Legal
Privacy Policy
General Statement
Protecting the information entrusted to us is a priority for Peer Junction. This Privacy Policy explains how Peer Junction ("Peer Junction," "we," "us," or "our") collects, uses, discloses, retains, and safeguards personally identifiable information and other information in connection with our website located at peerjunction.com, our community server hosted on Discord, and any related websites, features, tools, communications, and content we make available, now or in the future (collectively, the "Services"). It also describes the choices and rights available to you and how you can contact us with any questions or concerns.
Your access to or use of the Services signifies your acceptance of this Privacy Policy. Capitalized terms not defined here have the meanings given in our Terms of Service.
Personally Identifiable Information We Collect
For purposes of this Privacy Policy, "personally identifiable information" or "personal information" means information that identifies, relates to, describes, or could reasonably be linked, directly or indirectly, to a particular individual. Depending on how you interact with the Services, we may collect the following categories of personally identifiable information:
- Identifiers, such as usernames, display names, nicknames, user IDs, account identifiers, email addresses, and online identifiers.
- Account and profile information, such as account creation dates, avatars, roles, membership status, and other information associated with your accounts on third-party platforms.
- Communications and User Content, such as messages, posts, attachments, media, links, reactions, and other Content you submit, as well as the contents of any correspondence with us, including support requests, reports, applications, and verification submissions.
- Professional information, such as skills, portfolios, work samples, links to profiles or websites, and other information you choose to provide about your work or services.
- Device and technical information, such as Internet Protocol (IP) address, browser type and version, operating system, device type, referring URLs, language preferences, and similar information.
- Usage information, such as pages viewed, features used, actions taken, timestamps, and the dates and times of your interactions with the Services, including membership events and changes to names or roles.
- Approximate location information, such as a general geographic location derived from IP address.
- Moderation and safety information, such as records of reports, warnings, enforcement actions, and the information relevant to them.
- Transaction information, if we offer paid features in the future, such as records of purchases and billing details, which may be processed by third-party payment processors on our behalf.
- Inferences drawn from any of the above, such as assessments of whether activity may be fraudulent, automated, or in violation of our Terms.
If you choose not to provide certain personally identifiable information, you may still be able to access parts of the Services, but you may be unable to use certain features, such as verification, support requests, or applications.
Other Information We Collect
We may also collect non-personally identifiable information, which is information that does not, on its own, identify a specific individual. This may include aggregate or statistical information such as pages visited, time spent on the Services, clicks, scrolls, referring websites, events, and general geographic region. Where we combine non-personally identifiable information with personally identifiable information, we treat the combined information as personally identifiable information.
Sources of Information
Information you provide
We collect information you provide directly, such as when you post Content, submit a form or application, request verification, open a support request, submit a report, communicate with Staff, or contact us by email.
Information collected automatically
We and our service providers collect certain information automatically when you access or use the Services, including through server logs and the technologies described in the Cookies and Similar Technologies section below.
Information from third parties
We receive information from third-party platforms and services that you use to access or interact with the Services, including Discord, in accordance with your settings and their policies. We may also receive information from service providers, from other users (for example, when a user reports Content or conduct), and from publicly available sources, including lists used to identify malicious links and known abusive activity.
How We Use Information
We may use personal information for the following purposes:
- To provide, operate, maintain, and improve the Services;
- To create and administer memberships, roles, and access to features;
- To review applications and verification requests;
- To respond to inquiries, support requests, and reports, and to communicate with you;
- To moderate the Services and enforce our Terms of Service and Community Rules;
- To detect, investigate, prevent, and respond to fraud, scams, spam, impersonation, security incidents, ban evasion, and other harmful or unlawful activity;
- To keep records of activity for safety, security, and audit purposes;
- To analyze usage and trends and to develop new features and services;
- To send announcements and updates, which you may choose not to receive where applicable;
- To comply with legal obligations, respond to lawful requests, and establish, exercise, or defend legal claims; and
- For any other purpose disclosed to you at the time of collection or with your consent.
We may use automated tools to assist with some of these purposes, such as identifying malicious links or accounts that may be impersonating others.
