Last Updated 2026-06-11

Privacy Policy

Last Updated: June 11, 2026

Bonsai Broker Privacy Policy

Bonsai Broker ("Bonsai Broker," "we," "our," or "us") is committed to protecting your privacy and maintaining the security of your personal information. This Privacy Policy explains how we collect, use, disclose, store, and protect information when you access or use the Bonsai Broker website, mobile applications, messaging services, marketplaces, and related services (collectively, the "Services").

By accessing or using our Services, you acknowledge that you have read and understood this Privacy Policy.

1. Scope

This Privacy Policy applies to all users of Bonsai Broker, including buyers, sellers, visitors, and business users located within the United States.

This Privacy Policy does not apply to third-party websites, services, payment providers, or applications that may be linked through our Services.

2. Information We Collect

We collect information directly from you, automatically through your use of the Services, and from third-party service providers.

Information You Provide

Depending on how you use Bonsai Broker, we may collect:

Account Information
Full name
Username
Email address
Phone number
Password (stored using secure hashing methods)
Profile information
Account preferences
Identity Verification Information

Where required for fraud prevention, trust and safety, legal compliance, or marketplace integrity, we may collect:

Government-issued identification
Date of birth
Verification photographs
Tax information
Business information
Marketplace Information
Listings you create
Product descriptions
Bonsai tree information
Pricing information
Purchase history
Sales history
Shipping information
Communications relating to transactions
User Content

You may upload:

Photos
Videos
Documents
Reviews
Ratings
Profile content
Marketplace listings
Customer Support Information

When you contact us, we may collect:

Communications
Support requests
Feedback
Survey responses
3. End-to-End Encrypted Messages

Bonsai Broker provides end-to-end encrypted messaging between users.

What End-to-End Encryption Means

Messages sent through our encrypted messaging system are encrypted on the sender's device and can only be decrypted by the intended recipient.

As a result:

Bonsai Broker cannot read message contents.
Bonsai Broker cannot access message text.
Bonsai Broker cannot decrypt encrypted communications.
Message content is not used for advertising purposes.
Metadata We May Collect

Although message content remains inaccessible to us, we may collect limited metadata necessary to operate the messaging service, including:

Sender account information
Recipient account information
Message timestamps
Delivery status
Device information
Abuse and security indicators

This metadata may be used for security, fraud prevention, and service operation.

4. Information Collected Automatically

When you use the Services, we may automatically collect:

Device Information
Device type
Operating system
Browser type
Device identifiers
Log Information
IP address
Login activity
Access times
Referring URLs
Pages viewed
Actions taken within the Services
Location Information

We may collect:

Approximate geographic location derived from IP address
User-provided address information
Shipping locations
Cookies and Similar Technologies

We use cookies, pixels, local storage technologies, and similar technologies to:

Authenticate users
Maintain sessions
Remember preferences
Analyze usage
Improve functionality
Prevent fraud and abuse
5. How We Use Information

We may use collected information to:

Provide and maintain the Services
Process transactions
Facilitate marketplace activities
Enable buyer and seller communications
Verify identities
Prevent fraud
Detect abuse and security threats
Improve products and features
Personalize user experiences
Respond to support requests
Enforce our Terms of Service
Comply with legal obligations
Protect users and the public
6. Legal Bases for Processing

Where applicable under privacy laws, we process information based on:

User consent
Contractual necessity
Compliance with legal obligations
Legitimate business interests
Protection of users and platform security
7. How We Share Information

We do not sell personal information to third parties.

We may share information with:

Service Providers

Including providers supporting:

Hosting services
Cloud infrastructure
Payment processing
Customer support
Security services
Email delivery
Analytics services

These providers may only process information on our behalf and according to our instructions.

Payment Processing

Payments are processed through:

Stripe

Bonsai Broker does not store full payment card numbers. Payment information is processed and secured by Stripe in accordance with its own privacy and security practices.

Marketplace Participants

When transactions occur, certain information may be shared between buyers and sellers, including:

Name
Shipping information
Transaction details

Only information necessary to complete a transaction is shared.

Legal Compliance

We may disclose information when required to:

Comply with applicable law
Respond to lawful requests
Enforce agreements
Protect rights and safety
Prevent fraud or abuse
Business Transfers

If Bonsai Broker undergoes:

Merger
Acquisition
Asset sale
Reorganization
Bankruptcy

Information may be transferred as part of the transaction.

8. Data Retention

We retain information only as long as necessary to:

Provide Services
Complete transactions
Resolve disputes
Comply with legal obligations
Enforce agreements

Retention periods vary based on the type of information and applicable legal requirements.

Even after account closure, certain records may be retained where required by law or for legitimate business purposes.

9. Data Security

We implement administrative, technical, and physical safeguards designed to protect information from:

Unauthorized access
Disclosure
Alteration
Destruction

Security measures may include:

Encryption in transit
Encryption at rest
End-to-end encrypted messaging
Access controls
Monitoring systems
Fraud detection mechanisms
Secure payment processing

No security system can guarantee absolute security.

10. Your Privacy Rights

Depending on applicable law, users may have rights to:

Access personal information
Correct inaccurate information
Delete personal information
Restrict processing
Object to processing
Request data portability
Withdraw consent where applicable

Requests may be submitted using the contact information provided below.

We may verify identity before processing requests.

11. California Privacy Rights

If you are a California resident, you may have rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), including:

Right to know
Right to access
Right to correct
Right to delete
Right to data portability
Right to limit certain uses of sensitive information
Right to non-discrimination

Bonsai Broker does not sell personal information as defined under California law.

12. Children's Privacy

The Services are not directed to children under the age of 13.

We do not knowingly collect personal information from children under 13. If we become aware that such information has been collected, we will take reasonable steps to delete it.

Parents or guardians who believe their child has provided personal information should contact us immediately.

13. User-Generated Content

Information you post publicly through:

Listings
Reviews
Ratings
Comments
Profile content

may be visible to other users and may remain accessible even after account closure where permitted by law.

Users should exercise caution when publicly sharing information.

14. Third-Party Services

The Services may contain links to third-party websites, applications, or services.

We are not responsible for:

Privacy practices
Security practices
Content
Policies

of third parties.

Users should review applicable privacy policies before interacting with third-party services.

15. United States Operations

Bonsai Broker operates within the United States.

By using the Services, you acknowledge that information may be processed and stored within the United States.

16. Changes to This Privacy Policy

We may update this Privacy Policy periodically.

When material changes occur, we will:

Update the "Last Updated" date;
Post the revised policy on the Services; and
Provide notice where required by law.

Continued use of the Services after updates constitutes acceptance of the revised Privacy Policy.

17. Contact Us

For privacy-related questions, requests, or concerns, contact:

Bonsai Broker
Pennsylvania, United States

Email: privacy@bonsai-broker.com

If you are submitting a privacy rights request, please include sufficient information for us to verify your identity and process your request.