dude.box logo

Privacy Policy

Last Updated: January 29, 2026

1. Introduction

Dude.Box ("we", "us", or "our") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our marketplace platform.

2. Information We Collect

2.1 Information You Provide

We collect information you provide directly:

  • Account Information: Name, email address, password
  • Profile Information: Phone number, addresses
  • Payment Information: Processed securely through Stripe (we do not store card details)
  • Vendor Information: Business details, store information, banking details (via Stripe Connect)
  • Communications: Messages, support inquiries, feedback
  • Product Information: For vendors - product descriptions, images, pricing

2.2 Information Automatically Collected

When you use our Platform, we automatically collect:

  • Device Information: IP address, browser type, operating system
  • Usage Information: Pages viewed, time spent, links clicked
  • Cookies: Session identifiers, preferences, authentication tokens
  • Location Data: General location based on IP address

2.3 Information from Third Parties

We may receive information from:

  • Stripe: Payment processing and verification data
  • Analytics Services: Aggregated usage data
  • Authentication Services: If you use social login (future feature)

3. How We Use Your Information

We use your information to:

  • Provide Services: Process orders, manage accounts, facilitate marketplace transactions
  • Communication: Send order updates, respond to inquiries, provide customer support
  • Platform Improvement: Analyze usage patterns, improve features, fix bugs
  • Security: Detect fraud, prevent abuse, enforce Terms of Service
  • Legal Compliance: Comply with laws, regulations, and legal processes
  • Marketing: Send promotional emails (you can opt out anytime)
  • Vendor Management: Review vendor applications, monitor store performance

4. How We Share Your Information

4.1 With Vendors: When you make a purchase, we share your name, shipping address, and order details with the relevant vendor for fulfillment.

4.2 With Stripe: Payment information is processed through Stripe. We share necessary transaction details with Stripe to process payments.

4.3 Service Providers: We may share data with trusted third-party service providers (hosting, analytics, email services) who assist in operating our Platform.

4.4 Legal Requirements: We may disclose information if required by law, court order, or government request.

4.5 Business Transfers: If Dude.Box is acquired or merged, your information may be transferred to the new entity.

4.6 With Your Consent: We may share information for other purposes with your explicit consent.

We do not sell your personal information to third parties.

5. Cookies and Tracking

5.1 What Are Cookies: Cookies are small text files stored on your device that help us provide and improve our services.

5.2 Types of Cookies We Use:

  • Essential Cookies: Required for authentication and shopping cart functionality
  • Preference Cookies: Remember your settings and preferences
  • Analytics Cookies: Help us understand how users interact with the Platform
  • Marketing Cookies: May be used for targeted advertising (with your consent)

5.3 Managing Cookies: You can control cookies through your browser settings. Note that disabling essential cookies may limit platform functionality.

6. Data Security

We implement reasonable security measures to protect your information, including:

  • SSL/TLS encryption for data transmission
  • Secure database storage with access controls
  • Regular security audits and monitoring
  • Password hashing and encryption
  • PCI-compliant payment processing through Stripe

However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security of your information.

7. Your Privacy Rights

Depending on your location, you may have the following rights:

  • Access: Request a copy of your personal information
  • Correction: Update or correct inaccurate information
  • Deletion: Request deletion of your personal information (subject to legal obligations)
  • Opt-Out: Unsubscribe from marketing emails
  • Data Portability: Request your data in a portable format
  • Restriction: Request limitation on processing of your data
  • Object: Object to processing of your data for certain purposes

To exercise these rights, contact us at privacy@dude.box

8. Data Retention

We retain your information for as long as necessary to:

  • Provide our services to you
  • Comply with legal obligations (e.g., tax records, transaction history)
  • Resolve disputes and enforce agreements
  • Maintain security and prevent fraud

When data is no longer needed, we securely delete or anonymize it.

9. Children's Privacy

Our Platform is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your own. These countries may have different data protection laws. By using our Platform, you consent to such transfers.

11. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act:

  • Right to know what personal information is collected
  • Right to know if personal information is sold or disclosed
  • Right to opt-out of the sale of personal information (we do not sell your data)
  • Right to deletion of personal information
  • Right to non-discrimination for exercising CCPA rights

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or prominent notice on the Platform. The "Last Updated" date at the top indicates when the policy was last revised.

13. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us: