Privacy Policy
This notice explains how Vera Buy uses information for member registration, sign-in, lot enquiries, visit analytics and admin maintenance. It is a first-version website privacy notice. If payment, orders, logistics or more complex identity checks are added later, this policy must be updated before launch.
Last updated: July 17, 2026
1. Information we collect
Member registration information: username, email, password credentials or Google / Apple sign-in identity, member tier, account status, agreement records, marketing opt-in status and an optional WhatsApp number provided by the member. Google sign-in returns a verified email and account name. Apple sign-in returns a verified email or, if selected by the user, a private relay address. On first use of either third-party sign-in, the member still confirms a preferred name and the Vera Buy terms.
Enquiry information: the name, enquiry type, message and optional WhatsApp entered by a member, together with the verified registration email on the account. This information is used to send that enquiry email. If delivery succeeds and the account does not already have a WhatsApp number, the number from the enquiry is saved to the member profile.
Dispatch records: the Vera Buy database stores only the member account identifier, sending status, timestamps, provider message ID and a short error code for rate limiting, duplicate prevention and troubleshooting. It does not store an additional copy of the full message body.
Lot and admin materials: if you submit lot materials as an administrator or partner, these may include images, descriptions, provenance, condition, documents, location and contact notes.
Visit analytics: page views, time on page, source, device type, browser, rough country / city and masked IP segment, used for website analytics and troubleshooting.
2. How we use information
To create and maintain member accounts and decide whether member or advanced member prices can be viewed.
To respond to lot enquiries, viewing appointments, material checks, consignment enquiries and cooperation discussions.
To review lot materials in the admin area, maintain public pages and improve the website experience.
To support basic analytics, security review and service stability checks.
3. Third-party services
The website uses Supabase for authentication, database and file storage. Member accounts, lot materials, images and some admin data are stored through that service.
If you choose Google sign-in, Google processes the authorization under its own terms and returns the identity information needed by Supabase to complete sign-in. An existing Vera Buy account with the same email is linked to that account; different emails are not merged automatically.
If you choose Apple sign-in, Apple processes the authorization under its own terms and returns the identity information needed by Supabase to complete sign-in. If you choose Hide My Email, Apple provides a private relay address. Because that address differs from an existing account email, it may create a separate account and is not automatically merged with a Google or email account.
Some AI-assisted features may call external model services for draft organisation, translation or presentation assets. Outputs still require manual review.
Visit analytics may use an IP geolocation lookup service to obtain a rough country or city. This is not used for precise personal tracking.
Member enquiry emails are delivered through Resend. To complete delivery, Resend processes the recipient address, registered member email, subject, message body and necessary delivery metadata.
If you contact us through email, WhatsApp or another external tool, that platform handles your information under its own terms and privacy rules.
4. Your choices and controls
Marketing and event notifications are optional. Not opting in does not affect member registration.
You can add, update or remove WhatsApp in account settings. It is used only for enquiry replies, not for sign-in, and does not mean that the number has been verified.
If you need to update an account email, disable an account or ask how submitted materials are handled, contact us through the contact page.
Browser, email, WhatsApp and other third-party privacy settings must be managed in those services.
5. Data boundaries and security
We use information according to the current website functions, but no system can be promised to be absolutely secure.
The website currently does not process online payment, deposits, order fulfilment, logistics, customs clearance or KYC / AML review data. If those functions are added later, this policy must be updated before launch.
Please do not submit identity documents, bank cards, passwords, private keys or other unnecessary sensitive information through public messages or ordinary enquiries.
6. Contact
For privacy-related questions, contact us at celine@verabuy.cn.
If this policy is updated, the date shown on this page will apply.