Privacy policy
Last updated: September 20, 2026
Collected Solutions Inc. ("Collected," "we," "us," "our") runs a marketplace for watches through our website at collected.io, our web application, and our iOS app (together, the "Service").
This policy explains what we collect, why, who we share it with, and what you can do about it. It forms part of our Terms of Service.
1. What we collect
Information you give us:
Account and identity. Name, username, email address, phone number, postal addresses, country, profile photo, and bio.
Payment. Card details are collected and stored by our payment processor, Stripe. We hold a token, not your card number, and we never see or store your full card details.
ID verification. See section 2.
Your Vault. Watches you record as owned, including brand, model, reference and serial numbers, condition, photographs, purchase price, purchase date, and who you bought from.
Listings. For sellers, the watches you list and everything in the listing.
Messages and support. Messages you send other users through the Service, and anything you send us.
Deals. Records of offers, Deals, and signed sales agreements.
Information we collect automatically:
Device and app data. Device model, operating system, app version, language, time zone, and device identifiers, including the Apple advertising identifier where you have allowed it.
Usage data. Pages and screens viewed, searches, taps, features used, and when.
Session recordings. We use PostHog for product analytics and session replay. This records how you move through the Service so we can find problems and improve it. Text you enter into password and payment fields is masked and is not captured.
Log data. IP address, browser type, request times, crash reports, and referring pages.
Push notification tokens, if you allow notifications.
Cookies and similar technologies on our website. See section 7.
Email engagement. We use pixels in our emails to see whether a message was opened and whether links were clicked.
Information from other sources:
Sign-in providers. If you sign in with Google, we receive your name, email address, and profile picture. Nothing else. See section 3.
Seller websites. For sellers on the Dealer tier, we retrieve listing information from the seller's own public website, with that seller's permission. This is mostly information about watches rather than about people, though it may include the seller's business name and contact details.
Service providers. Our payment and ID verification providers tell us the outcome of what they did.
2. ID verification
We treat this separately because it involves sensitive documents.
ID verification is performed by Plaid. During ID verification, Plaid may ask you for your name, date of birth, address, phone number, a government-issued ID, and a photo of yourself. Plaid collects and processes that information directly, under Plaid's end user privacy policy.
Collected receives only the result of the ID verification. We do not receive or store your ID images, your photo, or any biometric identifier.
ID verification happens in Plaid's own interface, which opens from within our app.
If you are in Illinois, Texas, Washington, or another state with a biometric privacy law, and you have questions about how a photo taken during verification is handled, Plaid's policy is the place to look, and you can also write to us at [email protected].
3. Signing in with Google
You can sign in to Collected with your Google account, so there is no extra password to manage.
What we receive. Your name, your email address, and your profile picture. That is all.
What we do not receive. Collected does not access your Gmail, Google Calendar, Google Drive, Google Contacts, Google Photos, or anything else in your Google account. Google Sign-In is used only to create your Collected account and to confirm it is you on later sign-ins.
We do not sell or share the information Google gives us.
Your control. You can revoke Collected's access at any time from your Google Account permissions. Revoking access does not delete your Collected account. You will need another way to sign in.
4. How we use information
To run the Service: your account, your profile, your listings, your Vault, offers, messages, and Deals
To connect buyers and sellers, and to show listings to people likely to be interested
To process our fees and prevent payment fraud
To complete ID verification when a Deal calls for it
To send you service messages about your account, your offers, and your Deals
To send marketing, where you have not opted out
To feature listings and sellers in our own marketing, where the seller has agreed (see Dealer Terms)
To understand how the Service is used and to improve it
To keep the Service secure and to detect fraud, counterfeits, and abuse
To comply with the law and to protect our rights and other people's safety
We may aggregate or de-identify information and use it for any purpose, including market analysis. Aggregated data cannot identify you.
We do not sell your personal information, and we do not share it for cross-context behavioral advertising.
5. Who we share it with
Other users. Your profile, your listings, and anything you choose to show publicly, including a Vault collection you have set to public. Contact fields are shown or hidden according to the per-field setting you choose. Your identity as a buyer is not shown to a seller through a Deal until the sales agreement is countersigned.
Service providers, who process information on our instructions: hosting and cloud infrastructure, Stripe for payments, Plaid for ID verification, analytics and session replay, email delivery, customer support, and security and fraud tools.
