← Back to MarketBotPro
Privacy Policy
Last updated: 20 May 2026 · Effective date: 20 May 2026
This Privacy Policy describes how MarketBotPro ("we", "our", "us") collects, uses, and protects information when you use the MarketBotPro mobile application and related services (the "Service"). MarketBotPro is operated by Luke James, sole trader, contactable at marketbotpro123@gmail.com.
1. Information we collect
1.1 Information you provide
- Account information. When you create an account, you provide an email address and password. Passwords are stored as bcrypt hashes; we never see your plain password.
- Search profile information. Items you ask the app to monitor (search keywords, city, radius, price range, and other filters). This data is required for the core function of the Service.
- Payment information. When you subscribe to a paid tier (Basic, Premium, or VIP), payments are processed by Stripe, Inc. on our behalf. We do not store your card details. Stripe provides us with a customer ID, the subscription tier you bought, the renewal date, and your billing email. See Stripe's privacy notice at stripe.com/privacy.
- Support correspondence. If you email us at marketbotpro123@gmail.com, we retain the conversation for as long as needed to resolve your query and meet our record-keeping obligations.
1.2 Information collected automatically
- Push notification token. If you grant the app permission to send push notifications, we receive an Expo / Firebase / Apple Push Notification service token used solely to deliver listing alerts to your device. The token is rotated by the operating system and is not linked to any advertising identifier.
- Device and diagnostic data. We log technical events on our servers (request timestamps, endpoint, response status, anonymised IP address) to operate the Service, investigate abuse, and improve reliability. Logs are kept for 30 days and then automatically purged.
- App usage events. We record basic in-app actions (sign-in, profile created, alert tapped) so we can fix bugs and understand which features are used. We do not use any third-party analytics SDK and do not track you across other apps or websites.
1.3 Information from third parties
We do not buy, rent, or otherwise acquire personal information about you from data brokers, social networks, or advertising platforms.
2. How we use information
We use the information described above only to:
- operate the Service (run your saved searches, push alerts, manage your subscription),
- process payments through Stripe,
- provide customer support,
- protect the Service from abuse (rate-limiting, fraud detection),
- comply with our legal obligations.
We do not use your information for advertising, profiling, or sale to third parties. We do not sell any personal data.
3. Lawful basis (GDPR / UK GDPR)
Where you are located in the UK or EEA, we rely on the following lawful bases:
- Performance of a contract — to deliver the Service you have subscribed to.
- Legitimate interests — to keep the Service secure and improve it. You can object at any time by emailing us.
- Consent — for push notifications, which you can revoke at any time in your phone's system settings.
- Legal obligation — for tax, accounting, and any required disclosures to authorities.
4. Sharing and third parties
We share information only with the processors necessary to run the Service:
- Stripe — payment processing.
- Expo (Push Notification Service) — delivery of push notifications to your device.
- Hetzner Online GmbH — our hosting provider (servers located in Germany).
We do not share your information with advertisers, marketers, or analytics providers. We will only disclose information to law-enforcement or government bodies if we are legally required to do so, and we will narrow the scope of any such disclosure to the minimum required by law.
5. Listings displayed inside the app
MarketBotPro shows public listings from Facebook Marketplace and similar public listing platforms inside the app. We do not log into your Facebook account, we do not request your Facebook credentials, and we do not access any private content. Listings shown in the app are the same listings that anyone visiting that public marketplace page could see.
6. Data retention
- Account data is retained for as long as your account is open.
- If you delete your account, we erase your search profiles, push tokens, and personal information within 30 days. Billing records held by Stripe and minimum financial records (invoices, VAT data) are retained for the periods required by UK tax law.
- Server logs are auto-purged after 30 days.
7. Your rights
If you are in the UK or EEA you have the right to:
- access the personal data we hold about you,
- request correction or deletion,
- object to or restrict certain processing,
- data portability (a machine-readable export),
- withdraw consent for push notifications at any time,
- lodge a complaint with the UK Information Commissioner's Office (ico.org.uk) or your local data protection authority.
To exercise any of these rights, email marketbotpro123@gmail.com. We aim to respond within 14 days.
8. Children
MarketBotPro is intended for users aged 13 and over. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will delete it.
9. International transfers
Our servers are in Germany (EU). Stripe processes payments in the EU, US, and UK depending on your location, under Standard Contractual Clauses where applicable. Expo's push notification infrastructure is operated by Expo, Inc. in the United States and uses appropriate transfer safeguards.
10. Security
We use industry-standard measures to protect your data: TLS encryption in transit, bcrypt password hashing, encrypted-at-rest database storage, restricted server access, and regular security patches. No system is perfectly secure; if a breach affects your data we will notify you and, where required, the regulator without undue delay.
11. Changes to this policy
If we materially change this policy we will notify you in-app and update the "Last updated" date above. Continued use of the Service after a change means you accept the updated policy.