1. Who we are, and what this policy covers
Golden Land Market is operated by GreenHorizon Ventures LLC, a Delaware limited liability company ("we", "us", "our"). This policy explains what personal information we collect through the Golden Land Market website, why we collect it, who it reaches and how long we keep it.
It covers the public website, seller accounts and the inquiry flow. It does not cover what a seller does with an inquiry after we deliver it to them, or what any third-party site you reach from a link here does with your information.
Questions about this policy go to privacy@goldenlandmarket.com, or by post to:
GreenHorizon Ventures LLC
18117 Biscayne Blvd PMB 62797
Miami, FL 33160
2. The short version
- We do not sell personal information, and we do not share it for cross-context behavioural advertising or targeted advertising.
- There is no advertising technology on this site — no advertising trackers, no retargeting pixels, no third-party behavioural advertising cookies.
- The cookies we set are the ones the site needs to work: session, sign-in and security.
- A buyer inquiry is delivered to the seller of that listing. That is the entire point of sending one.
- Anything a seller publishes in a listing or a company profile is public.
- Closing an account does not delete your data immediately. Retention periods run from closure, and they are set out in section 9.
3. Information we collect
Information you give us
If you open a seller account: your name, your email address, a private contact telephone number, the password you choose (which we store only as a cryptographic hash, never in a readable form), and your company details — company name, contact details, the state you are based in, and anything else you enter on your profile.
Your private contact telephone number is for us to reach you. We use it to contact you about your account, your listings, moderation, support or security when that is appropriate. It is not published to buyers, and it does not appear on your listings or your company profile. Whether buyers see a telephone number at all is a separate choice you make on your company profile, which has its own public phone number that is shown only if you choose to publish it. We do not use your private number for marketing without your separate permission.
If you publish a listing: everything you enter about the parcel — location, parcel identifiers, acreage, price and purchase terms, descriptions — and the photographs and any other files you upload.
If you send an inquiry as a buyer: your name, your email address, your telephone number if you choose to give one, and your message. No account is needed to send an inquiry.
If you report a listing or contact us: whatever you put in the report or the message, including any contact details you choose to give. A report needs no account and no email address.
When you register, a record of what you agreed to: the version of the documents we showed you at the time, the date that version takes effect, whether that version was final approved wording rather than a draft, the exact wording of the two confirmations you were shown, the moment you confirmed them, and the IP address and browser user agent the registration came from. We keep it because a record that cannot say which wording somebody saw is not a record of anything. It is never overwritten — accepting a later version adds a row rather than replacing one. We keep it with our audit and compliance records; section 9 says for how long.
Whether the wording was final and whether it had yet taken effect are two separate things, and the record keeps them separate: wording can be published as final some days before the date it comes into force, and a record that ran the two together could not tell you afterwards which was true when you confirmed.
Information we collect automatically
Session records. Every visitor to the site gets a session, because the inquiry and report forms need one to carry their security token. The session record holds your IP address and your browser user agent along with the session's own data. This applies whether or not you have an account and whether or not you ever send anything.
Request and server logs. Our servers and our hosting platform record technical details of requests — IP address, user agent, the URL requested, timestamps, response codes and error information — for security, abuse handling and debugging.
Abuse-handling records. We store the IP address and user agent alongside a buyer inquiry, the IP address alongside a listing report, and the IP address alongside significant seller and administrative actions in our audit trail (including the record of a seller's on-listing attestations). These are what make fraud, spam and abuse investigable. The IP address and user agent behind an inquiry are not shown to the seller.
Cookies. See section 7.
Error and performance data. When something goes wrong, diagnostic details about the error — including a stack trace and technical request metadata — are sent to our error-monitoring provider so we can fix it. It is configured not to attach user identities, IP addresses or request bodies by default. See section 6.
Password breach check. When you set or reset a password we check it against a public database of passwords exposed in known breaches, using a method that sends only the first five characters of a hash of the password and never the password itself or anything identifying you.
Photographs. Every uploaded photograph is re-encoded before we store it, which removes embedded EXIF metadata including any GPS coordinates. We store the file name you uploaded and a checksum. What we keep is the re-encoded image, not your original file.
We do not collect precise device location from your browser, we do not build advertising profiles, we do not track which listings an individual visitor looks at, and we do not buy personal information from data brokers.
