Updated February 22, 2026
At RootStall, we care deeply about privacy. We believe in transparency, and we're committed to being upfront about our privacy practices, including how we treat your personal information. We know you care about your privacy too, so we provide settings that allow you to choose how certain information is used by RootStall. This policy explains our privacy practices for RootStall's mobile application (the "App") and any other services provided by RootStall, referred to as "RootStall," "we," "us" or "our." We'll refer to the App and our other services as the "Services." This policy does not apply to the practices of third parties (including other users who sell using the Services) who may also collect or receive data in connection with your use of the Services.
We process your personal information to run our business and provide our users with the Services. By accepting our User Agreement as well as other policies, and in some jurisdictions, by acknowledging this policy, you confirm that you have read and understand this policy, including how and why we use your information. If you don't want us to collect or process your personal information in the ways described in this policy, you shouldn't use the Services. We are not responsible for the content or the privacy policies or practices of any of our users or third-party websites and apps.
RootStall's User Agreement requires all account owners to be at least 18 years of age. Minors under 18 years of age and at least 13 years of age are permitted to use RootStall's Services only if they have permission and direct supervision by the owner of the account. Children under age 13 are not permitted to use the Services. You are responsible for any and all account activity conducted by a minor on your account.
By using the Services, you acknowledge that RootStall will use your information in the United States and any other country where RootStall operates. Please be aware that the privacy laws and standards in certain countries, including the rights of authorities to access your personal information, may differ from those that apply in the country in which you reside.
In the course of providing our Services, we collect or receive your personal information in a few different ways. We obtain the categories of personal information listed below from the following sources: directly from you, from forms you complete or during registration; indirectly from you based on your activity and interaction with our Services, or from the device or browser you use to access the Services; and from our vendors and suppliers that help provide RootStall services you may interact with.
The categories of personal information we collect include:
In order to use the Services, you will need to submit a valid email address or sign in through a supported third-party authentication provider (such as Google or Apple). If you register, you will need to submit a display name associated with your account. You may modify that name through your account settings. You need to provide this information to enable us to provide you with the Services.
Additional information, such as a business name, a telephone number, a physical postal address, and/or a profile photo, may be necessary in order for us to provide a particular service. For both buyers and vendors, RootStall requires this information from you in order to provide you with the Services (including, to verify ownership of an account, to mitigate fraud and abuse, to comply with regulatory obligations, or to facilitate a transaction).
Vendors may also set up a Square payment account through RootStall to accept card payments. This process is handled through Square's OAuth authorization flow. RootStall stores only the merchant ID and access tokens necessary to process payments on your behalf. RootStall does not have access to your Square account credentials.
You may provide your name and other personal information (such as birthday, bio, business name, location, and social media links) in connection with your account and activity. You can edit or remove this information through your account settings. The name and profile photo associated with your account are publicly displayed and connected to your RootStall activity.
Other users may see the date you joined; ratings and reviews; your profile information; items you listed for sale; your market listings and booth assignments; sold item listings; and information you decide to share via the Services. Vendors' profiles may additionally display their business name, address, and contact information that they have chosen to make public.
RootStall automatically receives and records information from your mobile device when you use the App or use certain features of the Services, such as your IP address or unique device identifier, and data about which screens you visit and how you interact with those screens in order to allow us to operate and provide the Services. This information is stored in log files and is collected automatically. We may combine this information from your mobile device with other information that we collect about you. This information is used to prevent fraud and to keep the Services secure, to analyze and understand how the Services work for users, and to provide a more personalized experience for users.
We also automatically collect device-specific information when you install, access, or use our Services. This information can include the hardware model, operating system information, app version, app usage and debugging information, IP address, and device identifiers.
Push notification tokens (such as Firebase Cloud Messaging tokens) are collected to deliver transaction updates, order status changes, chat messages, and market notifications to your device. You can disable push notifications at any time through your device settings.
We collect information about your use of the Services for analytics, to serve content, and to protect the Services. This can include your IP address, device information, and, when enabled by you, location information provided by your device.
