Privacy Policy

Cycle Heap is independently operated in Oregon, United States.

Website: beneaththeheap.com. Privacy questions and requests about your information: beneaththeheap.support@gmail.com.

Correspondence is handled by email. No separate mailing address is published.

To be clear about scope, this is what exists today.

• Enabled now: free accounts, public seller profiles, listings with photos, buyer to seller messaging, saved searches, following, blocking, reporting, moderation for administrators, and optional one time identity verification.
• Not enabled now: there is no cart, no checkout, no card payments, no payouts, no commissions, and no order processing. Cycle Heap does not currently take payments, hold money, or ship anything itself.

• Account: your email address, name, and account role. Signing in and password handling are managed by the Base44 platform that hosts Cycle Heap, so we never see your password.
• Public profile: display name, profile photo, bio, and location such as city and state. Your phone number is saved on your account for your own reference but is never exposed on your public profile.
• Selling preferences: shipping and pickup defaults, whether you accept offers, and which payment methods you say you accept. These are preferences only. We do not store bank details, card numbers, or payment handles.
• Listings: title, description, price, category, condition, motorcycle make, model and year, photos, location, and shipping or pickup options.
• Messages: the content you send, the email addresses of both participants, display names and profile photos stamped onto the conversation, read status, and the listing the conversation refers to. This can include payment-related details that a member chooses to type into a message, which Cycle Heap does not request, review, or verify.
• Saved searches and follows: the filters you save and the sellers you follow.
• Reports: if you report a listing, a member, or a message, we store the reason, any details you add, and a snapshot of the reported message at that moment so administrators can review it even if the original is later deleted.

Listing photos and profile photos are stored publicly. They are placed in public file storage, which means anyone who has the link can open them, even without signing in, and the link does not expire. This applies to the photos you attach to a listing, the profile photo you use on your account, and the screenshots you upload to import a listing. Please do not put anything private into a listing or profile photo.

Uploading is one way only. There is no self-service way to delete an individual uploaded file, in this app or through the platform it runs on. You can remove a photo from a listing or from your profile, but that only removes the reference to the file, and the file itself is not deleted. If you need an uploaded file removed, contact us and we will ask Base44 Customer Care whether they can help. We cannot promise that an old file can be located or successfully removed, and removing a photo will not remove copies that have already been saved, screenshotted, or indexed by search engines elsewhere.

Identity verification photos are the exception. They are handled privately. See the next section.

Verification is optional and one time. You take a photo of yourself holding a handwritten note, and an automated photo check reviews it.

This is an automated image check. It is not proof of who someone is, and it does not confirm a member's legal name, that the person in the photo is the account holder, or that they are trustworthy.

• For new verification attempts, your verification photo is uploaded to private file storage rather than public storage.
• We create a short lived private link to that photo, valid for about five minutes, and pass it to an AI vision service so it can carry out the check.
• The result we save on your account is a single yes or no. Your verification photo, the private link, and the AI service's written explanation are not saved to your profile, your listings, or your messages.
• Your verification photo may remain in storage after verification. The platform cannot currently delete an individual uploaded file on request, so we cannot guarantee that the verification photo is erased.
• Historical uploads may differ. Older verification attempts were submitted before private storage was introduced, so those photos may have different storage characteristics, including having been stored publicly at the time they were uploaded. Verification photos submitted today use private storage.
• Verification is optional, and passing it does not guarantee a member's identity, honesty, or the safety of a transaction. See the Terms of Service for what the badge does and does not mean.

Your public profile shows your display name, profile photo, bio, location, whether you are verified, and the payment methods you say you accept. Your email address, phone number, account role, and any payment account details are never included in your public profile.

Your listings, including their photos and location, are visible to anyone, including people who are not signed in.

When you use the distance filter, the location text is sent to OpenStreetMap's Nominatim service to be converted into map coordinates. Those results are kept only in temporary memory while the page is open and are not stored in our database.