4. Why we use it
We use personal information to:
- run the marketplace: create and maintain your account, publish your listings, deliver buyer inquiries to sellers, and show you your own dashboard;
- keep the Service secure and honest: authenticate sign-ins, apply rate limits, detect and investigate fraud, spam, abuse and misuse, moderate listings, and enforce our Terms of Use;
- send service messages: email verification, password resets, inquiry notifications, moderation and listing-status messages, account closure and reactivation messages, security notices and notices of important changes;
- contact a seller by telephone, on the private contact number they gave us, about their account, listings, moderation, support or security when that is appropriate;
- keep the site working: monitor errors and performance, and diagnose faults;
- keep records we need for legal, audit, dispute-resolution and compliance purposes; and
- comply with law and respond to lawful requests.
5. What is public
Golden Land Market is a public marketplace. A published listing and the seller's company profile are public by design: they are visible to anyone, they appear in our search results and sitemap, and search engines and other services may index, cache and copy them.
Do not put anything in a listing, a company profile or a photograph that you do not want to be public. Buyer inquiries and reports are not public, and neither is a seller's private contact telephone number: the only telephone number on a company profile is the public one the seller chooses to publish.
Listings that are draft, awaiting review, archived, sold, paused or legally blocked are not on the public site, and are excluded from our sitemap.
6. Who we share it with
Sellers. When you send an inquiry about a listing, we deliver it by email — with the name, email address, telephone number (if given) and message you provided — to the seller of that listing, and the seller can also read it in their dashboard. The reply-to address on that email is yours, so a seller who hits reply writes to you directly and you learn their address. We do not pass on the IP address or user agent we recorded. That seller then holds your information as an independent party and decides for themselves what to do with it; we do not control that, and this policy does not govern it. There is no messaging system inside the Service.
Other sellers or visitors do not receive your inquiry. Inquiries are visible to the seller of the listing you wrote about, and to us.
Service providers. We use a small number of providers to run the Service, and they may process personal information only to provide their service to us:
- Hosting and database. Our application platform and managed database, where the Service runs and the data lives.
- Object storage. Uploaded photographs are held in a private object-storage bucket. They are not publicly listable; a photograph is delivered through a short-lived signed link generated when a page is rendered.
- Transactional email. Resend delivers our service messages — verification emails, inquiry notifications, moderation and account messages — and therefore handles the recipient's email address and the contents of the message, which for an inquiry notification includes the buyer's name, email address, telephone number if given, and message.
- Error monitoring. Diagnostic information about application errors is sent to Sentry so faults can be found and fixed, configured not to attach user identities, IP addresses or request bodies.
- Maps. A listing page embeds a map from OpenStreetMap. Because the map is loaded from openstreetmap.org by your browser, that service receives your IP address and the parcel's coordinates when the page loads. We send it nothing about you, and we receive nothing back about you.
- Password breach check. Setting or resetting a password sends a partial, anonymised hash prefix to the Have I Been Pwned service, as described in section 3.
Legal and safety. We may disclose information where we reasonably believe it is required by law, legal process or a lawful government request, or where it is necessary to investigate suspected fraud or abuse, to enforce our Terms, or to protect the rights, property or safety of users, the public or us.
Business transfer. If we are involved in a merger, acquisition, financing or sale of assets, personal information may be transferred as part of it, subject to this policy or a successor policy with equivalent protections.
We do not sell or share personal information
We do not sell personal information, and we do not share personal information for cross-context behavioural advertising or targeted advertising, as those terms are used in United States state privacy laws. We have not done so in the preceding twelve months.
Disclosing personal information to the service providers above, so that they can provide their service to us, is not a sale or a share.
7. Cookies and similar technologies
We use only what the site needs in order to work:
- a session cookie, set for every visitor, because the inquiry and report forms carry a cross-site request forgery (CSRF) token and that token needs a session;
- a CSRF token cookie, which is part of the same protection;
- a sign-in cookie for sellers who are signed in, and a "remember me" cookie if you ask us to remember you; and
- cookies that hold basic necessary preferences you set.
There are no advertising cookies and no behavioural tracking cookies on this site, and no third-party analytics tag. Because there is no non-essential cookie to consent to, we do not show a cookie consent banner — putting one up when there is no choice to make would be theatre rather than a choice.
If we ever add analytics or advertising technology, we will revisit this section, update this policy, and put in place whatever consent mechanism the law then requires before enabling it.
You can block or delete cookies in your browser, but the sign-in and the forms will not work without the essential ones.
8. Analytics and advertising
At launch we run no third-party analytics, no advertising technology, no advertising trackers, no retargeting pixel and no social-media tracking pixel. We do not participate in behavioural advertising in any form, and we do not allow third parties to collect personal information about you through this site for their own advertising purposes.
If that changes, this policy changes first.
