Privacy Policy

For shipped auction orders, Stripe collects the delivery address during checkout. KigoLocal stores that address privately with the order and makes it available to the buyer and seller after confirmed payment for fulfillment. Carrier, tracking, shipment and buyer receipt records are saved with the order. Do not post addresses in public listings.

KigoLocal · Kigo Enterprise LLC · Updated October 30, 2026

Delete your account

You can initiate permanent deletion in Account in the app or on our account-deletion page. We sign you out on all devices, remove your listings and associated personal data, and revoke Sign in with Apple access. Cleanup normally completes within 24 hours and retries service failures. Transaction references and consent/suppression records may remain for financial reporting and compliance, with your app account reference removed. To prevent deleted accounts from being restored by old sign-in credentials, we retain disabled authentication and member identifiers for as long as that protection is needed. These security tombstones contain no raw email address after deletion is requested; they are not used for messaging or marketing. Other people may retain copies they previously saved. Contact hello@goodnessoflifeandfun.com for deletion status or help.

Optional seller ID checks and external vehicle escrow

If you choose seller ID verification, your identity document goes directly to Stripe Identity. KigoLocal stores the provider session reference, status, consent version and timestamps; it does not store ID images, document numbers, date of birth or a selfie in its own database. A successful document check can produce a public badge, which does not verify vehicle ownership or title. Stripe processes and retains verification data under its privacy terms. Account deletion requests provider redaction and retries provider failures before deleting the local reference. Escrow.com links open an independent service; KigoLocal does not send your listing, email or VIN to it automatically, hold funds or confirm external escrow status.

What we store and why

We store account names, email addresses and verification/session information to sign you in. Authentication records may include connection addresses and browser information for security. Listings contain your chosen public name, description, price, general city/state, ZIP center and any photo you upload. We store private marketplace messages, marketplace orders and their status, support requests, saved items, opted-in saved searches, notification preferences, reports and advertising campaigns to provide those features.

Public and private information

Listing names, descriptions, prices, city/state, ZIP code and photos are public and may appear in shared link previews. Approximate distances use ZIP centers; we do not request device GPS or a home address for matching. Do not publish a home address, banking details, identification documents or another person’s private information. Marketplace messages are available to conversation participants and any account they explicitly link through Shared inbox. Linking requires verified sign-ins to both accounts and an expiring code restricted to the other email. Either account can unlink to revoke future access; messages remain in their original conversations. Both linked accounts may receive message notifications according to their own preferences; support requests are available to their sender and the owner. Chat photos require authenticated conversation access and are not public listing images. Blocking stops new messages and message alerts between the affected accounts without deleting existing history. Safety reports send your explanation and conversation reference to support. The owner can review reported public listings and restrict accounts.

Seller profiles and launch participation

Public seller profiles show the name from your latest available or sold listing, general area, membership month, email-confirmed status and available listings. Your email address is not shown there. Following a seller is private to your account and enables a saved-seller feed, not marketing emails. You can unfollow at any time. Founding Columbus Sellers is an optional launch program: joining permits your public seller profile to appear in the campaign, with a participation badge. Leaving removes your campaign participation. Pickup feedback stores your chosen public name, rating and text, linked privately to a completed pickup request and its buyer account. Published feedback is public on the seller profile. You can report feedback through support; the owner can hide it. A pickup record does not independently verify a transaction.

Contact checks, VIN lookup and price alerts

Listings can show email or phone confirmation only when a completed account check is recorded. These checks do not verify identity or ownership. If you choose Decode VIN, the VIN is sent to NHTSA vPIC; VIN and vehicle history-report availability you add are public listing details. Do not upload identity or title documents. Optional price-drop email and device alerts store your selected channels and the item price when enabled. Remove the saved item or turn the channels off to stop them. Messages are checked on KigoLocal for common scam phrases to display caution notices; this does not determine whether a person is fraudulent. Both participants can rate a completed pickup after both confirm handoff. Seller feedback may appear on the public seller profile; buyer feedback summaries are available to their conversation participants.

Website traffic and guides

Public pages use the same browser identifier as the marketplace to count browser-days and guide readership. Counts store a daily salted hash, an allowlisted source/medium/campaign label and a known guide slug. We do not store raw referrer URLs, full query strings or search phrases for these traffic counts. Token pages, account/message flows and owner pages are excluded from this public-page tracker. Counts can include bots or repeat devices and do not establish sales attribution. You can read guides without enabling email updates.

Photos and AI

Listing and private message photos are decoded and re-encoded on the server to strip embedded metadata before storage. Listing photos, private chat photos you choose to attach, and listing text are sent to OpenAI for harmful-content screening. Screening does not prove an item is authentic or safe. When you use Kigo AI, your message, recent chat, shopping preferences, search filters, selected public listing context and any photo you choose to share are sent to OpenAI. Private marketplace conversations and account emails are not included in the assistant prompt. We request that Responses API output not be stored by OpenAI; provider retention rules still apply.

