Privacy Policy

Company information

Introduction

Welcome to Legit Bape, operated by K-DEV Solutions LLC. We understand the importance of protecting your privacy when you use our service. This Privacy Policy describes what personal data we collect, for what purposes, how the Company uses that data, and whether it may be shared. We encourage all users to read this policy carefully before using the Service. We reserve the right to update this policy and will always make the most recent version available on this page.

For questions, you may contact our data protection officer at: privacy@marketplace.com

Personal data we collect

K-DEV Solutions LLC collects your personal data when you register on our platform, create your account and profile, list items for sale, make purchases, and use our services. Certain information is generated automatically during your use of the services.

Data collected includes: name, email address, shipping address, IP address and approximate location, profile information, listing data (photos, descriptions, pricing), and transaction records.

K-DEV Solutions LLC is the data controller for your personal data, in accordance with this policy and applicable data protection regulations.

Purpose and legal basis for processing

• Account creation and authentication: We process your email, username, and password to create and secure your account.
• Transactions: We process shipping addresses, payment references (Stripe IDs only — we never store card data), and order details to facilitate purchases and seller payouts.
• Authentication service: We process listing photos to perform our legit check review before items go live.
• Communication: Your email address is used for order confirmations, shipping notifications, and account-related messages.
• IP and location: Used to display approximate buyer location on profiles and to enforce rate limiting and fraud prevention.

Payments

All payment processing is handled by Stripe. We never see, store, or have access to your full card number, CVV, or billing details. We store only Stripe customer IDs, payment intent IDs, and connected account IDs as references. Payment data is retained for the duration required to process refunds and comply with financial regulations.

Email communications

With your consent, you may receive information about new features, promotions, and marketplace updates. You can withdraw your consent at any time by contacting privacy@marketplace.com or using the unsubscribe link in any marketing email.

Third-party data sharing

K-DEV Solutions LLC will not transfer your personal data to any third party, except in the following cases: (1) as required by law or legal process; (2) as necessary for the performance of the contract (e.g., sharing shipping information with a seller to fulfill an order); (3) with your explicit consent.

We use the following third-party services: Stripe (payments), Cloudflare R2 (image storage), Meilisearch (search). Each operates under their own privacy policies.

Security

Your personal data is processed and stored with the highest level of security. K-DEV Solutions LLC has implemented appropriate technical and organizational security measures including: encrypted connections (TLS/SSL), firewalled infrastructure, secure password hashing, rate limiting, and regular security audits.

Cookies

We use strictly necessary cookies for core site functionality (authentication sessions, security tokens). For more information, see our Cookie Policy.

Your rights

As a user, you have the following rights:

• Right of access to your personal data
• Right to data portability
• Right to erasure (right to be forgotten)
• Right to rectification and completion
• Right to restriction of processing
• Right to object to data processing
• Right not to be subject to a decision based solely on automated processing

To exercise your rights, contact: privacy@marketplace.com

Data retention

Account data is retained for as long as your account is active. Transaction records are retained for 7 years as required by financial regulations. If you delete your account, personal data is removed within 30 days, except where retention is required by law.