We may also create aggregated, de-identified, or anonymized information, which we may use and disclose for any lawful purpose.
Sign-in records
Each time you sign in to the marketplace, we record the date and time, how you signed in, your IP address, the approximate location derived from it, your browser and device type, and a random browser identifier stored in a cookie. We use these records to keep accounts secure, to spot one person running several accounts for scams or to evade a ban, and to confirm that paid sellers are located where our seller rules require (currently the United States).
Sign-in records are never shown publicly or to other members. Only a small number of senior staff can view them, when reviewing a safety concern, a report, or an appeal. Two accounts that appear related are a reason for a person to look closer, never an automatic ban, because households, schools, and mobile networks often share addresses. Sign-in records are stored encrypted and are deleted 12 months after they are made.
Legal Bases for Processing
If you are located in the European Economic Area, the United Kingdom, or another jurisdiction that requires a legal basis for processing, we rely on the following: our legitimate interests in operating, securing, and improving the Services and protecting our users; performance of our agreement with you under the Terms of Service; compliance with legal obligations; and your consent, where required, which you may withdraw at any time.
How We Disclose Information
We may disclose personal information in the following circumstances:
- Service providers. With vendors and service providers that perform services on our behalf, such as hosting, infrastructure, email, data storage, security, and communications providers, subject to appropriate confidentiality obligations.
- Platforms you use. With third-party platforms through which you access the Services, such as Discord, as necessary to operate the Services.
- Other users. Content you post in shared areas of the Services, and information such as your username and roles, is visible to other users.
- Legal and safety. When we believe in good faith that disclosure is necessary to comply with law, legal process, or a governmental request; to enforce our Terms; to protect the rights, property, or safety of Peer Junction, our users, or others; or to detect, prevent, or address fraud, security, or technical issues.
- Business transfers. In connection with, or during negotiations of, any merger, acquisition, financing, reorganization, sale of assets, or similar transaction, or in the event of insolvency.
- With your consent. With your consent or at your direction.
We do not sell personal information for monetary consideration, and we do not share personal information for cross-context behavioral advertising.
Methods to Collect Information
We and our service providers may use the following technologies to collect information, operate and secure the Services, remember preferences, and understand how the Services are used:
- Cookies. A cookie is a small text file stored on your device. "Session" cookies last only for your browsing session and are deleted when you close your browser. "Persistent" cookies remain on your device until they expire or are deleted.
- Local storage. Similar technologies that store information in your browser.
- Session logs. Records generated when you visit the Services, which may include your Internet Protocol (IP) address, referring URL, requested pages, and access timestamps.
- Web beacons and pixel tags. Small electronic images embedded in web pages or emails that help determine whether a page was viewed or an email was opened.
- Analytics tools. Third-party tools that may be used to measure and analyze use of the Services on an aggregate basis.
You can usually adjust your browser settings to block or delete cookies or to notify you before they are set. Blocking cookies may cause some parts of the Services to stop working as intended.
Online tracking information
Some web browsers offer a "Do Not Track" ("DNT") setting. No uniform industry standard currently defines how websites should respond to DNT signals, and the Services do not respond to them at this time. Where required by law, we will honor recognized opt-out preference signals, such as Global Privacy Control.
Our Discord Bots
Two bots run in the Peer Junction Discord server: one helps us moderate the server and run verification, and one runs support tickets. They use Discord's Server Members and Message Content access only for those purposes. We do not sell this information, share it with advertisers, or use it to train machine learning or AI models.
What the bots keep:
- Moderation records: your Discord user ID, past usernames and display names, and when you joined and left the server. Only our leadership can see them. We keep them with no set end date, to stop banned members from returning on other accounts.
- Activity: your user ID and the time of your last activity, kept for 30 days.
- Verification: your answers if you apply to be Verified, and the decision.
- Reports: the IDs of a reported message and the people involved, plus any note the reporter adds.
- Support tickets: your user ID, the ticket type, when it opened and closed, which staff helped, the closing reason, and your rating. Deleted after one year.
