Privacy policy
Last updated: October 15, 2026
Collected Solutions Inc. ("Collected," "we," "us," "our") runs a marketplace for watches through our website at collected.io, our web application, and our iOS app (together, the "Service").
This policy explains what we collect, why, who we share it with, and what you can do about it. It forms part of our Terms of Service.
1. What we collect
Information you give us:
Account and identity. Name, username, email address, phone number, postal addresses, country, profile photo, bio, and any WhatsApp number, Instagram handle, or website you add.
Payment. Card details are collected and stored by our payment processor, Stripe. We hold a token, not your card number, and we never see or store your full card details.
ID verification. See section 2.
Your Vault. Watches you record as owned, including brand, model, reference and serial numbers, condition, photographs, purchase price, purchase date, and who you bought from.
Listings. For sellers, the watches you list and everything in the listing.
Messages and support. Messages you send other users through the Service, and anything you send us.
Deals. Records of offers, Deals, and signed sales agreements.
Dealer business and payout details. If you are a dealer, your legal business name and address, and the bank name, account holder, account number and routing number where buyers pay you. You may also upload business-entity, tax ID and insurance documents.
Information we collect automatically:
Device and app data. Device model, operating system, app version, language, time zone, and device identifiers used to deliver push notifications.
Usage data. Pages and screens viewed, searches, taps, features used, and when. When you view a profile or listing, we record the view along with your IP address and browser type. Sellers see how many views their profile and listings receive, not who viewed them.
Session recordings. On our website and web app, we use PostHog for product analytics and session replay. This records how you move through those pages so we can find problems and improve them. Text you type into form fields is masked and is not captured. Our iOS app does not use session replay.
Log data. IP address, browser type, request times, and referring pages.
Push notification tokens, if you allow notifications.
Cookies and similar technologies on our website. See section 7.
Email engagement. We use pixels in our emails to see whether a message was opened and whether links were clicked.
Information from other sources:
Sign-in providers. If you sign in with Google, we receive your name, email address, and profile picture. Nothing else. See section 3.
Seller websites. For sellers on the Dealer tier, we retrieve listing information from the seller's own public website, with that seller's permission. This is mostly information about watches rather than about people, though it may include the seller's business name and contact details.
Other users. A seller creating a Deal may give us a buyer's name and email address. A dealer may invite you by email, and may keep details of their own clients, such as contact details, addresses and purchase history, in their Collected account. For information a dealer keeps about their own clients, the dealer decides how it is used and we process it on the dealer's behalf.
Service providers. Our payment and ID verification providers tell us the outcome of what they did.
2. ID verification
We treat this separately because it involves sensitive documents.
ID verification is performed by Plaid. During ID verification, Plaid may ask you for your name, date of birth, address, phone number, a government-issued ID, and a photo of yourself. Plaid collects and processes that information directly, under Plaid's end user privacy policy.
From Plaid we receive the outcome of the verification, your verified legal name and address, your phone number (which we add to your profile if you have not given us one), the results of Plaid's identity, watchlist and risk checks, and a one-way fingerprint derived from your ID details, which we use to detect duplicate or fraudulent accounts. We do not receive or store your ID images, your photo, or any biometric identifier.
ID verification happens in Plaid's own interface, which opens from within our app.
If you are in Illinois, Texas, Washington, or another state with a biometric privacy law, and you have questions about how a photo taken during verification is handled, Plaid's policy is the place to look, and you can also write to us at [email protected].
3. Signing in with Google
You can sign in to Collected with your Google account, so there is no extra password to manage.
What we receive. Your name, your email address, and your profile picture. That is all.
What we do not receive. Collected does not access your Gmail, Google Calendar, Google Drive, Google Contacts, Google Photos, or anything else in your Google account. Google Sign-In is used only to create your Collected account and to confirm it is you on later sign-ins.
We do not sell or share the information Google gives us.
Your control. You can revoke Collected's access at any time from your Google Account permissions. Revoking access does not delete your Collected account. You will need another way to sign in.
4. How we use information
To run the Service: your account, your profile, your listings, your Vault, offers, messages, and Deals
To connect buyers and sellers, and to show listings to people likely to be interested
To process our fees and prevent payment fraud
To complete ID verification when a Deal calls for it
To send you service messages about your account, your offers, and your Deals
To send marketing, where you have not opted out
To feature listings and sellers in our own marketing, where the seller has agreed (see Dealer Terms)
To understand how the Service is used and to improve it
To keep the Service secure and to detect fraud, counterfeits, and abuse
To comply with the law and to protect our rights and other people's safety
We may aggregate or de-identify information and use it for any purpose, including market analysis. Aggregated data cannot identify you.
We do not sell your personal information, and we do not share it for cross-context behavioral advertising.
5. Who we share it with
Other users. Your profile, your listings, and anything you choose to show publicly, including any watches in your Vault that you choose to show on your profile. Contact fields are shown or hidden according to the per-field setting you choose. Your identity as a buyer is not shown to a seller through a Deal until the sales agreement is countersigned. If you are a seller who accepts wire transfers, we give your bank details and business address to the buyer, by email and in chat, so they can pay you.
