Privacy Policy

The information we collect depends on how you use the Services.

2.1 Account and profile information

We may collect:

• Name.
• Email address.
• Phone number.
• Password, authentication, and account-security information.
• Profile photograph and preferences.
• Company, studio, production, or organization name.
• Job title, professional role, organization membership, and permissions.

When you use Google or another third-party login provider, we may receive account information authorized through that provider.

2.2 Organization and asset information

We may collect:

• Studio, production, organization, and team information.
• Asset descriptions, categories, photographs, documents, quantities, dimensions, weight, condition, location, cost, availability, and status.
• Asset ownership, transfer, reuse, donation, rental, and sustainability information.
• Inventory imports and information received through connected tools such as Scanlily.

Some asset or organization information may relate to identifiable individuals.

2.3 Listing and transaction information

We may collect:

• Listings, prices, quantities, locations, and availability.
• Purchase, sale, donation, rental, deposit, refund, dispute, and transaction status.
• Pickup, return, delivery, and shipping information.
• Communications between transaction participants.
• Supporting photographs, documents, and claim information.

2.4 Payment and financial information

Stripe or another payment provider may collect payment-card, bank-account, identity, tax, and verification information directly.

SetSwap may receive or maintain limited payment-related information, such as:

• Customer, account, payment, refund, payout, charge, transfer, and dispute identifiers.
• Billing name and address.
• Payment status and partial payment-method details.
• Transaction amounts, fees, deposits, and payout information.
• Fraud-prevention and identity-verification results.

SetSwap generally does not receive complete payment-card numbers when payment information is collected directly by Stripe.

2.5 Tax and seller information

SetSwap may collect information needed for seller onboarding, earnings tracking, tax documentation, and reporting, including:

• Legal name and business name.
• Address and contact information.
• Tax classification.
• Social Security number, Employer Identification Number, or other taxpayer identification number.
• W-9 information and related tax records.
• Earnings, transaction, and payout information.

Tax identifiers are sensitive personal information. SetSwap limits their use to tax, identity, payment, compliance, and related operational purposes.

2.6 Shipping and freight information

We may collect:

• Pickup and delivery names, addresses, phone numbers, and instructions.
• Asset descriptions, dimensions, weight, classification, declared value, and packaging details.
• Carrier quotes, labels, documents, tracking events, delivery status, and claims information.

2.7 Communications and support information

We may collect messages sent through the Services and communications with SetSwap, including support requests, feedback, sales inquiries, and attachments.

2.8 AI-assisted feature content

When you use AI-assisted features, we may collect and process:

• Prompts and chat messages.
• Receipts, invoices, PDFs, photographs, and other uploaded files.
• Extracted text and structured asset or transaction information.
• AI-generated outputs, classifications, recommendations, and summaries.
• Technical metadata related to the request.

2.9 Precise location information

When you grant browser or device permission, SetSwap may collect precise geographic coordinates to support location-aware features.

Coordinates, addresses, search terms, and related request information may be sent to Google Maps, OpenStreetMap services, or another map or reverse-geocoding provider to identify or display a location.

You can deny or revoke location permission through your browser or device settings, although some location features may then be unavailable.

2.10 Device, usage, and security information

We and our providers may automatically collect:

• IP address.
• Browser, device, and operating-system information.
• Account and SetSwap user identifiers.
• Login, page-view, click, interaction, session, and feature-usage information.
• Referral information and URLs.
• Cookie, local-storage, and similar identifiers.
• Error, performance, diagnostic, and crash information.
• Security, bot-detection, fraud-prevention, and abuse information.

Cloudflare Turnstile may receive an IP address and device or request information when it evaluates whether activity is automated or abusive.

2.11 Information from integrations and other sources

We may receive information from:

• Other users or organizations that invite you or add you to an account.
• Marketplace participants.
• Google OAuth and other authentication providers.
• Stripe and other payment providers.
• FedEx, ShipTime, and other shipping or logistics providers.
• Scanlily and other connected inventory services.
• Security, hosting, communications, and support providers.
• Publicly available or commercially available sources where permitted by law.

