Privacy

Last updated 27 August 2026. DRAFT — for review by BlueMesa Systems LC before launch.

Who we are

Auction Calendar (auctioncalendar.ai) is operated by BlueMesa Systems LC, a New Mexico limited liability company, [ADDRESS], USA (“we”). We are the data controller for personal data processed through this service. Contact: privacy@auctioncalendar.ai. [EU/UK REPRESENTATIVE — add if required under GDPR Art. 27 / UK GDPR.]

What we collect and why

Without an account we collect no personal data. Filters and preferences stay in your browser. Our hosting provider records standard server logs (IP address, user agent, requested URL) for security and abuse prevention, retained for up to 30 days.

With a free account we process your email address (to send you a sign-in link and, if you choose, alerts), the auctions you save, and sign-in timestamps. Legal basis: performance of a contract (GDPR Art. 6(1)(b)).

With a Pro subscription we additionally process your subscription status, plan, renewal date and a Stripe customer reference. Card numbers never reach us: payment is handled entirely by Stripe. Legal basis: performance of a contract; retention of billing records for as long as tax and accounting law requires (GDPR Art. 6(1)(c)).

Saved-search alerts (Pro) are sent only to searches you create and can be switched off per search or by deleting the search.

Processors

We use these sub-processors, each under a data processing agreement: Cloudflare, Inc. (hosting, CDN, edge compute — data may be processed at Cloudflare edge locations worldwide, with EU data localisation where available); Supabase, Inc. (accounts and database, hosted in the EU — London region); Stripe, Inc. (payments); Resend (transactional email). We do not sell personal data, and we use no advertising trackers or third-party analytics cookies.

Auction data

The auction listings we display are public notices published by courts, government agencies and auction houses. We store titles, dates and links only. If a listing contains personal data and you are the data subject or the publishing platform, contact us and we will remove it.

Your rights

Under the GDPR and UK GDPR you may access, correct, export, restrict or delete your personal data, object to processing, and lodge a complaint with your supervisory authority. Email privacy@auctioncalendar.ai from your account address; we respond within 30 days. Deleting your account removes your profile, saved auctions and saved searches immediately; billing records are kept only as long as the law requires.

International transfers

BlueMesa Systems LC is based in the United States. Where data leaves the EU/UK, we rely on Standard Contractual Clauses and, for Cloudflare and Stripe, their EU–US Data Privacy Framework certifications. [CONFIRM CURRENT CERTIFICATIONS BEFORE LAUNCH.]

Cookies and storage

We set no tracking cookies. Your browser's local storage holds your sign-in session and interface preferences; clearing it signs you out.

Changes to this policy are posted here with a new “last updated” date.