Service providers, who process information on our instructions: hosting and cloud infrastructure (Amazon Web Services), Stripe for payments, Plaid for ID verification, PostHog for analytics and session replay, SendGrid for email, OneSignal for push notifications, and ImageKit for image delivery.
Professional advisers, where we need legal, accounting, or insurance advice.
Authorities, where the law requires it, or where we reasonably believe it is necessary to prevent fraud or protect someone's safety.
A buyer or successor, if Collected is involved in a merger, acquisition, financing, or sale of assets. Your information would move with the business.
6. How long we keep it
We keep personal information while your account is open and for as long as we need it for the purposes in this policy.
After you close your account, we keep records of completed transactions, signed sales agreements, and fee payments for as long as tax, accounting, and legal-claim rules require. Backups are overwritten on a rolling basis.
See Account and Data Deletion for what closing your account actually does.
7. Cookies and tracking
Our website uses cookies to keep you signed in, remember your preferences, and understand how the site is used. Our app uses similar technologies.
You can control cookies in your browser. Blocking some of them will break parts of the site.
App tracking. Our iOS app does not access your device's advertising identifier and does not track you across apps or websites owned by other companies.
8. Your choices
Your account. You can edit most of your information in Profile and Settings.
Marketing. Use the unsubscribe link in any marketing email. You will still get service messages about your account.
Push notifications. Turn them off in your device settings, or choose which ones you receive in Settings > Notifications.
Deletion. See Account and Data Deletion.
Everything else. Email [email protected].
9. United States privacy rights
If you live in California, Colorado, Connecticut, Virginia, Texas, Oregon, Montana, or another state with a comprehensive privacy law, you have the right to:
Know what personal information we have collected, where it came from, why, and who we shared it with
Get a copy of it
Correct it
Delete it
Opt out of sale or sharing for targeted advertising, though we do neither
Not be discriminated against for exercising these rights
Appeal, if we refuse a request
We collect limited sensitive personal information: government ID details used for identity verification, handled as described in section 2. We use it only to verify identity and prevent fraud, and we do not use or disclose it for any other purpose.
Email [email protected]. We may need to confirm your identity first. An authorized agent may act for you with written permission.
California residents may also contact us at Collected Solutions Inc., 2804 Gateway Oaks Dr., Sacramento, CA 95833.
10. European Economic Area, United Kingdom, and Switzerland
Controller. Collected Solutions Inc., 2804 Gateway Oaks Dr., Sacramento, CA 95833, is the controller of your personal data. Contact: [email protected].
Legal bases. We process your data to perform our contract with you (running your account, listings, offers, and Deals); on the basis of our legitimate interests (securing the Service, preventing fraud, understanding how the Service is used, and marketing to existing customers); with your consent (optional cookies and access to device features); and to comply with legal obligations.
Your rights. You may request access, correction, deletion, restriction of processing, and portability of your data. You may object to processing based on legitimate interests, including profiling, and you may withdraw consent at any time without affecting processing that has already happened.
Complaints. You may complain to your national data protection authority. In the UK, that is the Information Commissioner's Office.
International transfers. Your data is transferred to and stored in the United States. Where required, we rely on the European Commission's Standard Contractual Clauses, and the UK Addendum for UK transfers. You can ask us for a copy of the safeguards in place.
Automated decisions. If identity verification fails, which includes Plaid's automated watchlist and risk checks, you cannot create Deals or Collected Links until our team reviews it. If a seller's subscription payment fails, their listings are hidden automatically. You can ask [email protected] for a human review of either decision.
11. Japan
We handle personal information in accordance with the Act on the Protection of Personal Information. Your information is transferred to and stored in the United States. You may request disclosure, correction, suspension of use, or deletion of your personal information by writing to [email protected].
12. Singapore
We handle personal data in accordance with the Personal Data Protection Act. You may withdraw consent, and request access to and correction of your personal data, by writing to [email protected], which is also our data protection contact. We may need a reasonable period to respond and may charge a reasonable fee for access requests.
13. Hong Kong
We handle personal data in accordance with the Personal Data (Privacy) Ordinance. You may request access to and correction of your personal data by writing to [email protected]. We may charge a reasonable fee for complying with an access request.
14. Children
The Service is not for anyone under 18, and you must be 18 to hold an account. We do not knowingly collect personal information from children. If you believe a child has given us information, email [email protected] and we will delete it.
15. Security
We use commercially reasonable technical and organizational measures to protect personal information, including encryption in transit, access controls, and tokenized payment storage.
No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
16. Other websites
Sellers may show a website, Instagram or WhatsApp contact on their profile, and we link to it. The Archive, our editorial section, may link to other sites. This policy does not cover any site we link to, and we are not responsible for what they do with your information. Read their policies.
17. Changes
We may update this policy. We will post the new version here with a new date, and we will tell you about material changes through the Service or by email.