Woha Privacy Policy

About Woha

Woha is a local marketplace for people in and around U.S. college communities. The Services help users discover, list, buy, sell, negotiate for, and arrange the pickup or seller-delivery of secondhand goods.

Woha does not itself own most items listed by users, and it does not provide Woha-operated delivery in the current marketplace experience. Users may complete transactions through online payment features made available by Woha or through offline payment methods arranged directly between buyers and sellers.

Scope of this privacy policy

This Privacy Policy explains how Woha Inc. collects, uses, discloses, stores, and protects personal information when you access or use the Woha website, mobile applications, marketplace, messaging, offer, order, payment, pickup, seller-delivery, support, and related services (collectively, the “Services”).

This Privacy Policy does not govern the independent privacy practices of sellers, buyers, payment providers, identity providers, mapping providers, banks, or other third parties. Those parties may process information under their own policies.

Information we collect

The information we collect depends on how you use Woha, whether you act as a buyer or seller, and which device permissions or optional features you choose to use.

3.1 Account and profile information

When you create or use a Woha account, we may collect:

• Name, display name, username, profile photograph, and account identifier;
• Email address, telephone number, and authentication information;
• School, city, neighborhood, or general service area;
• Language, notification, and account preferences;
• Buyer and seller activity, completed transaction counts, ratings, and account status; and
• Information associated with the login method you choose.

We use this information to create and secure your account, support local discovery, display appropriate profile information, and communicate with you.

3.2 Third-party sign-in

If you choose Sign in with Apple, Google Sign-In, or another identity provider, Woha receives the information that you authorize that provider to share, which may include your name, email address, profile image, and a provider-specific account identifier.

Woha does not receive your password for the third-party account and does not access the contents of unrelated services such as your email inbox, cloud drive, calendar, or contacts unless a future feature clearly requests additional permission and you expressly authorize it.

3.3 Listings, profile content, and other user content

When you list an item or otherwise contribute content, we may collect:

• Item titles, descriptions, categories, prices, condition, defects, dimensions, and other listing details;
• Photographs and other media uploaded for a listing, report, dispute, or support request;
• Pickup area, availability, seller-delivery range, delivery fee, and delivery notes;
• Saved items, searches, filters, favorites, reviews, ratings, reports, and feedback; and
• Any other content you choose to submit.

Public listing and profile information may be visible to other users. Do not include a full home address, government identifier, financial information, or other unnecessary sensitive information in a public listing or profile.

3.4 Messages, offers, and transaction communications

Woha may collect and retain messages, image messages, structured offers, counteroffers, acceptance records, delivery arrangements, and other communications made through the Services.

We use transaction communications to provide messaging and negotiation features, create a record of the agreed price and terms, prevent fraud, investigate reports, resolve transaction issues, and enforce our policies. Final transaction terms are determined by the structured offer and order records, not by informal chat alone.

3.5 Order, pickup, and seller-delivery information

When an order is created, we may collect or generate:

• Order identifiers, item information, buyer and seller identifiers, agreed price, and order status;
• Selected payment method and delivery method;
• Scheduled pickup or delivery time, change requests, completion confirmations, and cancellation reasons;
• Pickup address or delivery address when required to complete the transaction;
• Distance or delivery-range calculation results; and
• Records of late pickup, late delivery, failed handoff, confirmation, refund, dispute, or other order events.

Before an order is created, Woha is designed to display only an approximate item or pickup area. After an order is created, the parties may receive the address or contact information reasonably necessary to complete the selected pickup or seller-delivery method.

3.6 Payment and seller onboarding information

Online payments and seller payouts may be processed by Stripe or another payment provider. Depending on the feature and payment-provider configuration, Woha may receive:

• Payment intent, charge, refund, transfer, payout, and transaction identifiers;
• Payment status, amount, currency, fees, refund amount, dispute status, and risk signals;
• Limited payment-method information, such as card brand and last four digits;
• Seller connected-account identifier, onboarding status, verification status, capability status, and payout eligibility; and
• Tax or identity-verification status that the payment provider makes available to the platform.

Payment providers generally collect payment-card, bank-account, identity-verification, and tax information directly. Woha does not intend to store complete card numbers, bank-account numbers, or routing numbers when those details are collected and hosted by the payment provider.

For offline payment orders, Woha may record that the parties selected offline payment and may record the amount and method they report, but Woha does not collect or hold the offline funds.