We may use personal information to:

• Create, authenticate, secure, and administer accounts.
• Manage organizations, Studios, productions, roles, and permissions.
• Operate marketplace, inventory, asset-management, rental, donation, and transfer features.
• Display listings and connect marketplace participants.
• Process or facilitate payments, deposits, refunds, disputes, chargebacks, and payouts.
• Support seller onboarding, earnings tracking, tax documentation, and reporting.
• Obtain freight quotes, prepare shipping documents, coordinate pickups and deliveries, provide tracking, and address shipping issues.
• Provide precise-location and mapping features when permission is granted.
• Provide AI-assisted features and process submitted content.
• Send transactional and service-related communications.
• Respond to support requests and troubleshoot problems.
• Detect, prevent, and investigate fraud, abuse, security incidents, and prohibited activity.
• Monitor performance, understand usage, and improve the Services.
• Maintain business, transaction, tax, accounting, and compliance records.
• Enforce agreements and platform policies.
• Comply with legal, tax, regulatory, and law-enforcement requirements.
• Protect SetSwap, users, third parties, and the public.

We may use information for another purpose when we provide notice or obtain consent as required by law.

We may disclose personal information to the following categories of recipients.

4.1 Other users and organizations

We may disclose profile, organization, asset, listing, location, transaction, rental, shipping, and contact information to other users when needed for marketplace activity, organization collaboration, pickup, delivery, or a transaction.

Information placed in a public or broadly visible listing may be viewable by others. Do not include unnecessary sensitive personal information in listings, photographs, or messages.

4.2 Payment and financial providers

We may disclose transaction, identity, billing, account, tax, device, and fraud-prevention information to Stripe or another payment provider for payments, deposits, refunds, disputes, chargebacks, payouts, onboarding, verification, and related services.

4.3 Shipping and logistics providers

We may disclose names, contact information, addresses, asset details, shipment details, and transaction information to FedEx, ShipTime, or another carrier or logistics provider for quotes, documents, pickups, transportation, tracking, delivery, and claims.

4.4 AI providers

We may disclose prompts, chat messages, receipts, invoices, PDFs, photographs, extracted text, asset information, generated outputs, and related metadata to OpenAI or another AI provider to provide requested AI-assisted features.

OpenAI states that API inputs and outputs are not used to train its models by default unless the customer opts in. SetSwap configures OpenAI Responses API requests with response storage disabled.

Do not submit information to an AI-assisted feature that is unnecessary for the requested task.

4.5 Mapping and location providers

We may disclose precise coordinates, addresses, search terms, and related device or request information to Google Maps, OpenStreetMap services, or another mapping or geocoding provider when you use a location feature.

4.6 Hosting, database, authentication, and security providers

We may disclose account, content, device, technical, and security information to providers such as:

• Supabase, for database, storage, authentication, and backend services.
• Vercel, for application hosting and delivery.
• Google, for OAuth authentication and related account services.
• Cloudflare Turnstile, for bot detection and abuse prevention.

4.7 Monitoring and communications providers

We may disclose account, device, error, diagnostic, and communication information to providers such as:

• Sentry, for error monitoring, diagnostics, and application performance.
• Resend, for transactional email delivery.

4.8 Connected services

When you connect or use an integration, we may disclose account, organization, asset, inventory, and related information to the connected provider, such as Scanlily, as needed to provide the integration.

4.9 Professional advisers, legal requirements, and safety

We may disclose information to lawyers, accountants, auditors, insurers, financial advisers, and other professional advisers.

We may also disclose information when reasonably necessary to:

• Respond to legal process.
• Comply with law, tax, or regulatory requirements.
• Investigate fraud, misuse, security incidents, or disputes.
• Protect SetSwap, users, third parties, or the public.
• Enforce agreements and platform policies.

4.10 Business transactions

Information may be disclosed or transferred as part of a merger, financing, acquisition, restructuring, asset sale, bankruptcy, due diligence process, or similar transaction.

SetSwap and its providers may use cookies, local storage, and similar technologies to:

• Keep users signed in.
• Remember preferences.
• Operate account and security controls.
• Detect fraud, bots, and abuse.
• Measure usage and performance.
• Diagnose technical problems.
• Improve features and user experience.

SetSwap does not currently use personal information for cross-context behavioral advertising.

You can use browser controls to block or delete cookies. Some essential features may not function correctly when cookies or local storage are disabled.

