Privacy Policy

We collect account information such as name, email address, password credentials handled through Supabase Auth, institution name, institution type, location, account role, verification badge status, and communication preferences.

We collect marketplace information such as listings, photos, descriptions, categories, condition, location, starting bid, reserve price, logistics details, bids, watchlist activity, search alerts, questions, messages, reports, ratings, reviews, transaction status, payout status, and audit records as those features are released.

We collect technical and usage information such as device and browser data, IP address, approximate location, pages viewed, referring pages, search terms, session events, security events, cookies, and similar diagnostics needed to run, secure, and improve the service.

We use information to create and secure accounts, publish listings, operate monthly auctions, process bids, support payments and payouts, coordinate pickup or shipping, provide dashboards, send transactional notices, handle disputes, and administer reports or moderation.

We also use information to prevent fraud and abuse, verify account or institution details, enforce our Terms, debug product issues, improve search and marketplace quality, provide customer support, maintain records, and satisfy legal, tax, accounting, security, and compliance obligations.

Where consent and law allow, we may use contact and marketplace lifecycle information to send monthly listing updates, product announcements, and other marketing messages.

SurplusED uses Stripe and Stripe Connect for payment processing, connected seller accounts, payment method handling, payout workflows, tax reporting support, fraud review, disputes, chargebacks, and related payment operations.

SurplusED does not intend to store full card numbers or bank account credentials on its own servers. Stripe may collect and process payment, identity, bank, tax, and fraud-prevention information under Stripe's own terms and privacy policy.

We may store transaction identifiers, payment status, fee amounts, payout status, receipt confirmation, dispute status, and accounting records needed to operate the marketplace.

We may share information with service providers that help operate SurplusED, including Supabase for authentication, PostgreSQL, and storage; Stripe for payments and payouts; Resend for transactional email; third-party marketing email providers where allowed; hosting, security, analytics, logging, support, and operations vendors; and professional advisors.

We may share relevant transaction, listing, account, message, payment, dispute, or report information between buyers, sellers, admins, and service providers when needed to complete a transaction, coordinate logistics, resolve a problem, protect users, or enforce our Terms.

We may disclose information when required by law, subpoena, court order, government request, tax rule, payment network rule, safety concern, security investigation, business transfer, or to protect rights, users, and marketplace integrity.

SurplusED is an education-focused surplus marketplace, but users should not upload student education records, child personal information, employee records, health records, financial records, confidential district files, device data from students or staff, or other restricted records into listings, photos, messages, or attachments.

Schools and other institutions remain responsible for deciding whether their use of SurplusED complies with FERPA, COPPA, state education privacy laws, surplus disposition rules, procurement rules, public records duties, and their own internal policies.

SurplusED is not directed to children under 13. If we learn that child personal information was provided outside an approved institutional workflow, we will take reasonable steps to remove or restrict it.

Published listings, listing photos, seller display information, item location, category, condition, auction timing, pricing, bid state, and related marketplace details may be visible to the public, indexed by search engines, shared through social previews, or retained in marketplace records.

Public questions, ratings, reviews, and reports may be visible where the feature indicates public display. Private messages and dispute materials are not intended for public display, but they may be reviewed by admins and relevant service providers when needed for operations, safety, support, or enforcement.

We may use cookies, local storage, server logs, analytics tools, and similar technologies to keep users signed in, remember preferences, protect accounts, measure product usage, improve marketplace performance, and understand which pages or listings are useful.

Marketing email may be managed through a third-party marketing email provider. Transactional email may be sent through Resend or similar providers. You can unsubscribe from marketing email, but we may still send account, security, payment, auction, dispute, and service notices.

You may update account and listing information through available product settings. You may unsubscribe from marketing email using the link in the message or by contacting us.

Depending on where you live, you may have rights to request access, correction, deletion, portability, restriction, or objection for certain personal information. We may need to verify your request and may retain information when required for transactions, disputes, fraud prevention, legal compliance, accounting, tax, security, or legitimate marketplace operations.

Closing an account does not automatically remove completed transaction records, audit logs, payment records, dispute records, or content we must retain for operational or legal reasons.

We use commercially reasonable administrative, technical, and organizational measures designed to protect information. No internet service, storage system, payment flow, or email system can be guaranteed completely secure.

We keep information for as long as needed to provide SurplusED, complete transactions, resolve disputes, comply with legal and tax obligations, support audits, prevent fraud, enforce policies, improve the service, and maintain business records.

We may update this Privacy Policy as the product, law, vendors, or marketplace operations change. If changes are material, we will provide notice through the service, email, or another reasonable method.

Questions or privacy requests can be sent to customerservice@surplused.net. SurplusED is operated by SurplusED, LLC in Hastings, Nebraska.