Privacy policy

• We collect your account details, what you list, and who you message.
• Your email address is never shown publicly and never sold.
• We do not run advertising trackers or third-party analytics profiling.
• You can see, correct or delete your data from your account settings, or by asking us.

Account data. Your name, email address and a cryptographic hash of your password. We never store the password itself — it is hashed with argon2id, which cannot be reversed.

Vendor data. If you apply to sell: company name, country and city, website, contact phone, a description of your business, and any registration documents you send us for verification.

Marketplace activity. The listings you publish and their images and specifications, the equipment you save or add to a comparison, and view counts on listings.

Messages. The content of enquiries and replies you send through the platform, and who they were between.

Payments. If you buy a paid feature, we record the amount, currency, status and a payment reference. Card details are handled by the payment provider and never reach our servers.

Technical data. Standard server logs — IP address, browser type and the pages requested — kept for security and debugging.

• To run your account — signing you in, confirming your email address, resetting your password.
• To operate the marketplace — publishing listings, moderating them, delivering messages, ranking search results.
• To verify vendors — checking that companies are real before their storefront goes live. This is the point of the platform.
• To keep it safe — investigating reports, detecting fraud and abuse, and enforcing our terms.
• To email you about your account — verification, approvals, listing decisions, new messages and receipts. These are service emails, not marketing.

For vendors, the storefront is public by design: company name, country and city, description, logo and all approved listings. Anyone on the internet can see them.

Your email address and phone number are not published. Buyers reach you through in-platform messaging, and buyer accounts are not publicly visible at all — a buyer's name is seen only by the vendors they choose to message.

Messages between a buyer and a vendor are private to those two parties. Our staff cannot browse them.

There is one exception: if someone reports a conversation, an administrator can read that specific thread in order to investigate. When the report is closed, that access ends. We think a marketplace that can act on harassment is worth this narrow, logged exception — and this is us telling you about it plainly.

We do not sell your data. We share it only with the services that run the platform:

• Our hosting and database provider, which stores the data on our behalf.
• Our email provider, which delivers verification, notification and receipt emails.
• A payment provider, if and when you purchase a paid feature.
• Authorities, where we are legally required to — for example a valid court order.

We use a session cookieto keep you signed in, and a small preference cookie to remember your light or dark theme. Your comparison tray is kept in your browser's local storage so it works before you sign in.

That is all. There are no advertising cookies and no cross-site tracking pixels, which is also why you are not being asked to dismiss a consent banner.

• Account data — for as long as your account is open.
• Listings and messages — for as long as the account they belong to exists.
• Payment records — kept after account closure where accounting or tax law requires it.
• Server logs — a short rolling window, then deleted.

Closing your account deletes your profile, saved listings and message history. Where a message you sent forms part of another party's conversation record, or where a record must be kept for legal reasons, it may persist in that context.

You can ask us at any time to:

• give you a copy of the data we hold about you;
• correct anything that is wrong — most of it you can edit yourself;
• delete your account and its data;
• stop a particular use of your data.

Buyer accounts can be closed immediately from account settings. Vendor accounts are closed by our team so that live listings and payment records are handled properly — email us and we will do it. We aim to answer any request within 30 days.

Traffic is encrypted in transit with TLS. Passwords are hashed with argon2id. Email verification and password-reset links are stored only as hashes, so even a database leak could not be replayed to take over an account. Uploaded files are validated by type before they are accepted. The database is backed up daily.

No system is perfect. If you find a security problem, please tell us before telling anyone else — we will fix it quickly and credit you if you would like.

Privacy questions, data requests or security reports: info@machinera.global. More ways to reach us are on the contact page.