Privacy policy

Effective October 5, 2026. Lopesies is an independent student marketplace, not operated by or affiliated with Grand Canyon University.

Information we use

We store your account identifier, name, bio, private login and campus email, verification timestamps, job listings, applications, messages, agreements, amendments, progress notes, ratings, reports, disputes and moderation history. Fee consent, saved-payment-method references, claim reservations, Stripe object references and transaction amounts support payments, fees, transfers, refunds and reconciliation. We do not store card numbers or bank credentials.

Visibility and location

Members see public listings, names, bios, ratings and campus email badges. Emails are private. Use only a public meeting area in listings. Precise meeting instructions are deliberately shared with accepted participants; moderators may inspect them when reviewing a job. We do not collect live GPS location. Job messages are visible to participants; moderators can inspect reported evidence. Agreements, completion notes and disputes are available to their participants and authorized moderators. Messages are not end-to-end encrypted.

Providers and notifications

Cloudflare runs the API and database; Resend delivers email codes. You sign in with a one-time code sent to your email. On the website, the session is kept in a secure browser cookie that page scripts cannot read; in the iPhone app, it is stored in the device Keychain. Stripe handles hosted payment and payout onboarding, including the information it requires for verification. If you enable notifications, Apple receives a device token and generic job-update text. Notifications omit precise locations and private message content. You can disable push in the app or iPhone Settings.

Security and purpose

Data supports matching, fulfillment, payment reconciliation, safety, support and fraud prevention. We store hashes of sessions and expiring verification codes. Rate-limit keys and diagnostic request IDs help operate the service. We do not include advertising, cross-app tracking, analytics SDKs, government-ID uploads to Lopesies, live tracking or photo uploads. Campus email verification confirms mailbox access, not current enrollment or safety.

Deletion and retention

In Profile → Settings → Account, choose Delete Account and confirm with a fresh email code. We revoke sessions and remove profile email, name, bio, device registrations, notification preferences and unnecessary account content. Active agreements enter moderator review. An opaque deleted-account record preserves database relationships. Necessary agreements, financial references, reported evidence, dispute history and associated messages remain for transaction administration and safety, with the profile shown as Deleted account. These records may contain information originally included in job terms or messages. Contact Support about specific personal information in retained records. The operators review retention needs; this policy does not assert a fixed statutory retention period. Stripe and other providers maintain their own records under their policies.

Contact

Use Support for access, privacy, deletion, correction or moderation appeals. Do not send passwords or identity documents. For immediate danger, call 911.