A conversation is readable by the two people in it. Administrators can also review messages that have been reported. Reports about listings, members, and messages are readable only by administrators.

When you block someone, their ID is stored in a private list on your account. It is used to hide their listings from you and to prevent messaging between you.

• The Base44 platform hosts Cycle Heap and provides sign in, databases, and file storage.
• An AI vision provider performs the one time identity verification check.
• OpenStreetMap Nominatim converts a location into coordinates for distance filtering.
• Email is used to answer support and privacy requests sent to the address on this page.

Cycle Heap does not currently collect or process payments through checkout. Checkout is not available, no payment or payout information is collected from buyers or sellers, and Cycle Heap does not receive or store card numbers.

Buyers and sellers are expected to arrange payment, shipping, or pickup directly with each other, and members may choose to exchange payment-related details in private messages. Messages are not filtered for this, and Cycle Heap does not receive, review, or verify anything shared in them.

Do not send card numbers, bank details, or other sensitive financial information to another member, in a message or anywhere else on Cycle Heap. Cycle Heap will never ask you for your card number or your password.

If payment features are added later, this policy will be revised and republished before any payment is taken.

Cycle Heap keeps a small amount of information in your browser's storage:

• A flag recording that you dismissed the welcome screen.
• Short lived in app state, such as the details carried over when you use the option to sell an item like one you are viewing. This clears when it is used or when your browser session ends.
• Your sign in session, so you stay signed in between visits.

You can delete your own account from your profile page. Deleting is permanent and you will not be able to sign in afterwards. This is what actually happens:

• Your account and profile record are deleted, so you can no longer sign in.
• Your listings are not deleted. They are set to removed, which hides them from browsing, and your name, email, and profile photo are cleared from them. The listing's title, description, price, and photos remain in the record.
• Your saved searches are deleted.
• You are removed from other members' following lists.
• Listing reports you filed are deleted.
• Reviews and order records tied to you are deleted. These relate to checkout, which is not enabled.
• Messages are anonymized rather than erased. Your name, email, account ID, and photo are replaced with a deleted member label on the messages you sent and the ones you received. The message content stays visible to the other participant so their conversation history is not broken.

What is not deleted, and why:

• Uploaded files are not deletable by you. There is no self-service way to delete an individual uploaded file, in this app or through the platform it runs on. We remove the references to your photos from your listings and profile, but the files themselves are not removed. Contact us if you need a file removed and we will ask Base44 Customer Care whether they can help, though we cannot promise that a file can be located or successfully removed.
• Public listing and profile images can remain accessible. Because those files were stored publicly, they can still be opened through URLs that were already issued, even after your account is deleted. Those links cannot be revoked.
• A report you filed about a member or a message is kept. Reports about members and messages are retained so moderation history stays intact, and the record keeps a reference to your former account ID. Listing reports are deleted. If you want a member or message report you filed removed, contact us.
• Deletion is partly best effort. Deletion goes ahead only if the essential steps, which are anonymizing messages and listings and deleting saved searches, all succeed. A few secondary steps, such as removing you from following lists and deleting reviews or order records, are best effort. If one of those fails it is logged and deletion still proceeds, so a small amount of secondary data may remain.
• Some internal references remain. Internal system fields that link records together are not modified during deletion. They are not shown anywhere in the interface.
• Legally required retention. Information may be kept where the law requires it.

Because of these limitations, we do not claim that every copy of your data or files has been permanently erased. If you need help with a deletion request, contact beneaththeheap.support@gmail.com.

Cycle Heap is not intended for anyone under 18. Accounts are limited to people who are 18 or older.

When this policy is published, the effective date will be the date it is posted on the website. We may update it, and the revised version will be posted on the website with an updated effective date. Where a change is material, we will provide additional notice when appropriate, for example through a notice in the app or by email.

For privacy questions, or to ask about the information we hold on you, contact beneaththeheap.support@gmail.com. Support inquiries are generally reviewed within 2 to 3 business days when practical.