Privacy Policy
We are committed to protecting your privacy. This policy explains how we handle your data within our closed marketplace.
1Introduction
Cascade ("we," "our," or "us") operates a closed marketplace platform exclusively for verified university students. We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you access or use our mobile application and website (collectively, the "Platform").
By creating an account or using Cascade, you consent to the data practices described in this policy.
2Information We Collect
We collect information in two categories: information you provide directly to us and information automatically collected when you use the Platform.
A. Personal Information You Provide
- Verification Data: We strictly require a valid .edu email address to verify your status as a university student.
- Account Information: If you create a profile, we may collect your name, username, and profile picture.
- Listing Content: Any photos, descriptions, or pricing information you upload regarding items you wish to sell.
B. Usage and Device Data
- Log Data: IP address, browser type, operating system, and access times.
- Device Information: Device model, unique device identifiers, and mobile network information.
3Information We Do Not Collect
To protect your security and privacy, Cascade minimizes data collection. We explicitly confirm that we do not collect, store, or process:
We do not process payments. We do not collect credit card numbers, bank account details, or payment app handles (e.g., Venmo/CashApp usernames). All financial transactions occur off-platform.
We do not host internal messaging. We do not have access to, nor do we store, communications between buyers and sellers that take place via third-party apps or in person.
4How We Use Your Information
- Verification: To authenticate your identity as a current university student using your .edu email.
- Service Operation: To allow you to post listings and browse items posted by other students.
- Security: To detect, prevent, and address fraud, unauthorized access (such as non-student access), and violations of our Terms of Service.
- Communication: To send you administrative information, such as account updates, security alerts, and policy changes.
5Sharing of Information
We do not sell your personal information to advertisers or third parties. We only share information in the following limited circumstances:
- Comply with a legal obligation (e.g., a subpoena or court order).
- Protect and defend the rights or property of Cascade.
- Prevent or investigate possible wrongdoing in connection with the Platform.
- Protect the personal safety of users or the public.
6Data Retention
We retain your .edu email address and account profile information for as long as your account remains active to maintain our "verified student only" environment.
If you request account deletion, we will delete your personal information within 30 days, except where we are required to retain it for legal or security purposes (e.g., to prevent a banned user from re-registering).
7Data Security
We use administrative, technical, and physical security measures to help protect your personal information. While we have taken reasonable steps to secure the personal information you provide to us, please be aware that despite our efforts, no security measures are perfect or impenetrable, and no method of data transmission can be guaranteed against any interception or other type of misuse.
8Your Data Rights
Right to Access: You may request a copy of the personal information we hold about you.
Right to Correction: You may update or correct your account information at any time via your profile settings.
Right to Deletion: You may request that we delete your account and personal information by contacting support.
9Age Limitation
The Platform is intended exclusively for university students. By using Cascade, you represent that you are at least 18 years of age.
Compliance with COPPA: We do not knowingly solicit information from or market to children under the age of 13. If we learn that we have collected personal information from a child under age 13 without verification of parental consent, we will delete that information as quickly as possible.