Seller starter help

The optional starter worksheet prepares item details in your browser and is not saved on our server. You choose whether to copy it or open an email draft. If you send photos and details to support by email, support can review them to help with your request; nothing is published automatically. In-app requests remain in your private support inbox. The owner’s recruitment ledger stores public business contacts, source links and records of outreach, replies and declines. Campaign metrics use existing listing, account, enquiry and pickup records and do not prove that an invitation caused a sale.

Optional newsletter

The separate email-update list requires an unchecked consent choice and an expiring email-confirmation link. Opening a confirmation link alone does not subscribe you. We store your email, consent wording version and timestamps, confirmation state and delivery references. No existing customer or invited business is enrolled automatically. Confirmed subscribers can receive listing tips, guides and marketplace news at most weekly after the owner enables sending. Every newsletter has an unsubscribe link that works without signing in. Unsubscribing immediately stops queued newsletter work and removes the email from that list; a minimal address hash and consent/suppression record remain to honor the choice. Unconfirmed addresses are removed after 30 days. If your verified account uses the same address, account deletion also stops newsletter emails. Message notifications and saved-search alerts have separate settings.

Emails and alerts

Resend delivers email sign-in codes and service notifications for messages, pickup requests, advertising bookings and support replies to verified addresses. These service emails are enabled by default and can be controlled separately in Account. Message and support emails contain a link, not private message text. Order and booking emails include basic item or booking status. Emails are grouped and limited to reduce repetition. Provider acceptance does not guarantee inbox delivery. Saved-search email and device alerts each require an explicit choice; removing a search or turning off a channel stops future sends. Device notifications require permission on each browser, Home Screen app or native phone app. We store the browser subscription endpoint or native device token as a private delivery address linked to your account. Native iOS notifications use Apple Push Notification service; native Android notifications use Firebase Cloud Messaging. Your browser provider (such as Apple, Google, Mozilla or Microsoft) handles delivery. Push requests contain no message text, listing details or email address; the device displays a generic notice. Turn off this device or all devices in Account to remove subscriptions. Background processing uses Cloudflare to check for new matches and retry delivery without requiring a visitor.

Native message drafts

Native app drafts and pending sends are saved on the device using Apple Keychain or Android Keystore encryption. They are restored only for the same account and shared-inbox membership. Sign-out or membership changes clear them. Restored pending sends require an explicit retry; they are not sent automatically. The browser keeps drafts and pending sends in memory, so reloading the page clears them. Sent messages remain in server-backed conversation history.

Analytics and browser storage

First-party analytics count daily browser visits, new verified customer accounts, published listings, buyer enquiries and messages. A random browser identifier is kept in local storage. Daily salted hashes are used for visit counts; the analytics tables do not store raw connection addresses. Seller statistics show aggregate detail views, saves and enquiries, without visitor identities. Signed-in self-views are excluded. Counts can include bots or repeated devices and are not verified sales. Clearing browser data removes those local copies, not server records.

Private contact information

You may optionally save your full name, contact email, phone, organization and city/state/ZIP in Account → Private contact information. These details are private to your signed-in account through the application, are not placed on public listings or shared with advertisers, and are not used for ad targeting. A saved contact number is not proof of ownership and does not enable text alerts. Text-alert numbers are verified and managed separately. You can edit or delete these saved details without changing your sign-in account. Contact preferences do not automatically send messages or change your verified notification email.

Optional text message alerts

We do not sell or share your SMS opt-in data or personal information with third parties for marketing purposes.

When SMS is activated, you can request a verification code and separately opt in to automated new-message alerts. Twilio receives your selected phone number to validate it, send verification codes and deliver generic alerts. Private marketplace message text is not sent by SMS. We store your alert number, verification time, consent version and timestamp, preferences, delivery status and provider reference. Your number is not displayed to other members or advertisers. Verification does not turn alerts on. Alerts cover messages sent from the app or website to the same account, are grouped and limited, and may be delayed or undelivered. Message and data rates may apply. Consent is optional and is not required to use KigoLocal or make a purchase. Reply STOP or turn texts off in Manage text alerts. HELP is handled by the text provider; SMS replies do not reach marketplace participants. A provider-reported delivery does not establish that you read a text. Remove alert number deletes the phone and pending verification from this feature; separately saved contact details remain until you delete them. Pending verifications expire after 10 minutes and are removed within a day by the enabled notification job; text delivery records are removed after 30 days by that job. Hashed-number opt-out records and consent history are retained to honor your choices and document consent. Contact support for data requests.

Contextual ad delivery and choices

Website and updated native-app ad selection may use the marketplace category you browse, the first three digits of the ZIP selected in search, campaign dates, configured delivery limits and aggregate exposure. It does not use private messages, saved contact information or precise device location. We store campaign dismissals locally in your browser or app for up to 30 days, reduce ad density after repeated dismissals, and apply daily frequency limits using daily salted account/browser hashes. Clearing browser or app preferences resets local choices; recognized signed-in account limits can still apply. Placement reservations store campaign, category, three-digit ZIP prefix, timestamps and a salted viewer hash. Unviewed reservations expire without consuming delivery credit. Delivery budgets are campaign controls, not automatic Stripe charges.

