Security

Banking details are disclosed once, to one person

Your bank account is stored against your profile and shown to you in masked form. It is released to another member only when the auction has matched you with them and their payment is due — and only for the duration of that transaction. No member can browse other members' banking information.

Passwords

Your password is handled by our authentication provider and is never stored in the application database, never displayed anywhere and never treated as banking information. Support will never ask you for it.

Identity documents

ID documents and selfies are uploaded to private storage that is not publicly reachable. Only you and the reviewing administrator can open them, through short-lived signed links.

Row-level access control

Every table enforces row-level security, so each member's queries can only ever return their own records plus the public auction data. Administrator privileges live in a separate roles table and every administrative action is written to an immutable audit log.

Staying safe

• Only ever pay the account shown inside a matched transaction on this platform.
• Never share your login or OTP with anyone, including someone claiming to be support.
• Report suspicious behaviour through the support page immediately.