Security
🔒 Built on Encryption, Verification, and Active Fraud Monitoring
Security isn't one feature here — it's four working together: how your data is encrypted, how payments are processed, how identities are verified, and how we watch for fraud. Here's what each one actually involves.
🔐 Data Encryption
Two different kinds of encryption protect your information, depending on where it is at any given moment.
- In transit: anything moving between your browser and our servers — a login, a form submission, a payment — travels over TLS encryption, the modern standard used across banking and e-commerce (the successor to older SSL).
- At rest: sensitive data stored on our systems is protected with 256-bit AES encryption, a widely used industry standard for protecting data that's sitting in a database rather than moving across a network.
💳 Secure Payments
Payment processing is handled through PCI DSS-compliant infrastructure — the security framework that governs how card data has to be handled online. We don't process or store your full card number on our own servers.
Every payment is also routed into escrow rather than released directly — a separate layer of protection on top of encryption itself. See our Escrow Process page for exactly what happens to your payment after checkout.
🪪 Identity Verification
Every buyer and seller is verified before a transaction can proceed — real identities, checked against authoritative records, with CPNs and fabricated identifiers rejected outright. This is deep enough to deserve its own pages:
- Identity Verification — the full KYC process, for both sides of the marketplace
- How We Verify Buyers — what buyers submit and how it's checked
- How We Verify Sellers — the approval standards behind every listing
🕵️ Fraud Detection
Verification catches a fabricated identity at the door. Fraud detection watches for the patterns that show up after someone's already inside — because those two problems aren't the same thing.
- Transaction monitoring: unusual purchase volume, mismatched account details, or activity that doesn't fit a normal buying or selling pattern gets flagged for review.
- Manual review: flagged activity is reviewed by our team before a transaction proceeds — automated systems catch patterns, but a person makes the final call.
- Account security: your login is a common target for account takeover — keep it secured, and contact support immediately if you notice any activity you don't recognize.
🚫 What We Never Do
- Store your full card number or CVV on our own servers
- Store Social Security numbers or identity documents in plaintext
- Sell or share your information for marketing purposes
- Release escrow funds without posting confirmation
- Accept CPNs or fabricated identities, on either side of a transaction
🛡️ Security at a Glance
Four Layers, Working Together
AES encryption protects sensitive data at rest
Of payment processing handled through PCI DSS-compliant infrastructure
Transaction screened for unusual activity before funds move
None of these layers work in isolation — encryption protects the data, verification confirms who's behind it, and monitoring watches for what neither one can catch alone.
Encrypted. Verified. Monitored — on every transaction.
❓ Security
Frequently Asked Questions
Short, direct answers — no fine print surprises.
What encryption do you use to protect my data?
Data in transit — anything moving between your browser and our servers — is protected with TLS encryption, the same standard used across banking and e-commerce. Sensitive data at rest is protected with 256-bit AES encryption, a widely used industry standard.
Do you store my full credit card number?
No. Card details are handled through our payment processor's secure infrastructure — we don't store your full card number on our own servers.
Is my Social Security number encrypted?
Yes. Identity details submitted for verification are encrypted and handled through our secure, verified order flow — see our Identity Verification page for the full process.
What happens if you detect suspicious activity on my account?
Transactions and account activity are screened for patterns that don't look right — unusual purchase volume, mismatched details, signs of a compromised login. Flagged activity gets a manual review before anything proceeds.
How is my payment information protected during checkout?
Checkout is processed through PCI DSS-compliant payment infrastructure, with your payment routed to escrow rather than held on our own systems — see our Escrow Process page for what happens after you pay.
Do you comply with PCI DSS?
Payment processing runs through infrastructure built to PCI DSS standards — the security framework that governs how card data has to be handled online. We don't process or store raw card data ourselves.
What should I do if I think my account has been compromised?
Contact support immediately so we can review recent activity and secure your account. Acting quickly limits what a compromised account can be used for.
Is my data shared with third parties?
Only where a transaction actually requires it — like a seller receiving the specific details needed to add you as an authorized user. We don't sell or share your information beyond what a given transaction requires.
How does this tie into escrow and identity verification?
Security isn't a separate feature — it's what makes the rest of our protections possible. Escrow only works between two verified parties, and verification only matters if the data behind it is actually protected. See our Escrow Process and Identity Verification pages for the full picture.