When you use the App, you can choose to share your geolocation details with RootStall in order to use functions like our local marketplace, nearby market discovery, in-app maps, and for in-person sales (although you don't need to share these details). You can choose to publish your location when you sell on RootStall.
Live Market Map: When you attend a market event and opt in to the live map feature, your real-time location (latitude and longitude) is temporarily shared with other attendees of that same market event. This location data is stored only while you are actively using the live map and is automatically removed when you leave the market or close the feature. Your live location is only visible to other users attending the same market event.
We use and store information about your location to provide features and to improve and customize the Services, for example, for local content, search results, and recommendations; for mapping and navigation services; and for personalizing our Services to you. If you have consented to share your precise device location details but would no longer like to continue sharing that information with us, you may revoke your consent through the settings on your mobile device.
As part of the buying and selling process, RootStall will facilitate the sharing of information between the two users involved in the transaction, such as the other RootStall member's display name, profile photo, and relevant contact details.
Payment Processing: Card payments are processed securely through Square, Inc. When you make a purchase, your payment card information is collected directly by Square's secure payment form. RootStall receives only a one-time payment token (nonce), which is transmitted to Square's servers via our secure backend to complete the transaction. RootStall never receives, processes, or stores your full card number. Transaction records (including order amount, status, and a Square transaction ID) are stored for order management and dispute resolution.
Pay at Pickup: RootStall also offers a "Pay at Pickup" option where buyers place an order without immediate payment. The vendor accepts or declines the order, and payment is handled in person at the market. No financial information is collected by RootStall for these cash transactions.
We expect you to respect the privacy of the member whose information you have received. You have a limited license to use that information only for RootStall-related communications or for RootStall-facilitated transactions. RootStall has not granted a license to you to use the information for unauthorized transactions or sending unsolicited commercial messages in violation of any applicable laws.
RootStall provides an in-app chat feature that allows buyers and vendors to communicate directly regarding transactions, orders, and market-related inquiries. Chat messages, including any text and images shared, are stored securely in our database.
Chat messages are retained as part of your transaction and communication history. They are visible only to the participants of the conversation. RootStall may access message content for safety and moderation purposes, or when required to resolve disputes or comply with legal obligations.
We respect your privacy. RootStall will not disclose your name, email address, or other personal information to third parties without your consent, except as specified in this policy.
On occasion, RootStall will need to contact you. Primarily, these messages are delivered by email or by push notifications for a variety of reasons, including transaction updates, order status changes, market event reminders, and service update purposes. If you no longer wish to receive push notifications, you can disable them at the device level. Every account is required to keep a valid email address on file to receive messages.
Some messages from RootStall are service-related and necessary for users. You understand and agree that RootStall can send you non-marketing messages, such as those related to your account, security, order updates, or product changes. Examples include an email address confirmation when you register your account, order confirmations and status updates, in-app chat messages between buyers and vendors, market event notifications, and correspondence with RootStall's support team.
The security of your personal information is important to us. We follow generally accepted industry standards to protect the personal information submitted to us, both during transmission and after it is received.
Unfortunately, no method of transmission over the internet or method of electronic storage is 100% secure. Therefore, while we strive to protect your personal information, we cannot guarantee its absolute security.
RootStall will retain your information only for as long as is necessary for the purposes set out in this policy, for as long as your account is active, or as needed to provide the Services to you.
Certain privacy laws around the world, including the European General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA), provide users with rights related to their personal information. Consistent with those laws, RootStall gives you the choice of accessing, editing, or removing certain information, as well as choices about how we contact you.
RootStall uses cookies, local storage, and similar technologies to recognize your logged-in state, to understand what features you use, to make the App function for you, and to help provide a more personalized experience. These technologies are used for:
You can manage your preferences through your device settings.
We may update this Privacy Policy from time to time. Any changes will be posted within the App and on this page, and the "Updated" date at the top of this policy will be revised. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.
If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at rootstallhq@gmail.com.