Sourcerer Privacy Policy

Effective date: September 4, 2026
Last updated: September 18, 2026

1. Who we are

Sourcerer (the "App") is operated by Sourcerer Unlimited LLC ("Sourcerer," "we," "us"), a Texas limited liability company, located at 1101 Missouri St, Houston, TX 77006.

This Privacy Policy explains what information we collect when you use the App, why we collect it, who we share it with, and the choices you have. It applies to the Sourcerer iOS app and our backend services.

Questions? Contact us at support@sourcererunlimited.com.

2. Summary of key points

We do not sell your personal information, and we do not use it for cross-app advertising or tracking.
We do not run advertising SDKs or analytics SDKs. The App does not collect an advertising identifier (IDFA) and does not present an App Tracking Transparency prompt because it does not track you.
We collect the minimum account data we can. Your account record holds your email address and your subscription status — not your legal name.
Some information you post is public to other users — Bulletin listings, your username, and your general area. Your precise location is never published.
You can delete your account and data from inside the App at any time (Profile → Settings → Delete Account).

3. Information we collect

3.1 Information you give us

Category	What it includes	Why
Account	Email address; authentication identifier from your sign-in provider	Create and secure your account
Business records	Inventory items and photos, purchase costs, sale prices, sale events, invoices, refunds, expenses, trips and trip stops, mileage, business name shown on invoices	Deliver the App's core inventory / profit-tracking features
Preferences	Home region, home address label and coordinates, cost-per-mile, gas price, MPG, tax-rate overrides, notification settings	Personalize routing, mileage and tax calculations
Bulletin profile	Username, display name, bio, avatar image, general area name and approximate coordinates, community-guidelines acceptance and version	Operate the Bulletin marketplace
Bulletin content	Listings, photos, comments, likes, follows, direct messages, interest signals, pickup details, seller ratings, reports you submit	Publish and moderate marketplace activity
Support	Anything you send us by email	Respond to you

3.2 Information collected automatically

Category	What it includes	Why
Approximate/precise location	Device location, only while you are using the App and only with your permission	Show nearby stores on the map; calculate routes and ETAs
Device token	Push notification token and platform	Deliver notifications you opt into
Technical/log data	IP address, request timestamps, correlation identifiers, error logs	Security, abuse prevention, rate limiting, debugging
Subscription state	Purchase status and entitlement derived from a validated App Store transaction	Provide paid features

3.3 Information from third parties

Your sign-in provider (Google, or Firebase email/password): your email address and an account identifier. If you sign in with Google, Google may tell us your email is verified.
Apple: a signed transaction confirming a subscription purchase. We never receive your payment card details from Apple.
Stripe (only if and when you enable in-person seller payments): your Stripe account identifier and whether your account is approved to accept charges and payouts. We never receive or store your bank account, tax identification, or government ID. You provide those directly to Stripe under Stripe's own privacy policy.

3.4 What we do not collect

No advertising identifier (IDFA) and no cross-app or cross-site tracking.
No contacts, microphone, health, or biometric data. The optional App Lock (Face ID / Touch ID) is evaluated entirely on your device by iOS; Sourcerer only learns whether the unlock succeeded and never receives biometric data.
No background location. Location access is "while using the App" only.
No payment card numbers, bank details, or Social Security numbers.

4. How we use information

We use information to:

Provide, maintain, and improve the App's features;
Authenticate you and keep your account secure;
Calculate the numbers the App exists to produce — profit, ROI, sales tax, mileage and gas allocation;
Show nearby sourcing locations and plan multi-stop routes;
Operate the Bulletin marketplace, including publishing your listings to other users;
Moderate content and enforce our rules (see Section 7);
Send notifications you have opted into;
Detect, investigate, and prevent fraud, abuse, and security incidents;
Comply with law and enforce our Terms of Use.

5. What other people can see

This section matters most — please read it.

Public within the App (visible to other Bulletin users):

Your Bulletin username, display name, bio, and avatar;
Your general area name (e.g. a neighborhood or city) — never your street address or precise coordinates;
Your listings, listing photos, comments, and your seller rating average and count.

Shared with specific people only:

Direct messages are visible to you and the other participant.
Pickup details are shared privately between a seller and a specific buyer, and only when the seller chooses to share them. They are deleted when interest is withdrawn, access is revoked, either user blocks the other, or the listing is removed by moderation.

Never published:

Your email address;
Your precise device location;
Your home address label or coordinates;
Your inventory, costs, profit, invoices, expenses, and trips. Your business records are private to your account.

Please do not put anything in a public listing, comment, bio, or username that you would not want to be public. Content you make public may be seen, saved, or re-shared by others.

6. How we share information

We do not sell personal information. We do not share personal information for cross-context behavioral advertising. We share only as described here:

6.1 Service providers

Provider	What they process	Purpose	Location
Amazon Web Services (AWS)	All application data (database, cache, uploaded images, secrets, logs)	Hosting and storage	United States (Ohio)
AWS Rekognition	Bulletin images you upload	Automated detection of unsafe imagery	United States
Google Firebase (Authentication)	Email address, authentication identifier	Sign-in and identity	United States
Google Firebase Cloud Messaging	Device push token, notification content	Delivering notifications	United States
Google Sign-In	Email address, account identifier	Optional sign-in method	Per Google's policy
Google Maps Platform (Places / Directions)	Map viewport coordinates and route waypoints	Finding stores; optimizing multi-stop routes	Per Google's policy
Apple (App Store / StoreKit)	Subscription transaction	Processing subscription purchases	Per Apple's policy
Stripe (only if you enable seller payments)	Your identity and banking information, which you give to Stripe directly; payment transactions	Payment processing and payouts	Per Stripe's policy
Apify	Public estate-sale listing facts collected on a schedule from EstateSales.net (listing title, address, dates, sale type, sale operator name, and a link to the listing) — never the listing's photos or written description, and not user personal data	Running the scheduled collection of public sale listings shown on the Sales map	Per Apify's policy
Google (Gemini API)	A photo you submit for "Price Check"	Extracting a search query from your photo to find comparable listings ("Price Check" feature); the photo is processed transiently to derive the query and, per Google's Gemini API paid-tier terms (as of August 2026), is not used to train or improve Google's models — Google may retain the photo briefly for abuse monitoring	Per Google's policy
eBay	The search text derived from your photo, the keyword you typed, or the barcode digits you scanned for "Price Check" — never the photo itself	Finding comparable current listings on eBay for your item ("Price Check" feature)	Per eBay's policy