AI campaign reviews

The owner can request an OpenAI review of public campaign titles, business names, descriptions and call-to-action text. Private messages, enquiries, customer contacts, visitor identity and search location are not sent for these reviews. Reviews assess copy quality and category relevance; they do not inspect images, video or destination pages, verify claims or provide legal approval. We request no Responses API storage; provider retention rules still apply. Reviews are cached for seven days and become unusable for ranking when the reviewed text changes. Only owner-enabled, current scores can provide a small ranking adjustment; availability, spacing, frequency, budgets and customer choices remain enforced.

Advertising measurements and enquiries

We measure on-site ad views and destination clicks using daily salted browser/account hashes and show aggregate counts to the advertiser and owner. Ad views require at least half the placement to be visible for one second. A signed-in campaign manager is excluded. If you use Contact this business, we ask permission before saving your name, verified account email and message for that advertiser and the KigoLocal owner to review and respond. This enquiry is separate from private marketplace messages. Contact support for deletion requests.

Advertising payments

Stripe processes advertising payments on its hosted checkout. We store booking details, payment references, amounts and payment/refund status to deliver placements and handle support. Card numbers are entered directly with Stripe and are not stored by KigoLocal. Stripe receives the checkout and payment information you provide.

Google sign-in and connected accounts

Signing in with Google identifies your KigoLocal account; it does not connect your Gmail inbox, Drive documents or Google Photos to KigoLocal. KigoLocal does not request access to those services for sign-in or use their contents to personalize advertisements. Choices you make inside Google Search or Gemini are separate from KigoLocal. You can review third-party connections in your Google Account. Removing a Google connection does not delete your KigoLocal account; use the account-deletion controls above.

Providers

The service uses Cloudflare infrastructure through Sites hosting for application data and images, Resend for transactional email, and OpenAI for requested AI features and content screening. Social sign-in providers receive information only when connected and used. Fonts are loaded from Google Fonts. Providers receive the information needed to deliver their services. We do not use these analytics to buy external advertising or sell personal information.

Listing drafts and pickup plans

Unpublished item details and a selected photo can be saved on the device where you create the draft, scoped to your account. Draft recovery lasts up to 30 days; you can clear a draft from Sell. A draft is not a public listing and is not synced to your other devices. Pickup plans store the agreed time, time zone, meeting place, proposal history revision and each participant’s handoff confirmation. Plans are available to conversation participants and their explicitly linked shared inbox accounts. Service notifications can remind participants of a confirmed pickup within the next hour; delivery is not guaranteed.

Seller-direct payments

When enabled, seller payment onboarding sends your account email, public seller name and chosen operating country to Stripe. Stripe collects identity, bank and payment details on its own pages. We store Stripe account and transaction references, the agreed amount and currency, payment and refund status, and the version of payment terms accepted. We do not store full card numbers or bank credentials. Payment references may be retained for financial reporting, refunds and disputes after your application account reference is removed. Pending payments must settle or be cancelled before account deletion can finish. Stripe account closure and financial-record retention are managed separately with Stripe.

Prepared seller details

If you choose to continue from the seller starter worksheet, a temporary copy of the item details stays in this browser tab and can be imported within 24 hours. Expiry is checked when the listing form opens; importing, dismissing or rejecting an expired copy removes it. They are offered to the first seller account you sign in to, and are not imported into a different account. You choose whether to replace the current draft. Importing clears that draft’s photos and requires you to add the actual item photos and confirm the terms again. Nothing is published by the worksheet.

Growth measurement

Public-page source labels can remain in this browser tab for a 30-minute browsing session so navigating to a listing does not lose them. For signed-in accounts, we record the first known source label and one milestone for the first published listing and first buyer enquiry. Source labels are allowlisted; we do not store search queries, raw referring addresses or advertising click identifiers in these metrics. Milestones use a secret-salted account hash and contain no message text. The owner sees aggregate source and action counts. Labels supplied by a browser do not prove advertising caused an action. Account deletion removes these account-linked source and milestone records. These metrics are not sent to Google Ads.

Marketplace activity

For signed-in members we record dates of marketplace activity and whether the account has bought or sold through marketplace conversations. The owner sees aggregate returning-member counts, listing completion, enquiries, reply times and pickup confirmations. These measurements do not independently verify a payment or sale.

Retention and your choices

Account, listing, message and support records remain stored until removed through available controls or handled through a verified support request, subject to security and legal needs. Removed listings are hidden from the public but may remain in administrative records. Email attempt records retain status and provider IDs. Copies shared on other websites are outside KigoLocal’s control. You can remove saved searches and bookmarks, turn off service emails or device alerts, remove listings and ask for access, correction or deletion through support. We verify requests before changing account data.

Contact and age

KigoLocal is intended for adults 18 and older. For privacy questions, account requests or concerns about a child’s information, contact hello@goodnessoflifeandfun.com. This page will be updated when practices change.