Privacy Policy

1. Introduction

Invictus Bids ("we", "our", or "us") is committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, and protect your data when you use the Invictus Bids mobile app or website.

2. Information We Collect

• Phone number — used for account creation and login.
• PIN — stored as a one-way cryptographic hash. We cannot recover your PIN.
• Email address — optional, provided by you in your profile.
• Location — optional, provided by auctioneers to help bidders find items.
• Bid history — records of bids you place, linked to your account.
• Device token — used to send push notifications about your auctions.

3. How We Use Your Information

• To create and manage your account.
• To process bids and auction transactions.
• To send push notifications about outbid events and auction wins.
• To display winner contact details to auctioneers for item collection.
• To improve platform performance and prevent abuse.

4. Data Sharing

We do not sell your personal data. We share limited data only where necessary:

• Auctioneers — when you win an auction, the auctioneer receives your phone number to arrange collection.
• Supabase — our database and authentication infrastructure provider. Data is stored securely in their cloud.
• Firebase (Google) — used for push notification delivery only.

5. Data Security

Your PIN is hashed using SHA-256 and never stored in plain text. All data is transmitted over HTTPS. We use row-level security policies on our database to prevent unauthorised access between accounts.

6. Data Retention

Your account data is retained for as long as your account is active. Bid history is retained to maintain accurate auction records. You may request deletion of your account and associated data by contacting us.

7. Your Rights

You have the right to access, correct, or request deletion of your personal data. To exercise these rights, contact us at invictusmobility@gmail.com.

8. Children's Privacy

Invictus Bids is not intended for users under the age of 18. We do not knowingly collect data from minors.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date. Continued use of the platform after changes constitutes acceptance of the new policy.

10. Contact

For any privacy-related questions, contact us at invictusmobility@gmail.com.