Each provider is contractually limited to processing data on our instructions for the purposes above.

6.2 Other users

As described in Section 5.

6.3 Legal and safety

We may disclose information if we believe in good faith it is necessary to comply with law or legal process, to enforce our Terms, or to protect the rights, safety, or property of our users, the public, or us.

6.4 Business transfers

If we are involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction. We will notify you of any such transfer by email or through the App, as required by applicable law.

7. Automated content moderation

To keep the Bulletin marketplace safe, we screen user content automatically:

Text (listings, comments, messages, profiles) is filtered for prohibited language when you submit it. Content that fails is rejected and not published.
Images are scanned by AWS Rekognition after upload. Images flagged above a confidence threshold are removed.
Reports you or others submit are reviewed by our administrators, who can remove content and revoke Bulletin access.

These decisions are made in part by automated means. If you believe content of yours was removed in error, contact support@sourcererunlimited.com.

8. Location information

The App requests "While Using the App" location permission only. We never request background or "Always" location.
We use your location to center the map on nearby stores and to compute routes and ETAs.
The App remains usable if you deny location permission. You can browse the map and plan trips without it.
Your home address label and coordinates, if you set them, are stored to serve as a trip starting point. They are private to your account and never shown to other users.
Your Bulletin area is a coarse, self-selected general area — it is a separate, deliberately imprecise value shown to other users, not your device location.

You can change or revoke location access at any time in iOS Settings → Privacy & Security → Location Services.

9. Camera and photos

The App uses your camera to photograph inventory items and to set a Bulletin avatar, and uses the iOS photo picker to let you choose existing photos. The iOS photo picker gives the App access only to the specific images you select — not your photo library. Photos you attach to inventory items are private to your account; photos you attach to a Bulletin listing are public. If you use "Price Check" to look up comparable current listings, the photo you submit is sent to Google's Gemini API to extract a search query and is not stored on our servers beyond that request; the derived search text (or the keyword you typed, or the barcode digits you scanned) is then sent to eBay to find matching listings — see Section 6.1.

10. Push notifications

Notifications are entirely optional and are requested only when you turn a notification feature on — never at launch. No App functionality is withheld if you decline. You can turn notifications off in the App or in iOS Settings.

11. Payments

Subscriptions are processed by Apple through in-app purchase. Apple handles your payment method; we receive only a signed confirmation of the transaction. Apple's handling of your data is governed by Apple's privacy policy.
In-person seller payments are processed by Stripe. You onboard with Stripe directly and you — not Sourcerer — are the merchant of record for your own sales. We store only your Stripe account identifier and its capability status.

12. Data retention

Account and business records are retained while your account is active.
When you delete your account, we delete your account and associated personal data, and public Bulletin content you posted is either removed or disassociated from you. Certain records are retained where we have a legal obligation or a legitimate need — for example, refund records, moderation records for reports made about your content, and a limited record that the account was deleted, which we keep to prevent a deleted account from being re-accessed with an old credential.
Logs are retained for 30 days.
Backups are retained for 7 days and are overwritten on a rolling basis.

13. Your choices and rights

Everyone can:

Delete your account and data in the App: Profile → Settings → Delete Account. This is permanent.
Access and correct most of your information directly in the App.
Turn off notifications and revoke location or camera access in iOS Settings.
Block other users and manage blocks in the App.

Depending on where you live (including residents of Texas, California, and other U.S. states with comprehensive privacy laws), you may have rights to confirm whether we process your personal data, access a portable copy, correct it, delete it, and appeal a denial. We do not sell personal data or use it for targeted advertising, so there is nothing to opt out of on those fronts. To exercise a right, email support@sourcererunlimited.com. We will verify your request by reference to your account email. You may appeal a denial by replying to our response.

14. Security

We protect information using measures including encryption in transit, authentication on every request, server-side authorization checks, rate limiting, and secrets held in a managed secrets store. No system is perfectly secure, and we cannot guarantee absolute security.

15. Children

The App is not directed to children and is intended for users 18 and older. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact support@sourcererunlimited.com and we will delete it.

16. Information about places, not people

The App displays a database of resale, thrift, and secondhand business locations compiled from Google Places, Apple Maps, OpenStreetMap, and Overture Maps, along with publicly posted estate and garage sale listings. This is business and public-event information, not personal information about App users. Attribution for these sources appears in the App under Settings → About & Legal.

17. Where your data is processed

We operate in the United States, and your information is processed and stored there. The App is intended for users in the United States. If you use the App from outside the United States, you understand that your information will be transferred to, and processed in, the United States, where privacy laws may differ from those of your country.

18. Changes to this policy

We may update this policy. If changes are material, we will notify you in the App or by email before they take effect, and update the "Last updated" date above.

19. Contact

Sourcerer Unlimited LLC
1101 Missouri St, Houston, TX 77006
support@sourcererunlimited.com