Messages are checked for scam links, but the bots do not store message text. Copies of edited or deleted messages, and ticket transcripts, are kept in private staff channels inside Discord. Support ticket channels are not included in message logs.
Bot data is encrypted and stored on our own server. To ask us to delete your bot data, contact us using the details at the end of this policy. We keep moderation records even after such a request, because they protect the server from banned members returning on other accounts (see Your Rights and Choices).
The Peer Junction bot in sellers' servers
Sellers can add our Peer Junction bot to their own Discord servers. If you buy something from a seller who has done this and you have connected your Discord account to Peer Junction, the bot gives your Discord account the roles that seller set up for that purchase, and removes them when the purchase is refunded, charged back, or ends. Holding the role shows that seller's server that you are a customer.
- That seller, and admins of their server, can look up what you bought from that seller. They never see your purchases from anyone else.
- Release announcements the seller turns on are posted in their server. They don't mention you.
- The bot does not read messages or the member list, and it doesn't send you direct messages.
- If you change or disconnect the Discord account linked to Peer Junction, roles given to the old account are removed.
Data Retention
We retain personal information for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy, including to provide the Services, maintain safety and security records, enforce our Terms, prevent ban evasion, resolve disputes, and comply with legal obligations. The retention period varies depending on the type of information and the purpose for which it is used. When information is no longer needed, we delete or de-identify it, or, if that is not possible, we securely store it and isolate it from further use.
Data Security
We maintain administrative, technical, and organizational safeguards intended to keep information accurate and to protect it from unauthorized access, disclosure, loss, misuse, and alteration. Information transmitted to our website is protected in transit using industry-standard encryption. Private messages, offers, legal and safety requests, reports, sign-in records, and connected-account tokens are also encrypted when stored, and one-time codes and password-reset links are stored only in a form that cannot be used if copied. Access to personal information is restricted to authorized personnel and service providers who are required to keep it confidential. However, no method of transmission over the internet or of electronic storage is completely secure, and we cannot guarantee absolute security.
Consent to Processing and International Transfers
Peer Junction is based in the United States. Your information may be stored and processed in the United States and in any other country where we or our service providers maintain facilities. By using the Services, you acknowledge and agree that both personally identifiable information and other information about you may be transferred across borders and handled as described in this Privacy Policy, including in places whose data protection laws may offer a different level of protection than the laws where you live. Where required by law, we take steps designed to ensure that appropriate safeguards are in place for such transfers.
Your Rights and Choices
Depending on where you live, and subject to applicable law and exceptions, you may have some or all of the following rights:
- Access to the personal information we hold about you and information about how we process it;
- Correction of inaccurate personal information;
- Deletion of your personal information;
- Portability, meaning a copy of your personal information in a portable format;
- Restriction or objection to certain processing, including processing based on legitimate interests;
- Withdrawal of consent, where processing is based on consent; and
- Opt-out of the sale or sharing of personal information or of certain profiling, to the extent applicable.
To exercise these rights, contact us at privacy@peerjunction.com. We may need to verify your identity before responding, for example by confirming control of the account associated with your request. You may authorize an agent to submit a request on your behalf, subject to verification. We will not discriminate against you for exercising your rights. If we deny your request, you may appeal by replying to our decision. If you are in the EEA or the UK, you also have the right to lodge a complaint with your local data protection authority.
We may decline or limit a request where permitted by law, including where retention is necessary for security, fraud prevention, enforcement of our Terms, or compliance with legal obligations.
Children's Privacy
The Services are not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will take steps to delete it. If you believe a child under 13 has provided us with personal information, please contact us.
Third-Party Services
The Services operate on and may link to third-party platforms, websites, and services, including Discord, that are not controlled by Peer Junction. This Privacy Policy does not apply to their practices. Information you provide to third parties is governed by their privacy policies, and we encourage you to review them.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and, for material changes, provide reasonable notice, such as through an announcement in the Services. Your continued use of the Services after an update takes effect constitutes your acknowledgment of the revised policy.
Contact Us
If you have any questions about this Privacy Policy or our privacy practices, or wish to exercise your rights, please contact us at privacy@peerjunction.com.