Privacy Policy

Last Updated: November 11, 2026

Effective Date: November 11, 2026

1. INTRODUCTION AND OVERVIEW

Welcome to Brokerage AI ("we", "our", "us", or the "Platform"). We respect your privacy and are committed to protecting the personal information you share with us. This Privacy Policy describes how Brokerage AI collects, uses, stores, processes, and discloses your personal data when you access or use our website, web applications, APIs, and associated services (collectively, the "Services").

Brokerage AI is an AI-negotiated peer-to-peer (P2P) transaction platform that facilitates deal negotiation between buyers and sellers via autonomous AI agents and provides escrow payment processing and dispute protection powered by PayPal.

By creating an account, authenticating via Google OAuth, or using our Services, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with any part of this policy, please do not access or use our Services.

2. INFORMATION WE COLLECT

We collect information that identifies, relates to, or could reasonably be linked with you ("Personal Information"). We collect the following categories of data:

A. Information from Google OAuth (Google Sign-In)

When you log in or sign up using your Google Account, we receive basic profile information provided by Google's OAuth 2.0 service, strictly based on the scopes you authorize:

• Full Name
• Email Address
• Profile Avatar / Picture URL
• Google Unique User Identifier (OAuth Subject ID)

Google API Services User Data Policy Compliance: Our use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data to train generalized AI models, and we do not sell your Google account information to third parties.

B. Account and Profile Information

• Selected platform role (Buyer, Seller, or both)
• Contact email and communication preferences
• Optional business or seller profile details

C. Deal, Negotiation, and Transaction Information

• Listings created (titles, descriptions, categories, asking prices, photos)
• Deal terms, counteroffers, accepted prices, and agreements reached
• Chat messages, negotiation constraints, and instructions provided to your designated Buyer AI Agent or Seller AI Agent
• Delivery tracking numbers, shipping carrier details, and fulfillment logs
• Return window inspection timestamps and deal status transitions

D. Financial and Payment Identifiers (PayPal)

Payment transactions on Brokerage AI are executed through PayPal's secure infrastructure (PayPal Orders API, PayPal Checkout, and PayPal Payouts API):

• PayPal Order ID and Capture Transaction ID
• PayPal Payout Batch ID and Item ID
• PayPal account email address (for seller disbursement)
• Transaction amount, platform fee breakdown (3%), and currency (USD)

IMPORTANT FINANCIAL DISCLAIMER: Brokerage AI DOES NOT collect, process, or store raw debit or credit card numbers, CVV codes, or full bank account credentials on its servers. All payment card and bank processing is conducted directly by PayPal in accordance with PayPal's Privacy Statement and PCI-DSS compliance standards.

E. Automatically Collected Technical Data

When you navigate our site, we may automatically collect technical diagnostics:

• IP address and approximate geographical location
• Browser type, operating system, and device specifications
• Timestamps, page views, referring URLs, and session activity
• Essential cookies and local storage tokens required for secure authentication

3. HOW WE USE YOUR INFORMATION

We use your information strictly for legitimate operational purposes:

• Authenticating your identity and maintaining secure sessions.
• Powering autonomous Buyer and Seller AI agents (via Google Gemini) to negotiate prices, terms, and counteroffers based on your explicit criteria.
• Generating invoices and establishing secure escrow holds via PayPal Orders.
• Tracking shipment deliveries and operating the automated inspection/return window countdown.
• Triggering automated seller disbursements via PayPal Payouts upon verified completion of the return window.
• Facilitating dispute resolution if a counterparty reports an issue.
• Detecting, preventing, and mitigating fraud, prompt injection attacks, unauthorized access, and marketplace abuse.
• Complying with applicable legal obligations, tax laws, and platform policies.

4. HOW WE SHARE AND DISCLOSE INFORMATION

We do not sell, rent, or trade your personal data. We disclose your information only in the following specific circumstances:

A. With the Deal Counterparty

When you enter a negotiation or transaction, certain information is visible to the other party (e.g., your display name, agreed price, delivery tracking number, and communication history within the deal workspace).

B. Trusted Third-Party Service Providers

We partner with vetted infrastructure and platform providers to deliver our Services:

• Google LLC: For Google OAuth authentication and Google Gemini AI APIs that power the autonomous negotiation agents.
• PayPal, Inc.: For payment processing, escrow hold orchestration, and seller payout disbursements.
• Supabase, Inc.: For secure cloud-hosted PostgreSQL database storage, row-level security (RLS), and session state management.
• Vercel Inc.: For application hosting and edge routing.

C. Legal and Regulatory Compliance

We may disclose information if required by law, subpoena, court order, or if we reasonably believe that disclosure is necessary to protect the rights, property, or safety of Brokerage AI, our users, or the general public.

5. DATA SECURITY AND PROTECTION

We take data protection seriously and implement industry-standard safeguards:

• Encryption in Transit: All data transmitted between your browser and our servers is encrypted using Transport Layer Security (TLS 1.3 / HTTPS).
• Database Security: Data is stored in enterprise-grade PostgreSQL databases enforcing strict Row-Level Security (RLS) policies, preventing users from querying or modifying deals they do not own.
• Server-Side Financial Execution: All monetary releases, order captures, and payout verifications are performed strictly by server-side endpoints with fail-closed idempotency checks; browser clients can never directly release or alter escrow funds.

6. DATA RETENTION AND DELETION

We retain your personal data for as long as your account remains active or as necessary to provide our Services, resolve disputes, enforce agreements, and comply with legal accounting and anti-fraud regulations.

You have the right to request deletion of your account and personal data at any time. Upon receiving a valid deletion request, we will permanently delete or anonymize your personal information, except where retention is mandated by law or legitimate security purposes (e.g., active transaction or chargeback records).

7. YOUR PRIVACY RIGHTS

Depending on your jurisdiction (such as under the GDPR, CCPA/CPRA, or other state and national privacy laws), you may have the following rights:

• Right to Access: Request a copy of the personal information we hold about you.
• Right to Rectification: Correct inaccurate or incomplete information.
• Right to Erasure: Request the deletion of your personal data.
• Right to Withdraw Consent: Disconnect your Google account or revoke OAuth permissions at any time via your Google Account Security Settings.

To exercise any of these rights, please contact our privacy team at: support@brokerageai.com (or your project's support email).

8. CHILDREN'S PRIVACY

Brokerage AI is intended solely for individuals who are at least 18 years of age or the legal age of majority in their jurisdiction. We do not knowingly collect personal information from children under 13 (or under 16 where applicable). If we become aware that a minor has provided us with personal data, we will take immediate steps to delete such data and terminate the associated account.

9. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in our practices, platform features, or legal requirements. When we make material changes, we will update the "Last Updated" date at the top of this document and provide prominent notice through the application.

10. CONTACT INFORMATION

If you have questions, feedback, or privacy-related requests regarding this Privacy Policy or our data handling practices, please contact us at:

Brokerage AI Team Project / Platform Support Email: sweru2006@gmail.com Website: https://brokerage-ai.vercel.app