3.7 Location and address information

With your permission or when you provide an address, Woha may process precise or approximate location information to show nearby listings, determine the relevant local marketplace, display an approximate item area, validate whether a buyer address is within a seller’s delivery range, and support pickup or delivery.

You may disable device location permission in your device settings. Some nearby-listing or address-based features may not work properly after permission is disabled. Woha does not collect continuous background location unless a feature clearly explains that collection and you separately enable it.

3.8 Device, usage, and technical information

When you use the Services, we may automatically collect information such as:

• Internet Protocol address, device type, device identifiers, browser type, operating system, and app version;
• Language, time-zone, and approximate location derived from IP address;
• Pages, listings, searches, buttons, and features viewed or used;
• Dates and times of access, referring pages, session information, and notification interactions;
• Crash reports, performance data, diagnostic information, and security logs; and
• Information used to detect spam, abuse, fraud, account compromise, or prohibited activity.

3.9 Cookies and similar technologies

Woha may use cookies, local storage, software development kits, and similar technologies to keep users signed in, remember preferences, maintain security, measure performance, understand product use, and improve the Services.

Where required by law, we will request consent before using non-essential analytics or advertising technologies. Browser and device settings may allow you to manage certain technologies, but disabling them can affect Service functionality.

3.10 Support, reports, and dispute materials

When you contact support, report a listing or user, request a refund, or ask Woha to review a transaction issue, we may collect your contact information, the content of your request, order and listing details, messages, photographs, screenshots, payment evidence, delivery evidence, and other materials you submit.

How we use personal information

Woha may use personal information to:

• Create, maintain, authenticate, and secure accounts;
• Provide listing, search, filtering, favorites, messaging, structured offer, order, payment, pickup, seller-delivery, notification, rating, reporting, refund, and support features;
• Display listings and appropriate profile information to other users;
• Match users with nearby inventory and validate delivery ranges;
• Process or facilitate online payments, seller onboarding, refunds, transfers, and payouts through payment providers;
• Record offline payment selections and transaction status without holding the offline funds;
• Detect prohibited items, fraud, scams, account compromise, unsafe conduct, abuse, and policy violations;
• Investigate reports, transaction issues, payment disputes, chargebacks, and support requests;
• Send transactional, security, account, order, payment, delivery, and policy communications;
• Analyze product use, troubleshoot problems, develop features, and improve performance;
• Comply with law, respond to lawful requests, maintain records, and establish, exercise, or defend legal claims; and
• Protect the rights, property, safety, and integrity of users, Woha, payment providers, and others.

Where applicable, we process personal information based on performance of our agreement with you, your consent, compliance with legal obligations, protection of safety and vital interests, or our legitimate interests in operating, securing, and improving the Services.

How we disclose personal information

We may disclose personal information in the following circumstances.

5.1 Other users

We disclose public listing and profile information to marketplace users. When users communicate or create an order, we disclose information reasonably necessary for the parties to evaluate and complete the transaction. Depending on the delivery method, this may include profile information, transaction history summaries, pickup address, delivery address, contact details, scheduled time, and order status.

Users who receive information through Woha may use it only for the applicable transaction, safety, support, or legal purpose and must not use it for unsolicited marketing, harassment, discrimination, or unrelated data collection.

5.2 Payment and identity providers

We disclose information to payment providers, banks, identity-verification providers, and fraud-prevention providers as needed to process payments, create or manage connected accounts, verify seller eligibility, issue refunds, route funds, handle chargebacks or disputes, meet tax and regulatory requirements, and prevent financial crime.

5.3 Service providers

We may disclose information to vendors that help us provide cloud hosting, databases, authentication, mapping and address services, notifications, email, analytics, customer support, content moderation, cybersecurity, error monitoring, and professional services. They may process information only for the services they provide to Woha and subject to appropriate obligations.

5.4 At your direction

We disclose information when you direct us to do so, such as when you share a listing, open a mapping application, authorize a third-party sign-in, provide information to a buyer or seller, or request that information be sent to another person or service.

5.5 Legal, safety, and policy enforcement

We may disclose information when we reasonably believe disclosure is necessary to comply with law or legal process; respond to governmental or regulatory requests; prevent or investigate fraud, abuse, prohibited items, threats, or security incidents; enforce our agreements; protect users or the public; or establish, exercise, or defend legal claims.

5.6 Business transactions

Information may be disclosed as part of a financing, merger, acquisition, reorganization, bankruptcy, sale of assets, or similar corporate transaction, subject to applicable law and appropriate confidentiality protections.

