Privacy Policy

LeoxLab LLC is a company based in Louisiana, United States, and operates DOSTUP as an online classifieds and local-listings platform. This policy covers the information DOSTUP itself collects through its website. If you follow a link away from DOSTUP — for example, to a seller’s external contact method or a linked video — that destination has its own privacy practices, which this policy does not cover.

DOSTUP exists to help people find and share listings, services, places, events, and community information, and to provide related platform features. DOSTUP is an independent platform: unless we expressly state otherwise, it is not affiliated with, sponsored by, endorsed by, or operated by any government agency, political organization, or other institution.

We do not sell your personal information. DOSTUP does not sell or rent your personal information to advertisers, data brokers, or any other third party. DOSTUP may display advertising, but showing you an advertisement does not mean that we sell your personal information to the advertiser.

Selling personal information is different from the limited processing that is necessary to run an online service. Like most platforms, DOSTUP relies on trusted service providers — for example, for hosting, payments, and email delivery — that may process limited information when needed to provide their services to us, as described in Service Providers. Using service providers in this way is not a sale of your personal information. If advertising providers are used, the technical information they may process is described in Analytics and Advertising.

DOSTUP collects information you choose to give us directly, including:

• an email address and password when you create an account;
• whether you register a personal or business account;
• a first name, and optionally a last name, for personal accounts, or a company name for business accounts;
• a public profile link (username) that you choose;
• optional profile details you add in Profile Settings, such as country, state, city, phone number, and a short bio;
• the content of listings you create, such as a title, description, and category;
• information you include in a report you file or a support request you send us.

Your account record stores the information above along with a few fields DOSTUP manages itself: whether your account has a verified badge, whether it is in good standing, and counts such as your number of listings, followers, and accounts you follow. Your account email and phone number are never shown on your public profile — only the profile details you choose to add (name or company name, city/state, bio, profile picture, and cover image) are displayed publicly.

At registration, you choose a Personal or Business account. A Personal account displays your first name (and last name, if provided). A Business account displays your company name instead. Your account type itself is visible on your public profile. We do not currently offer account-type-specific payment or subscription features — see Promotions and Boosted Listings in our Terms of Use for the current status of that functionality.

When you create a listing, DOSTUP collects the title, description, category, and location (country, state, city, and ZIP code) you provide. Listings go through a moderation review before they appear publicly, and DOSTUP keeps a record of prior versions of a listing while an edit is pending review.

You can add photos to your listings, and a profile picture and a cover image to your profile, on the website or in the mobile app. Large listing photos are resized on your device before they are uploaded. Uploaded images are stored in private storage at Supabase, our database and storage provider, and are shown to others through links that expire after a limited time. Listing photos become publicly visible only when the listing itself is published — until then, only you and our moderation team can see them — and adding a new photo to a published listing sends the listing back for review. Your profile picture and cover image are shown on your public profile. You can remove or replace your photos at any time.

DOSTUP handles two distinct kinds of location information:

• Listing and profile location. The city, state, country, and ZIP code you type into a listing or your profile, used to show where a listing or seller is based.
• Browsing-location preference. A separate, optional setting that controls which area’s listings are shown to you as you browse — a state, city, ZIP code, or “All States.” If you choose “use my location,” your browser asks permission to share your device’s coordinates; DOSTUP uses those coordinates only once, to look up the nearest matching city or ZIP code, and does not store the raw coordinates. This preference is saved in the dostup_loc cookie described in Cookies We Use.

DOSTUP uses Supabase, our authentication and database provider, to manage sign-in sessions. When you sign in, Supabase sets a session cookie that keeps you signed in as you move between pages. This cookie is required for the sign-in, sign-out, and account-protected features of DOSTUP to function, and is described further in Cookies We Use.

DOSTUP sends account-related emails — such as a signup confirmation link or a password-reset link — through our authentication provider when you request them. We also show in-app notifications for activity relevant to your account (for example, a new follower or a moderation decision on your listing). Push notifications in the DOSTUP mobile app are optional and are turned off by default. If you turn them on in Profile Settings, your device is asked for notification permission and we store a notification token for that device so those notifications can be delivered to it; the token is handled by Expo’s push service and by Apple’s or Google’s push services in order to reach your device. You can turn push notifications off at any time in Profile Settings, and we revoke the token for that device when you sign out or delete your account. Broader notification delivery by email or SMS is not active in the current version of DOSTUP.

If you report a listing, profile, or other content, we record the report, the reason you provide, and its review status so our moderation team can act on it. If you contact us for support, we use the information you send only to respond to your request.

DOSTUP records a view count on listings to show sellers basic interest in their posting. As of this policy’s effective date, DOSTUP does not run analytics, advertising, or tracking software that builds a profile of your browsing behavior — see Analytics and Advertising below.

We use the information described above to:

• create and secure your account, and keep you signed in;
• display your listings and public profile to other visitors;
• show you listings relevant to the area you’re browsing;
• operate moderation, reporting, and account-standing decisions;
• respond to support requests and enforce our Terms of Use;
• maintain and improve the reliability of the Platform.

We may use account, listing, and report information to review content against our Terms of Use, to investigate reports of abuse, fraud, or unlawful activity, to suspend or ban accounts that violate our rules, and to comply with a valid legal request.

