Privacy Policy

We collect information directly from you, automatically through your use of the Services, and from third parties such as our service providers, business partners, enrichment vendors, and public sources.

• Provide, operate, maintain, and improve the Services.
• Process and fulfill orders, quotes, purchases of surplus equipment, and related requests.
• Authenticate users and maintain the security, integrity, and availability of the Services.
• Detect, investigate, and prevent fraud, abuse, and other harmful or unlawful activity.
• Conduct export-control and trade-compliance screening (see Export Controls & Compliance Screening).
• Analyze usage to improve performance, reliability, and user experience.
• Communicate with you about your account, transactions, service updates, and—where permitted—marketing.
• Comply with legal, tax, accounting, and regulatory obligations, and enforce our agreements.

• Performance of a contract — to provide the Services and process your transactions.
• Legitimate interests — for security, fraud prevention, product improvement, and direct B2B communications, balanced against your rights.
• Consent — for certain marketing communications and non-essential cookies (you may withdraw consent at any time).
• Legal obligation — for tax, accounting, export-control, and other compliance requirements.

Because we sell equipment internationally, we are subject to United States export control and trade sanctions laws. To comply, we may collect and process identity, company, destination, end-use, and end-user information and screen orders and parties against U.S. and other applicable government restricted- and denied-party lists. We may decline, delay, or cancel transactions where required by these laws.

We retain personal information only for as long as necessary to fulfill the purposes described in this Policy, including to provide the Services, comply with legal, tax, accounting, export-control, and reporting obligations, resolve disputes, and enforce our agreements. Retention periods vary based on the type of information and the context in which it was collected. When information is no longer needed, we delete, anonymize, or securely store it.

We maintain administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, loss, misuse, and alteration. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. Please keep your account credentials confidential and notify us promptly of any suspected unauthorized use.

We are based in the United States and may process and store information in the United States and other countries that may have different data protection laws than your country. Where we transfer personal data internationally—including from the EEA, UK, or Switzerland—we use appropriate safeguards, such as the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, or other lawful transfer mechanisms.

The Services may contain links to third-party websites, products, or services that we do not operate or control, including cbisurplus.com. This Policy does not apply to those third parties, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third party you interact with.

We do not use your personal information to make decisions that produce legal or similarly significant effects about you based solely on automated processing.

We may update this Policy from time to time. The "Last updated" date at the top reflects the most recent changes. We will post the updated Policy here and, where appropriate or required, notify you by email or within the Services. Your continued use of the Services after an update takes effect constitutes acceptance of the revised Policy.