Yellow Iron Parts Exchange
Privacy Policy
Working draft · Effective date pending
Prepared from Privacy Policy V1 (August 29, 2026), with proposed SMS additions. This working draft is for review and is not yet in effect.
This Privacy Policy outlines how Yellow Iron Parts Exchange, LLC (“YIPE,” “we,” “us,” or “our”) collects, uses, discloses, retains, and protects personal information through the YIPE website, mobile application, marketplace, and related services (the “Marketplace”). It also explains choices and rights that may be available to you.
This Policy applies to visitors, account holders, buyers, sellers, and persons who communicate with YIPE. It does not govern a carrier, payment processor, identity-verification provider, or other third party acting under its own privacy policy. The YIPE Terms of Service separately govern use of the Marketplace.
1) Information We Collect
Information You Provide
- Account and identity information. Name, email address, phone number, state, login credentials, account preferences, and information used to verify identity, age, or business status. A verified business may provide its legal name, business address, organizational information, and authorized representative information.
- Seller, tax, and payout information. Taxpayer identification and certification information, payment-account references, payout status, seller onboarding information, and records needed for commissions, refunds, chargebacks, and tax reporting. Stripe or another provider ordinarily collects full bank, card, and identity-document details; YIPE generally receives confirmation, limited account details, and reference identifiers.
- Listings and requests. Descriptions, photographs, videos, part and machine details, OEM or catalog numbers, condition, measurements, price, state location, source-machine context, and Wanted-request information.
- Transactions and logistics. Offers, accepted prices, orders, payments, refunds, commissions, payout status, tax and exemption information, shipping addresses, pickup and delivery contacts, package dimensions and weight, loading and receiving requirements, tracking, coverage, and carrier records.
- Messages, support, & claims. Marketplace messages and attachments; support requests; photographs, testing evidence, shipping records, and other claim or dispute materials; and communications with YIPE.
Information Collected Automatically: Marketplace use: YIPE and our service providers may collect device and browser type, operating system, app version, IP address, general location derived from IP, language, dates and times, pages and features used, referring pages, searches, saved activity, session and diagnostic data, cookie or similar identifiers, and security and fraud signals. We do not use cross-site advertising pixels for third-party targeted advertising.
Information From Other Sources: We may receive information from payment and identity-verification providers, carriers, analytics and security providers, public records, sanctions and fraud-screening sources, business representatives, other users, and persons reporting safety, fraud, infringement, or Terms violations.
2) Public and Private Marketplace Information
Uploads are private by default. Content becomes public only when you deliberately submit it to a published listing, Wanted request, profile field identified as public, or other public feature.
Public Information May Include: An individual’s first name and last initial, state, verified-business label, and deliberately published descriptions, photos, request details, part details, price, source-machine context, and other parts from the same source machine.
Information Kept Confidential Includes: Direct email addresses and telephone numbers, street addresses, company names unless deliberately published, identity documents, private-message attachments, shipping documents, claim evidence, negotiated and accepted prices, payments, commissions, refunds, payouts, saved activity, and browsing activity. Serial numbers, PINs, VINs, seller inventory numbers, and other machine- or account-specific identifiers are not publicly displayed unless the user deliberately publishes them. Public content may be indexed by search engines, copied by others, or remain available outside YIPE after deletion. YIPE may use public listings to promote Marketplace. Private content is not used for unrelated advertising.
3) How We Use Information
We use personal information as reasonably necessary to:
- Operate the Marketplace. Create and manage accounts; publish listings and requests; enable search, offers, purchases, sales, communications, shipping, payments, payouts, refunds, and account preferences.
- Verify and Protect. Verify users and businesses; detect fraud, theft, sanctions risks, unsafe items, prohibited conduct, security incidents, account misuse, and circumvention; authenticate access; and preserve evidence.
- Support Transactions. Provide customer service; coordinate logistics; administer inspection periods, claims, returns, carrier claims, chargebacks, and seller repayment; and communicate required notices.
- Comply and Report. Maintain financial, tax, legal, safety, and audit records; process valid legal requests; enforce agreements; protect rights; and make required marketplace-facilitator or information-return filings.
- Maintain and Improve. Troubleshoot, measure performance, understand feature use, prevent errors, develop improvements, and create aggregated or deidentified statistics.
- Communicate. Send operational and transaction messages. We send promotional email only with any consent required by law and provide an unsubscribe mechanism.
4) Message Scanning and Human Review
YIPE keeps buyer and seller communications on-platform to prevent fraud and circumvention and to support transactions. Automated tools may scan marketplace messages, listings, Wanted requests, and other submitted text for telephone numbers, email addresses, exact street addresses, machine-specific identifiers, unsafe or prohibited content, and apparent attempts to arrange an off-platform transaction. A message or submission may be blocked, paused, or flagged, and we may record the attempt. Authorized personnel may review flagged or reported communications and communications reasonably needed for support, fraud, safety, claims, legal compliance, or Marketplace enforcement. Unusual behavior may trigger review but does not automatically establish a violation. Staff access is limited by role, used only when reasonably needed, and logged where supported by our systems.
