Privacy Policy

1. Who We Are

BTC Classics Club ("we," "us," or "our") operates btcclassicsclub.com — a private membership platform for classic car enthusiasts who transact in Bitcoin. This policy explains what personal information we collect, how we use it, and your rights.

2. Information We Collect

We collect information you provide when you create an account, purchase a membership, or submit a listing:

• Full name, email address, and phone number
• Password (stored as a one-way hash — never readable)
• Member profile: bio, location, headline, and avatar
• Vehicle listing details: photos, descriptions, pricing, and specifications
• Payment information processed by Square (we do not store card numbers)
• Escrow transaction records including parties and amounts
• Messages sent through the contact form

We also collect technical data automatically: IP address, browser type, pages visited, and session tokens in secure HTTP-only cookies.

3. How We Use Your Information

• To operate your account and provide membership features
• To process payments through Square
• To facilitate vehicle transactions via Escrow.com
• To send transactional emails (verification, password reset, escrow notices)
• To display your public member profile to other members
• To improve site performance and investigate security incidents
• To comply with applicable law

We do not sell your personal information. We do not use your data for advertising.

4. Third-Party Services

• Square — payment processing. Square's privacy policy governs your payment data.
• Escrow.com — escrow for vehicle transactions. Your email is shared when you initiate a purchase.
• Bunny CDN — image hosting for listing photos and avatars.
• Resend — transactional email delivery.
• Railway — cloud infrastructure hosting our backend and database.

5. Cookies and Session Tokens

We use two secure, HTTP-only cookies to manage your login session: an access token (short-lived) and a refresh token (longer-lived). These are necessary for the site to function and are not used for advertising or cross-site tracking. No third-party tracking cookies are placed.

6. Data Retention

We retain account data while your account is active. Upon account deletion, personal data is removed within 30 days, except where retention is required by law (such as completed financial transaction records).

7. Your Rights

You may have the right to access, correct, or delete your personal data; withdraw consent; and, if you are in the EU or UK, lodge a complaint with a supervisory authority. To exercise these rights, email admin@btcclassicsclub.com.

8. Security

We use HTTPS, hashed passwords, HTTP-only session cookies, and restricted database access. If you believe your account has been compromised, contact us immediately.

9. Children

The Platform is not directed at individuals under 18. We do not knowingly collect data from minors. Accounts found to belong to minors will be deleted promptly.

10. Changes to This Policy

We may update this policy. Material changes will be communicated by email or site notice. Continued use after changes are posted constitutes acceptance.

11. Contact

Questions: admin@btcclassicsclub.com