22, 2026