5) How We Disclose Information
We may disclose personal information to the following recipients for the stated purposes:
- Other Users and the Public. We display deliberately published content and limited profile information. We provide transaction counterparties the information reasonably necessary to complete a transaction, subject to on-platform communication rules.
- Payment and Identity Providers. We disclose account, transaction, tax, fraud, and verification information to Stripe and other providers that process payments, verify identity, manage connected accounts, support payouts, or satisfy regulatory obligations. Those providers may act under their own privacy notices for certain activities.
- Carriers and Logistics Providers. We disclose names, phone numbers, pickup and delivery addresses, shipment details, and other information reasonably necessary to quote, perform, track, insure, or resolve a shipment. Shipping labels and documents may reveal names and addresses to counterparties.
- Service Providers. We use providers for hosting, databases, security, fraud prevention, communications, analytics, customer support, document processing, AI-assisted features, and professional services. They may process information only for contracted purposes and subject to appropriate restrictions.
- Legal, Safety, and Enforcement Recipients. We may disclose information when reasonably necessary to comply with law or valid legal process; enforce agreements; respond to fraud, theft, export, safety, or infringement concerns; protect YIPE, users, or others; or establish, exercise, or defend legal claims.
- Business Transactions. Information may be disclosed in connection with a financing, merger, acquisition, reorganization, bankruptcy, or sale of assets, subject to appropriate confidentiality and applicable law.
- At your Direction. We disclose information when you request, authorize, or deliberately direct the disclosure.
YIPE does not sell personal information and does not share personal information for cross-context behavioral advertising. YIPE does not use personal information for third-party targeted advertising. If these practices change, we will update this Policy and provide any required opt-out rights before beginning the new practice.
All the above categories exclude text messaging originator opt-in data and consent; this information won’t be shared with any third parties. This exclusion also applies to the Business Transactions and At your Direction categories. Processing of mobile numbers, messages, and delivery information by contracted providers to deliver YIPE’s own notifications is described in Section 16.
6) Cookies and Analytics
YIPE may use cookies, software development kits, local storage, and similar technologies necessary for sign-in, preferences, security, fraud prevention, Marketplace operation, troubleshooting, performance, and first-party product analytics. Browser or device settings may block some technologies, but doing so may impair the Marketplace. Because YIPE does not currently sell personal information or use it for targeted advertising, an opt-out preference signal ordinarily does not change those practices. If YIPE later engages in covered sale or targeted-advertising activity, YIPE will honor legally required opt-out preference signals and provide required controls
7) Communications
YIPE may send account, security, payment, shipping, claim, policy, and other messages necessary to provide the Marketplace through the Marketplace or by email. You cannot opt out of required service messages through those channels while maintaining an active account. Promotional email requires a separate opt-in where required and includes an unsubscribe option.
SMS notifications, if offered, require separate, express opt-in and are always optional. Enrollment will identify the notification purpose, variable message frequency, potential message and data rates, STOP and HELP instructions, and the Terms of Service and Privacy Policy. The SMS program is notification-only, not marketing and not a buyer-to-seller communication channel. Consent to SMS is not a condition of purchase, account access, or use of the Marketplace. You may withdraw SMS consent at any time; required-service-message provisions never override that choice. See Section 16 for SMS information handling and choices.
8) Security
YIPE uses administrative, technical, and physical safeguards designed for the nature of the information and Marketplace. No system is completely secure, and YIPE cannot guarantee that unauthorized access, loss, or misuse will never occur. You are responsible for using a strong, unique password, protecting credentials and devices, and promptly notifying YIPE of suspected account misuse.
9) Your Choices and Privacy Rights
Depending where you live and whether an applicable law covers YIPE or the relevant information, you may have rights to confirm processing; access, correct, or delete personal information; obtain a portable copy; opt out of sale, targeted advertising, or certain profiling; limit certain uses of personal information; withdraw consent; or appeal a denied request. YIPE will not discriminate against you for exercising an applicable privacy right.
Submit a request through the Privacy Request or Support channel identified in the Marketplace. Describe the request and identify the account. YIPE may verify your identity and authority using information reasonably related to the request. An authorized agent may submit a request where permitted, but YIPE may require proof of authorization and direct verification with the user. If YIPE denies an appealable request, the response will explain how to appeal. YIPE may retain a record of the request and response.