9. How long we keep information
While your account is open and the relationship is active, we do not delete your information on an age-based schedule; an active paid subscription, once billing exists, also counts as an active relationship.
After an account is closed or the relationship otherwise ends, we keep information for approximately the following periods, after which it is deleted or de-identified:
- Inquiries and leads — approximately 24 months.
- Listings — approximately 24 months after account closure or deletion.
- Photographs — removed from primary storage within approximately 30 days once deletion applies; copies in backups may persist for up to approximately 90 days.
- Audit, moderation, abuse and security records, and the record of what you agreed to when you registered — approximately 36 months.
- Account and company information — approximately 24 months after closure.
These periods are approximate, and we may keep information for longer where it is subject to a legal hold, required by applicable law, or needed for an ongoing dispute, a fraud, abuse or security investigation, or the establishment, exercise or defence of legal claims. We honour valid deletion requests where the law gives you that right, subject to those exceptions.
Closing an account does not delete your information immediately. It disables sign-in, removes your public seller profile, archives your listings so they are no longer public, and starts the periods above running.
Inactive accounts
An account may become a candidate for archiving or deletion after approximately 24 months with no sign-in and no active subscription. Before we archive or delete an inactive account, we will give you notice and approximately 30 days to sign in, respond or reactivate. After that we will handle the account according to the retention periods above.
10. Your privacy choices and rights
As a matter of policy, and regardless of which state you live in, we give people in the United States the ability to ask us to:
- access the personal information we hold about you, and tell you how we use it;
- correct personal information that is inaccurate; and
- delete personal information we hold about you.
To make a request, write to privacy@goldenlandmarket.com from the email address on the account, or tell us enough for us to find the records if you do not have an account. We may ask you for information to verify who you are before we act, because acting on an unverified request is itself a privacy risk. Requests are handled manually at present.
We will respond promptly and within a reasonable time, and within any deadline that applicable law sets. We do not promise a fixed turnaround beyond that. If we decline a request, we will tell you why, and you may ask us to reconsider by replying to the same address.
We will not discriminate against you for exercising these rights.
Some of what we hold cannot be deleted on request — for example records we must keep for legal, tax, audit, security or fraud-prevention reasons, and records needed for an ongoing dispute. Where that applies we will tell you.
Additional rights may apply to you depending on where you live. Several United States state privacy laws give residents further rights, such as the right to obtain a portable copy of your information, to opt out of profiling with legal effects, or to appeal a refusal. Where such a right applies to you, we will honour it. Write to privacy@goldenlandmarket.com and say what you want; you do not need to name the statute.
We do not sell personal information and we do not share it for targeted advertising, so there is nothing for you to opt out of in that respect.
11. Security
We take reasonable measures to protect personal information, including: transport encryption (HTTPS) across the site, with HSTS in production; passwords stored only as salted cryptographic hashes, with a minimum length and a check against known breached passwords; cross-site request forgery protection on forms; rate limiting on sign-in, registration, password reset, inquiries and reports; a private object-storage bucket, with photographs served only through short-lived signed links and stripped of embedded location metadata; browser security headers; role-separated administrative access; and an audit trail of significant administrative actions.
No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If you believe you have found a vulnerability, please report it to security@goldenlandmarket.com — reports are welcome, and we would rather hear from you.
12. Children, and the age requirement for seller accounts
A seller account requires you to be at least 18, to have the legal capacity to enter into a contract, and — where you are acting for a company or another organization — to have authority to bind it. That is a requirement of the Terms of Use, and we do not knowingly create or keep a seller account for anyone under 18.
Browsing listings and sending an inquiry need no account, and we do not ask a visitor's age. The Service is a marketplace for land: it is not directed to children and it has nothing aimed at them.
We do not knowingly collect personal information from children in violation of applicable law. If you believe a child has given us personal information, write to privacy@goldenlandmarket.com and we will look into it and delete what we should.
13. Users outside the United States
Golden Land Market is operated from the United States and is intended for users in the United States. If you use the Service from elsewhere, your information will be processed in the United States, where privacy laws may differ from those of your country.
14. Changes to this policy
We may update this policy. When we do, we will change the version and effective date shown on this page, and we will give notice of material changes by email to registered sellers or by a notice on the Service before the change takes effect.
15. How to contact us
- Privacy: privacy@goldenlandmarket.com
- General and support: hello@goldenlandmarket.com
- Legal, copyright and DMCA: legal@goldenlandmarket.com
- Security: security@goldenlandmarket.com
- Telephone: +1 (786) 628-9933
GreenHorizon Ventures LLC
18117 Biscayne Blvd PMB 62797
Miami, FL 33160