5.7 Aggregated or de-identified information

We may use and disclose information that has been aggregated or de-identified so that it cannot reasonably be linked to an identifiable person. We do not attempt to re-identify information that we maintain as de-identified except as permitted by law to test our de-identification processes.

Automated and AI-assisted features

Woha may use automated or AI-assisted tools to support features such as listing suggestions, category or search assistance, recommendations, translation, customer support, fraud detection, prohibited-item detection, and content moderation.

Information submitted to these features may be processed by Woha and contracted technology providers acting on our behalf. Automated results may be inaccurate or incomplete and may be reviewed, corrected, or overridden by Woha or users. Woha does not use automated tools to make decisions that produce legal or similarly significant effects about a user without providing any notice or rights required by applicable law.

Sale, sharing, and advertising

Woha does not sell personal information for money.

Woha does not share personal information for cross-context behavioral advertising and does not use payment, transaction, message, or precise-location information for targeted advertising.

If these practices materially change, we will update this Privacy Policy and provide any notice, consent, or opt-out mechanism required by law before implementing the change.

Data retention

We retain personal information only for as long as reasonably necessary to provide the Services, maintain accounts and transaction history, complete payments and payouts, resolve transaction issues, prevent fraud, maintain security, enforce agreements, and meet legal, tax, accounting, and regulatory obligations.

Retention periods vary by data type and context. For example, public listings may be removed or hidden after deletion or sale, while order, payment, refund, report, security, and legal records may be retained longer. When information is no longer needed, we delete, anonymize, or securely isolate it, subject to backup cycles and legal requirements.

Data security

Woha uses reasonable administrative, technical, and organizational safeguards designed to protect personal information. These safeguards may include encryption in transit, access controls, authentication, logging, monitoring, secure development practices, vendor reviews, and incident-response procedures.

No electronic system is completely secure. We cannot guarantee that unauthorized access, loss, misuse, or disclosure will never occur. You are responsible for using a strong password, protecting your device, and promptly reporting suspected account compromise.

Your choices and privacy rights

Depending on your location and applicable law, you may have the right to request access, correction, deletion, or portability of personal information; object to or restrict certain processing; withdraw consent; opt out of certain data uses; appeal a privacy-request decision; or complain to a privacy authority.

You may also update certain account information, manage notification permissions, disable device location, manage cookies, disconnect third-party sign-in, or request account deletion. We may need to verify your identity and may retain information when required for transactions, safety, fraud prevention, legal compliance, or the rights of others.

To submit a privacy request, email support@woha.app. Authorized agents may submit requests where permitted by law, subject to verification.

Additional California disclosures

California residents may have rights under the California Consumer Privacy Act, as amended, when that law applies to Woha. These rights may include rights to know, access, correct, and delete personal information; to receive information about categories of collection, sources, purposes, and disclosures; to opt out of sale or sharing; to limit certain uses of sensitive personal information; and to receive non-discriminatory treatment for exercising rights.

Woha may process categories of personal information described in this Privacy Policy, including identifiers, account and profile information, commercial and transaction information, internet or device activity, approximate or precise geolocation when enabled, user content and communications, and inferences used to support marketplace relevance or safety. We collect these categories from you, your device, other users, payment or identity providers, and service providers, and use and disclose them for the business and service-provider purposes described above.

Woha does not sell personal information or share it for cross-context behavioral advertising. We use sensitive personal information only as reasonably necessary to provide requested services, process payments, complete pickup or delivery, maintain security, prevent fraud, and comply with law.

International data transfers

Woha is operated from the United States. Your information may be processed in the United States and other countries where our service providers operate. These countries may have data-protection laws different from those in your jurisdiction. Where required, we use appropriate safeguards for international transfers.

Children’s privacy

Woha is intended for users who are at least 18 years old and is not directed to children.

We do not knowingly collect personal information from children under 13. If we learn that we collected personal information from a child in violation of applicable law, we will take reasonable steps to delete it. A parent or guardian may contact support@woha.app.

Third-party services and links

Woha may integrate with or link to payment processors, identity providers, mapping applications, banks, app stores, and other third-party services. We do not control their privacy, security, availability, or business practices. Review their policies before providing information to them.

Changes to this privacy policy

We may update this Privacy Policy to reflect changes in features, data practices, law, technology, or security requirements. We will update the “Last updated” date. Where required, we will provide additional notice or request consent before materially changing how we use previously collected information.

Contact us

For privacy questions, requests, or concerns, contact:

Woha Inc.
A Delaware corporation
Email: support@woha.app
Website: woha.app