Certain information may be exempt, including transaction, tax, fraud, security, legal-claim, public, deidentified, business-context, or legally required records. Deletion or restriction may prevent YIPE from maintaining an account or completing a transaction. YIPE does not currently sell personal information or use it for targeted advertising, and therefore does not offer a “Do Not Sell or Share” link for those nonexistent practices.
10) Retention and Deletion
YIPE retains information only for the periods below or longer when reasonably necessary for an active claim, chargeback, investigation, security incident, legal hold, tax audit, or other legal obligation. We may retain aggregated or deidentified information that cannot reasonably identify you.
| Information | Standard Retention Period |
|---|---|
| Ordinary marketplace conversation with no transaction | Two years after last activity. |
| Transaction, payment, shipping, commission, tax, claim, fraud, safety, and related messages or records | Seven years after the transaction or closure of the matter. |
| Identifiable product analytics | 24 months, then deleted or anonymized. |
| Routine security logs | 12 months. |
| Temporary identity document submitted directly to YIPE | Deleted after verification unless needed for fraud review or legal hold. Third-party verification providers control documents submitted directly to them. |
| Backups | Designed to roll off within 90 days after deletion from active systems. |
If you request account deletion, YIPE will hide the account and public content promptly and delete nonessential account information from systems w/in 30 days, subject to the retention periods above. Deletion may not remove public content copied by others, carrier or payment-provider records, or information providers independently control.
11) Children
The Marketplace is not directed to children under 13, and an account holder must be at least 18. YIPE does not knowingly collect personal information from a child under 13. If you believe a child has provided such information, contact YIPE through the Privacy Request or Support channel so YIPE can investigate and delete it as appropriate.
12) United States Service and Data Location
YIPE is a United States marketplace. Personal information may be processed in the US and other locations where YIPE’s contracted providers operate. Where required, YIPE will use an appropriate transfer mechanism and contractual protections. Users should not use the Marketplace from a jurisdiction where this Policy or the Marketplace is unlawful.
13) Third-Party Services and Links
The Marketplace may link to or integrate third-party services, including payment, identity-verification, maps, shipping, and carrier services. Their privacy practices are governed by their own notices when they act independently. YIPE is not responsible for unrelated third-party websites or services.
14) Changes to This Policy
YIPE may update this Policy to reflect legal, security, operational, provider, or feature changes. YIPE will post the revised Policy and effective date. For a material change, YIPE will provide reasonable advance notice through the Marketplace or email and request consent when required. YIPE will not use previously collected personal information for a materially incompatible purpose without additional notice or consent when legally required.
15) Contact YIPE
Submit questions, complaints, privacy-rights requests, and appeals through the Privacy Request or Support channel identified in the Marketplace. YIPE may require identity verification before disclosing, correcting, or deleting account information. Formal privacy correspondence may also be sent to the mailing address identified in the Marketplace.
16) SMS Notifications
This section describes information handling for the Yellow Iron Parts Exchange SMS notification program when made available. If you separately opt in, YIPE will use your mobile number and selected notification categories to send informational alerts about purchase activity, including offers, payment and order updates; shipping updates; and new Marketplace messages. SMS notifications may contain a link to the Marketplace. The program does not send marketing messages or provide buyer-to-seller texting.
YIPE will collect the phone number you enroll, the account associated with that number, your selected notification categories, and records of your consent and withdrawal. Consent records include when and how you enrolled and the disclosure you accepted. YIPE may also process number-verification results, message content, delivery status, error information, and replies needed to honor STOP, provide HELP, operate the program, and investigate delivery or abuse issues. Providing a phone number elsewhere in the Marketplace does not enroll you in SMS.
Mobile numbers collected for the SMS program are not sold or shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent are excluded from all broader disclosure categories in this Policy and are not shared with any third parties. YIPE does not sell, rent, or transfer SMS opt-in data or consent or use it to enroll you in another messaging program.
YIPE uses contracted messaging providers, including Twilio, and wireless carriers to deliver messages. Providers acting on YIPE’s behalf may process the mobile number, message content, and delivery information solely for contracted delivery, support, security, and compliance purposes. This limited processing does not authorize their own marketing, independent use of your SMS consent, or enrollment in another program.
SMS is optional. Reply STOP to a YIPE text to withdraw consent at any time, or contact support to request removal. YIPE may send one confirmation and will stop further program messages unless you separately opt in again. Opting out does not close your account or stop required notices delivered through the Marketplace or email. Reply HELP or email support@yellowironpartsexchange.com for assistance. The Terms of Service provide the full SMS program terms, including variable frequency and potential message and data rates.
YIPE retains records of consent, withdrawal, and suppression as needed to administer your choices and demonstrate compliance. Message and delivery records follow the applicable transaction, support, and security retention periods in Section 10. YIPE may retain the minimum record needed to honor an opt-out after other SMS information is deleted, subject to applicable legal obligations.