SetSwap does not currently respond to browser-based "Do Not Track" signals because there is no generally accepted standard for interpreting them.

Where applicable law requires SetSwap to recognize an opt-out preference signal, SetSwap will do so when the relevant functionality is implemented and applicable to SetSwap's processing.

SetSwap does not currently sell personal information for monetary consideration.

SetSwap does not currently share personal information for cross-context behavioral advertising.

SetSwap discloses personal information to service providers, contractors, transaction participants, carriers, connected services, and other recipients for the operational purposes described in this policy.

SetSwap retains personal information for as long as reasonably necessary for the purposes described in this policy, including:

• Maintaining accounts and providing the Services.
• Completing and documenting transactions, rentals, deposits, payments, shipments, and disputes.
• Supporting seller onboarding, earnings tracking, tax documentation, accounting, and legal compliance.
• Preventing fraud and investigating security incidents.
• Resolving support requests and disputes.
• Maintaining backups, audit records, and operational continuity.
• Establishing, exercising, or defending legal claims.

Retention periods vary based on the type of information, applicable law, provider configuration, and operational need.

Tax, payment, transaction, identity-verification, and dispute records may be retained longer than ordinary account content when required for legal, accounting, fraud-prevention, or compliance purposes.

Information processed by third-party providers is also subject to their data-handling and retention practices. SetSwap's use of AI providers is described in Section 4.4.

SetSwap uses administrative, technical, and organizational measures intended to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure.

No online service or storage system can guarantee absolute security.

You are responsible for maintaining secure credentials, protecting access to your account, and promptly reporting suspected unauthorized access to support@setswap.com.

Depending on your location and applicable law, you may be able to request:

• Access to personal information.
• Correction of inaccurate information.
• Deletion of certain information.
• A copy of information you provided.
• Information about how personal information is collected, used, or disclosed.
• Withdrawal of consent where processing is based on consent.
• Closure of an account.

Requests may be submitted to support@setswap.com.

SetSwap may need to verify your identity and authority before completing a request. SetSwap may retain information where permitted or required for transactions, tax, accounting, fraud prevention, security, disputes, legal compliance, or legal claims.

You may also manage certain account information and browser or device permissions directly through the Services or your browser or device settings.

California law may provide additional privacy rights depending on the law that applies to SetSwap and the requesting individual.

The categories of personal information SetSwap collects are described in Section 2. The categories of recipients to whom SetSwap may disclose personal information are described in Section 4.

Depending on applicability, California rights may include the right to:

• Know or access personal information.
• Correct inaccurate personal information.
• Delete certain personal information.
• Receive a portable copy of certain information.
• Obtain information about collection, use, disclosure, sale, or sharing.
• Opt out of the sale or sharing of personal information.
• Limit certain uses or disclosures of sensitive personal information.
• Receive equal service and pricing when exercising privacy rights.

SetSwap does not currently sell personal information for monetary consideration or share personal information for cross-context behavioral advertising.

California privacy requests may be submitted to support@setswap.com. SetSwap may verify the requester's identity and authority and may deny or limit a request where permitted by law.

SetSwap will not unlawfully discriminate against a person for exercising a valid privacy right.

The Services are intended for professional and business users and are not directed to children under 18.

SetSwap does not knowingly collect personal information from children through the Services. A parent or guardian who believes a child submitted personal information may contact support@setswap.com to request review or deletion.

SetSwap is operated from the United States and is primarily intended for United States users and transactions.

If you access the Services from another country, your information may be processed in the United States and other countries where SetSwap or its providers operate.

Additional jurisdiction-specific disclosures and rights may apply when SetSwap intentionally offers the Services in a jurisdiction with additional requirements.

The Services may contain links to or integrations with third-party websites, payment providers, carriers, mapping providers, authentication providers, connected inventory tools, or other external services.

Their independent privacy practices are governed by their own policies. SetSwap does not control how independent third parties process information outside the Services.

SetSwap may update this Privacy Policy as the Services, providers, data practices, and legal requirements change.

The effective date at the top identifies the current version. SetSwap may notify users of material changes through the Services, by email, or through another reasonable method.

Privacy questions and requests may be sent to:

SetSwap Inc.

1801 Century Park East, Suite 2400

Century City, California 90067

support@setswap.com