Professional advisers, where we need legal, accounting, or insurance advice.
Authorities, where the law requires it, or where we reasonably believe it is necessary to prevent fraud or protect someone's safety.
A buyer or successor, if Collected is involved in a merger, acquisition, financing, or sale of assets. Your information would move with the business.
6. How long we keep it
We keep personal information while your account is open and for as long as we need it for the purposes in this policy.
After you close your account, we keep records of completed transactions, signed sales agreements, and fee payments for as long as tax, accounting, and legal-claim rules require, which is generally seven years. Backups are overwritten on a rolling basis.
See Account and Data Deletion for what closing your account actually does.
7. Cookies and tracking
Our website uses cookies to keep you signed in, remember your preferences, and understand how the site is used. Our app uses similar technologies.
You can control cookies in your browser. Blocking some of them will break parts of the site.
Global Privacy Control. We treat a GPC signal from your browser as a valid opt-out request under the state privacy laws that recognize it.
App tracking. On iOS, we ask before accessing the advertising identifier. You can change that answer in your device settings.
8. Your choices
Your account. You can edit most of your information in Profile and Settings.
Marketing. Unsubscribe from any marketing email, or change your settings. You will still get service messages about your account.
Push notifications. Turn them off in your device settings.
Deletion. See Account and Data Deletion.
Everything else. Email [email protected].
9. United States privacy rights
If you live in California, Colorado, Connecticut, Virginia, Texas, Oregon, Montana, or another state with a comprehensive privacy law, you have the right to:
Know what personal information we have collected, where it came from, why, and who we shared it with
Get a copy of it
Correct it
Delete it
Opt out of sale or sharing for targeted advertising, though we do neither
Not be discriminated against for exercising these rights
Appeal, if we refuse a request
Email [email protected]. We may need to confirm your identity first. An authorized agent may act for you with written permission.
California residents may also contact us at Collected Solutions Inc., 2804 Gateway Oaks Dr., Sacramento, CA 95833.
10. European Economic Area, United Kingdom, and Switzerland
Controller. Collected Solutions Inc., 2804 Gateway Oaks Dr., Sacramento, CA 95833, is the controller of your personal data. Contact: [email protected].
Legal bases. We process your data to perform our contract with you (running your account, listings, offers, and Deals); on the basis of our legitimate interests (securing the Service, preventing fraud, understanding how the Service is used, and marketing to existing customers); with your consent (optional cookies, marketing where consent is required, and access to device features); and to comply with legal obligations.
Your rights. You may request access, correction, deletion, restriction of processing, and portability of your data. You may object to processing based on legitimate interests, including profiling, and you may withdraw consent at any time without affecting processing that has already happened.
Complaints. You may complain to your national data protection authority. In the UK, that is the Information Commissioner's Office.
International transfers. Your data is transferred to and stored in the United States. Where required, we rely on the European Commission's Standard Contractual Clauses, and the UK Addendum for UK transfers. You can ask us for a copy of the safeguards in place.
Automated decisions. We do not make decisions about you by automated means that produce legal or similarly significant effects.
11. Japan
We handle personal information in accordance with the Act on the Protection of Personal Information. Your information is transferred to and stored in the United States. You may request disclosure, correction, suspension of use, or deletion of your personal information by writing to [email protected].
12. Singapore
We handle personal data in accordance with the Personal Data Protection Act. You may withdraw consent, and request access to and correction of your personal data, by writing to [email protected], which is also our data protection contact. We may need a reasonable period to respond and may charge a reasonable fee for access requests.
13. Hong Kong
We handle personal data in accordance with the Personal Data (Privacy) Ordinance. You may request access to and correction of your personal data by writing to [email protected]. We may charge a reasonable fee for complying with an access request.
14. Children
The Service is not for anyone under 18, and you must be 18 to hold an account. We do not knowingly collect personal information from children. If you believe a child has given us information, email [email protected] and we will delete it.
15. Security
We use commercially reasonable technical and organizational measures to protect personal information, including encryption in transit, access controls, and tokenized payment storage.
No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
16. Other websites
Collected does not link out to sellers' websites. The Archive, our editorial section, may link to other sites. This policy does not cover any site we link to, and we are not responsible for what they do with your information. Read their policies.
17. Changes
We may update this policy. We will post the new version here with a new date, and we will tell you about material changes through the Service or by email.