Privacy Policy

Overview

This Privacy Policy explains how Vivarium Culebra LLC ("we," "us") collects, uses, discloses, and protects information in connection with Culebra Exchange, our website and progressive web app (together, the "Service"). Native mobile apps are planned; this Policy will cover them when they launch. By using the Service you agree to this Policy.

Information we collect

We collect the following categories of information:

• Account information — name, email address, username, and (for verified sellers/breeders) identity and business details you provide.
• Profile and content — your storefront/profile, bio, photos and videos you upload, listings, breeding projects, reviews, and messages.
• Listing and animal data — species, genetics/morphs, husbandry details, pricing, and shipping origin.
• Location — the ship-from/ship-to region and, where you enable it, approximate device location for compliance and shipping.
• Transactions — orders and reservations. During beta, buyers and sellers arrange payment directly. When escrow checkout launches (planned for end of October 2026), payment card and bank details will be processed by Stripe; we will not store full card numbers.
• Communications — messages you send through the Service and support correspondence.
• Device and usage data — IP address, device and browser type, app version, pages viewed, and interactions, collected via cookies and similar technologies.
• Connected accounts — if you link Instagram or Facebook, we receive the information those services share per your authorization.

How we use information

We use information to:

• Operate, maintain, and improve the Service and your listings, profile, and transactions.
• Verify sellers/breeders, qualify buyers (including for restricted/venomous species), and run trust-and-safety and fraud checks.
• Provide customer support and, once escrow checkout launches, process payments and escrow.
• Send service messages and, with your consent where required, marketing communications.
• Comply with legal obligations and enforce our terms.

Advertising & analytics

We do not currently run advertising on or off the Service, and we do not use advertising pixels or cross-site tracking. We count listing views and use first-party usage data to run the Service and give sellers analytics.

We may promote listings through Google and Meta advertising in the future. If we do, we will update this Policy before it starts and, on iOS, ask your permission through Apple's App Tracking Transparency prompt where required.

How we share information

We share information only as described here. We do not sell your personal information.

• With other users — your public profile, listings, and reviews are visible to others; buyers and sellers exchange information needed to complete a transaction. If you run a storefront, the contact phone and email you add for buyers are shown publicly on your storefront and listings.
• Service providers — hosting and file storage (Vercel), database (Neon), and, once escrow checkout launches, payment processing (Stripe), under contracts limiting their use of the data. See our Subprocessors page for the current list.
• Legal and safety — to comply with law, respond to lawful requests, or protect rights, safety, and the integrity of the Service.
• Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this Policy.

Your choices & rights

Depending on where you live (including under the GDPR and California's CCPA/CPRA), you may have rights to access, correct, delete, or port your personal information, to opt out of certain sharing or targeted advertising, and to withdraw consent.

To exercise these rights, contact us at privacy@culebraexchange.com. You can opt out of any marketing emails via the unsubscribe link and manage cookies in your browser.

Data retention

We keep personal information for as long as your account is active and as needed to provide the Service, then retain limited records as required for legal, tax, accounting, dispute-resolution, and fraud-prevention purposes.

Security

We use administrative, technical, and physical safeguards designed to protect your information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Children

The Service is not directed to children. You must be at least 16 years old (or the age of majority required to transact in your jurisdiction) to create an account. We do not knowingly collect personal information from children under 13.

International transfers

We operate in the United States. If you access the Service from outside the U.S., you understand your information may be processed in the U.S. and other countries with different data-protection laws, and we use appropriate safeguards where required.

Third-party services

The Service links to third-party services (e.g., Instagram, Facebook and sellers' own websites). Their use of your information is governed by their own privacy policies, not this one.

Changes to this Policy

We may update this Policy from time to time. We will post the updated version with a new effective date and, for material changes, provide additional notice.

Contact us

Questions about this Policy or your information? Contact Vivarium Culebra LLC at privacy@culebraexchange.com.