Privacy Policy

Account data: your email address and name, obtained when you register with email/password or via Google or Apple. You share the same account with Museum.app.

Usage activity: the terms you search, the items you open or save, your favorites, saved searches, alerts (Radar), and your app-desktop configuration. We use this activity to deliver results and a personalized feed.

Device and connection: your IP address and approximate country. We use them to route your searches through the right connection, respect each marketplace’s regional availability rules, and prevent abuse.

Linked marketplace accounts: when you connect a marketplace (e.g., eBay), we store the session or authorization needed to search and act on your behalf in encrypted form. We never store your marketplace passwords.

eBay authorization (bids and purchases): if you connect your eBay account for features such as last-second bidding (sniping) or buying, we store an encrypted eBay authorization token that lets us perform ONLY the actions you configure (for example, placing the maximum bid you set). You can revoke this authorization at any time.

To provide and personalize the service: run your searches, show enriched results, and compose a feed tailored to what you view and search.

To act on your behalf when you authorize it: place the bids or purchases you schedule on the marketplaces you have linked.

Affiliate attribution: some product links include affiliate-program identifiers (such as the eBay Partner Network) that let us earn a commission at no cost to you.

Security, fraud prevention, legal compliance, and service improvement.

Marketplaces: we send your searches and, when authorized, your actions (bids, purchases) to the relevant marketplaces. Their data processing is governed by their own policies.

eBay and the eBay Partner Network: to execute your actions on eBay and for affiliate attribution.

Sign-in providers: Google and Apple, if you choose to register with them.

Infrastructure providers: hosting, proxy servers (to route requests), and translation services. They process data only on our behalf and under contract.

We do not sell your personal data. We may disclose information where required by law.

Linking any marketplace is voluntary and requires your explicit consent. You can unlink an account at any time from settings; when you do, we delete the stored session or token.

Specifically for eBay: when you schedule an automatic bid (sniping) or a purchase, the action is performed with YOUR account and under YOUR authorization, at the amount and conditions you set. You are responsible for the bids and purchases you configure. Automated sniping may be subject to the marketplace’s own terms of use; we inform you before you enable it.

We keep your data while you have an active account and for as long as necessary for the described purposes or to meet legal obligations. When you delete your account, we delete or anonymize your personal data per our deletion process (GDPR/CCPA/LGPD-compliant), except what we must retain by law.

Depending on your jurisdiction, you have the right to access, rectify, delete, and port your data, to object to or restrict certain processing, and to withdraw consent. You can delete your account from settings or exercise any right by writing to contact@museum.app. You may also lodge a complaint with your data protection authority.

We encrypt data in transit (HTTPS) and encrypt sensitive data at rest, such as marketplace sessions and eBay authorization tokens (AES-256-GCM). No system is 100% secure; please protect your credentials.

We use cookies and local storage necessary to keep your session and remember your preferences. BuyHub does NOT show ads, does not sell ad space, and does not use third-party advertising cookies to profile you. Affiliate links (section 2) do not track your browsing for advertising purposes.

Your data may be processed on servers located outside your country. When we transfer data outside the European Economic Area, we apply the safeguards required by law.

BuyHub is not directed to children under 16, and we do not knowingly collect their data. If you believe a minor has provided us data, contact us and we will delete it.

We may update this policy. We will post the current version on this page with its update date and, for significant changes, notify you.

Data controller: Museum App Inc., 5900 Balcones Drive Ste 100, Austin, TX 78731, United States. Contact email: contact@museum.app.