We use trusted service providers to operate DOSTUP. They may process limited information when necessary to provide their services to us — for example, to store data, keep you signed in, process a payment, or deliver a message. The kinds of providers we use are:

• Hosting, database, and authentication. Supabase hosts our database and manages sign-in and account sessions, and a hosting provider serves the DOSTUP website.
• Payment processing. Stripe processes payments for paid promotions. You enter your card details on Stripe’s checkout page, and DOSTUP does not receive or store your full card number.
• Email delivery. Resend delivers messages you send through our contact form to our support team, with your email address set as the reply address, and delivers operational notices to our own staff.
• Push notifications. If you turn on push notifications in the mobile app, Expo’s push service and Apple’s or Google’s push services deliver them, as described in Communications, Reports, and Support.
• Advertising. No third-party advertising provider is active today. If DOSTUP adds one — for example, Google AdMob in the mobile app — it is covered by Analytics and Advertising.

Some providers, such as payment processors, may also handle certain information under their own privacy policies where the law requires it — for example, for fraud prevention or financial regulation. Using service providers is not a sale of your personal information. If we add a provider that handles your information in a materially different way, we will update this policy.

Your username, display name or company name, account type, city/state, verification badge (if any), and any listings you publish are visible to anyone who visits DOSTUP, signed in or not. Your email address, phone number, and full account details are never included in your public profile.

A listing may include a link to an embedded YouTube video. When present, DOSTUP uses YouTube’s privacy-enhanced (“youtube-nocookie.com”) embed mode, which does not set YouTube cookies unless and until you interact with the video player. Playing an embedded video is subject to Google/YouTube’s own privacy policy, not this one. Other links you see on DOSTUP — to a seller’s own contact details, or to our social media pages — also lead to destinations outside our control.

DOSTUP currently uses exactly two cookies, both required for the Platform to work:

• A Supabase authentication/session cookie, set when you sign in, which keeps you signed in as you use DOSTUP. Without it, you would need to sign in again on every page.
• dostup_loc, which remembers your browsing-location preference (see Location Information) for up to a year, so you don’t have to re-select it on every visit. This cookie is not readable by other websites and stores only a state code, city ID, or ZIP code — never your name, email, or any identifying text.

Both cookies are first-party (set by DOSTUP or our authentication provider, not by an advertiser) and are necessary for core functionality, so they are not currently subject to a cookie-consent choice. If DOSTUP introduces cookies that are not necessary for the Platform to function, we will add a consent mechanism and update this policy before those cookies are set.

As of this policy’s effective date, DOSTUP does not load Google Analytics, advertising trackers, or marketing pixels of any kind, and Google AdMob and other third-party advertising technology are not active. Any promotional banners shown on DOSTUP are DOSTUP’s own first-party content, not third-party ad-network placements, and do not track you across other websites. We do measure those first-party banners: when one is shown to you, or when you tap or click one, we record which campaign and which slot it was, whether it was a display or a click, the time, and an opaque session token created fresh for each browsing session and not kept after that session ends. No advertising identifier, user account identifier, device identifier or IP address is stored in that record, and it is never used to build a profile of you or to follow you to other websites — it exists only so an advertiser can be told how their own campaign performed.

If DOSTUP enables analytics or advertising technology in the future, we will provide an updated notice and a consent mechanism before that technology is activated, and we will update this policy to describe exactly what is collected and why.

Planned mobile advertising. DOSTUP may in the future show advertisements in its mobile app through an advertising provider such as Google AdMob. When an advertising provider is used, it may process technical information where applicable — such as device and advertising identifiers, your IP address and the approximate location derived from it, basic device and app information, and your interactions with ads, such as views and taps — to show ads, limit how often the same ad appears, measure ad performance, and prevent ad fraud. Depending on your region and your choices, those ads may be personalized or non-personalized; where the law requires your consent, we will ask for it through the consent mechanism described above before that processing begins.

DOSTUP keeps your account and content for as long as your account is active. If you delete your account, DOSTUP anonymizes your profile — replacing your email, username, and profile link with non-identifying placeholders and clearing your name, phone, location, and bio fields — and archives your listings rather than displaying them publicly. We do not currently offer a self-service option to permanently erase your account record outright; the anonymized record and archived listings are retained for moderation history and platform integrity. If you have questions about this or want to request further action regarding your data, contact us at the address in Contact Us.

We use reasonable technical measures — including database access controls and a managed authentication provider — to protect your information. No method of storing or transmitting information over the internet is completely secure, and we cannot guarantee absolute security.

To protect DOSTUP and its users against spam, fraud, and abuse, we may process limited technical information, such as the IP address a request comes from. For example, our contact form limits how many messages can be sent in a short period. To do this, our server turns the sender’s IP address and email address into keyed one-way codes (HMAC-SHA256, using a secret key that only our server holds) and stores only those codes and the time of the submission — never the IP address or the email address itself. These rate-limit records are kept only temporarily: once a record is older than 24 hours, it no longer affects any limit and is deleted automatically the next time the form is used. The message itself is delivered to our support team so that we can reply, as described in Communications, Reports, and Support.

You can review and update most of your profile information at any time in Profile Settings. You can change your browsing-location preference at any time from the location control in the site header. To request access to, correction of, or deletion of your information beyond what Profile Settings allows, contact us at privacy@dostup.us. We will respond to verified requests consistent with this policy and applicable law.

We may update this Privacy Policy from time to time. If we make material changes, we’ll update the effective date above and, where appropriate, provide additional notice before the changes take effect.

Questions about this Privacy Policy or your information can be sent to privacy@dostup.us. For general questions, reach us at info@dostup.us. DOSTUP is operated by LeoxLab LLC, Louisiana, United States.