Privacy policy

What we collect, why we collect it and what you can do about it. Short version: as little as we can, and never your marketplace passwords.

Draft, pending legal review

This is a plain-English draft written before launch. It describes how Dibs is designed to work, but it hasn't been reviewed by a lawyer yet and may change before it takes effect. Last updated November 7, 2026.

  1. 1.Who we are

    Dibs (“we”, “us”) runs a deal-alert service for Facebook Marketplace, Kijiji and eBay. We're based in Canada and handle personal information in line with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial law. Questions go to our privacy contact at [email protected].

  2. 2.What we collect

    We collect only what we need to run your alerts and your account:

    • Account details: your name, email address and, if you sign in with Google or Apple, the basic profile they share with us.
    • Your watchlists: search terms, price limits, locations and distances, filters and alert preferences.
    • Alert and flip data: matches we've sent you, listings you save, and buy and sell prices you choose to log in the flip tracker.
    • Device data for notifications: a push token for your device and, if you connect it, a Discord webhook URL.
    • Billing: if you pay, our payment processor handles your card. We only see the plan, the last four digits and the billing country.
    • Basic usage and technical data: pages viewed, app errors, approximate location from your IP address and browser type, used to keep the service running and improve it.

  3. 3.What we never collect

    We never ask for, store or use your Facebook, Kijiji or eBay username or password, and we don't access your marketplace accounts or messages. Alerts link to public listings; you contact sellers from your own accounts.

  4. 4.Why we use it

    We use your information to:

    • find listings that match your watchlists and send you alerts by push, email or the channels you choose;
    • run your account, process payments and provide support;
    • detect abuse, fraud and security problems;
    • measure alert speed and reliability, including the aggregate figures on our status page;
    • send product and account emails. Marketing emails are only sent with your consent (see below).

  5. 5.Emails and consent (CASL)

    Alert emails and account messages (receipts, security notices, plan changes) are part of the service you asked for. We'll only send promotional emails, such as product news or offers, if you opt in, and every one has a working unsubscribe link. Unsubscribing from marketing doesn't stop your deal alerts; you control those per watchlist.

  6. 6.Who we share it with

    We don't sell your personal information or share it for advertising. We use a small number of service providers to run Dibs, such as hosting, email delivery, push notifications, payments and error monitoring. They may only use your data to provide their service to us. Some of them process data outside Canada, including in the United States, where it may be subject to local law.

    We may disclose information if the law requires it, or to protect the rights and safety of our users or the public.

  7. 7.How long we keep it

    We keep your account data while your account is open. Old alerts are deleted automatically after 12 months. When you delete your account, we delete your personal information within 30 days, except billing records we must keep for tax purposes and short-lived backups that expire on their own.

  8. 8.Your rights

    You can access, correct or download your information, withdraw consent for optional uses and delete your account at any time from the app, or by emailing [email protected]. If you're not happy with our answer, you can complain to the Office of the Privacy Commissioner of Canada. If you live in the US, you may have additional rights under your state's law, and we'll honour them.

  9. 9.Security

    We encrypt data in transit, limit staff access to what's needed for support, and keep payment details with our payment processor. No system is perfectly secure; if a breach creates a real risk of significant harm, we'll tell you and the Privacy Commissioner as the law requires.

  10. 10.Cookies

    We use a small number of cookies and similar storage to keep you signed in and remember your settings. We don't use advertising cookies or cross-site tracking.

  11. 11.Children

    Dibs isn't meant for anyone under 16, and we don't knowingly collect information from children.

  12. 12.Changes

    If we change this policy in a meaningful way we'll email you before it takes effect. The terms of service explain the rest of how Dibs works.