Privacy Policy

Regalia Pass On is responsible for the personal information described in this policy.

We collect the information you provide to run the marketplace: account ASU email, display name, campus, listings and photos, requests and optional request messages, reports, and activity records. These include signup, listing, request and handoff events, moderation audit logs, and request-email delivery records and message snapshots. Hosting and email providers also process technical logs such as IP addresses, timestamps and delivery errors.

Do not include contact details or other private information in listing text or photos. Request messages are private to the participants; the admin dashboard does not provide a general view of request messages. We may need to access stored data to resolve support, security or deletion requests.

Service providers and sign-in

Supabase handles authentication, database records and photo storage; Vercel hosts the app; Resend delivers sign-in and request emails from no-reply@regaliapasson.com and support replies from support@regaliapasson.com. Cloudflare forwards support mail to our support inbox. These providers process the data needed for those services. We use browser storage and a session cookie to keep you signed in. We do not collect payment card details or shipping addresses, and we do not sell your personal information.

How we use it

• To create and secure your account
• To show listings and send request emails
• To help students arrange giveaways or sales by email
• To moderate abuse and operate the admin console

What others can see

Available and reserved listings and their photos are public. Lister names and emails are not shown in public listings. When you request an item, its lister receives your display name, ASU email and message. Administrators can review accounts, listings and reports to moderate the marketplace.

Retention

We keep your account data until you request deletion. You can delete your listings from My Listings at any time. To request account and associated data deletion, email support@regaliapasson.com from your registered ASU address. We will verify the request and explain any records retained for security, abuse prevention or legal obligations. Never send a sign-in code.

Deleting an item does not recall emails already delivered to another person. Previously issued photo links can remain usable for up to one hour; downloaded copies cannot be recalled. Provider logs may retain copies under their own retention policies. A restored backup must have completed deletion requests reapplied before the service reopens.

Backup retention: [maximum retention to be chosen in Checkpoint F before launch].