Last Updated: February 2026
Outpost Exchange ("we," "us," or "our") operates a contract-gated platform connecting contractors with customers for structured local work and equipment exchange agreements. This Privacy Policy explains how we collect, use, share, and protect your personal information when you use the Outpost Exchange platform and related services (the "Service").
1. Information We Collect
Account Information
When you create an account, we collect:
- Phone number (SMS verified, serving as your primary identity anchor)
- Legal name
- Email address
- Password (stored as a secure bcrypt hash; we never store plaintext passwords)
- Display name
- Business name (optional)
- Business address (optional)
- Profile information such as bio, trade specialties, and service area
Identity Verification Data
To maintain the integrity and security of the platform, we collect:
- Phone number verification status
- Device fingerprint (for fraud prevention purposes)
Location Data
With your permission, we collect your approximate location to facilitate proximity-based listing matching and connect you with nearby contractors and customers. We also collect your designated service area radius to ensure relevant listing visibility. Location data is used solely within the Outpost Exchange platform.
Listing and Contract Data
We collect information about the listings you create, including descriptions, photos, categories, and condition details. We also store contract records, including contracts entered, contract terms, scope of work, materials, timelines, and payment schedules.
Message Content
In-app messages exchanged between users are stored on our servers. Message content may be analyzed by automated systems, including AI, to detect and prevent the sharing of contact information before contract creation. This monitoring is conducted to protect user privacy and uphold the integrity of the contract-gated exchange model.
Analytics Events
We collect anonymized analytics events related to your use of the Service, including feature usage, screen views, and interaction patterns. This data helps us understand how the platform is used and identify areas for improvement.
2. How We Use Information
We use the information we collect for the following purposes:
- Facilitate contract creation between contractors and customers
- Verify user identity via phone number SMS verification
- Gate contact information until a contract is fully created to protect user privacy
- Power AI-assisted listing creation and contract scope definition
- Process facilitation fees via Stripe (2.5% paid by contractor per signed contract)
- Monitor in-app messages for contact information circumvention attempts
- Prevent fraud using device fingerprint and behavioral analysis
- Send notifications including account verification, contract updates, and dispute alerts
- Analyze usage patterns to improve the Service and develop new features
3. Information Sharing
We do not sell, rent, or trade your personal information to third parties for marketing purposes. We share information only in the following limited circumstances:
- Contract Counterparties: Upon contract creation (both parties sign and the facilitation fee is paid by the contractor), your legal name, phone number, and business address are shared with the other contracting party. This disclosure is the core function of the Outpost Exchange platform and is necessary to facilitate the agreed-upon work or equipment exchange.
- Stripe: Payment processing for contract creation facilitation fees is handled through Stripe. Stripe processes payment information in accordance with their privacy policy.
- OpenAI: When you use AI-powered features (listing creation, contract scope analysis, and message monitoring for contact information circumvention), your listing content, contract details, and message content may be processed through OpenAI's API. No personal identifying information (name, email, phone number) is sent to OpenAI.
- SMTP Provider: Your email address is shared with our email delivery service for sending verification emails, password resets, and notifications.
- Legal Requirements: We may disclose your information if required by law, regulation, legal process, or governmental request.
4. Data Storage and Security
We implement industry-standard security measures to protect your personal information:
- All data is stored in a PostgreSQL database with appropriate access controls
- Passwords are hashed using bcrypt before storage; we never store plaintext passwords
- Session authentication uses secure tokens with expiration policies
- All data transmitted between your device and our servers is encrypted using HTTPS
- Access to production data is restricted to authorized personnel only
- Legal names and business addresses are stored securely with appropriate encryption
- Phone numbers are verified via SMS and stored as identity anchors
- Contact information is technically restricted from display until contract creation criteria are met
While we strive to protect your information using commercially reasonable measures, no method of transmission or electronic storage is 100% secure. We cannot guarantee absolute security.
5. Cookies and Tracking
Outpost Exchange uses minimal tracking mechanisms:
- Session tokens are stored on your device to maintain your authenticated session
- Analytics events are tracked to measure feature usage and identify service improvements
- We do not use third-party advertising cookies or tracking pixels
- We do not participate in cross-site tracking or behavioral advertising networks
6. Contact Information Privacy
Outpost Exchange employs a contract-gated model to protect your contact information:
- Your phone number, email address, legal name, and business address are considered private contact information
- This information is not visible to other users until a contract is fully created
- A fully created contract requires both parties to sign and the facilitation fee to be paid
- Upon contract creation, contact information is shared between the two contracting parties only
- Contact information is never publicly displayed, searchable, or indexable by search engines
- AI monitoring may analyze in-app messages to detect and flag attempts to share contact information before contract creation
7. Location Data
Location data is a core component of the Outpost Exchange experience, enabling proximity-based listing matching to help you find contractors, customers, and opportunities near you. Regarding your location data:
- Location is collected only with your explicit permission
- Location data is used solely for matching you with nearby listings and users
- Your designated service area radius is used to determine listing visibility and relevance
- Your precise location is not shared with other users; only approximate distance is displayed
- Location data is not shared with third parties
- You can update or remove your location at any time through the app settings
8. Email Communications
We may send you the following types of email communications:
- Account verification emails upon registration
- Password reset emails when requested
- Contract notifications (contract updates, dispute alerts)
- Service announcements and important account notices
You can manage your notification preferences in the app settings. Transactional emails related to account security (verification, password resets) cannot be opted out of while your account is active.
9. Third-Party Services
Outpost Exchange integrates with the following third-party services. Each service has its own privacy policy governing how it handles your data:
10. Children's Privacy
Outpost Exchange is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have inadvertently collected data from a user under 18, we will take prompt steps to delete that information and terminate the associated account.
11. Data Retention
We retain your personal information for as long as your account remains active or as needed to provide the Service. Upon account deletion:
- Your personal data (legal name, email, phone number, bio, profile photo) is permanently removed
- Your display name is anonymized
- Some contract records and transaction history may be retained in anonymized form for legal compliance and dispute resolution purposes
You may request deletion of your account and associated data at any time through the app settings or by contacting us directly.
12. Your Rights
You have the following rights regarding your personal data:
- Access: You can access your personal information through your account profile and settings
- Correction: You can update and correct your personal information at any time through the app
- Deletion: You can request deletion of your account and personal data
- Export: You can request a copy of your personal data in a portable format
- Location Control: You can update or remove your location data at any time
- Notification Preferences: You can manage your email and notification preferences in the app settings
- Contact Information Control: You can view what contact information will be shared upon contract creation
To exercise any of these rights, contact us at privacy@outpostexchange.com or use the relevant features within the app.
13. Changes to Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When material changes are made, we will notify you through the app or via email. Your continued use of the Service after changes are posted constitutes your acceptance of the revised policy.
We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.
14. Contact
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:
privacy@outpostexchange.com
Back to Outpost Exchange