GYF Bazaar · Legal
GYF Bazaar privacy policy
Effective October 6, 2026 · Last updated October 6, 2026
This describes what GYF Bazaar does now. If we change how information is handled, we change this page first.
This policy covers GYF Bazaar only. The North 27 website and other North 27 products have their own policies. About GYF Bazaar
1 · Who we are
GYF Bazaar (“GYF”) is operated by North 27 LLC, an Arizona limited liability company based in Scottsdale, Arizona. We are responsible for the information described here. You can reach us at contactus@north27studio.com. Company details are on the company page.
2 · What this covers
GYF is a private resale tool. It helps individual sellers catalog their own personal items and prepare marketplace listings for them. It is not a public marketplace and it is not open for sign-up. Only a small number of approved sellers can use it.
GYF’s connection to eBay is being set up and tested in eBay’s test environment. Sections 4 and 5 describe what happens once a seller connects an eBay account.
3 · What GYF holds
Seller accounts
An email address and a password for signing in. Sign-in is handled by our authentication provider, Supabase (section 8). GYF does not keep its own copy of your password. Each seller also has a profile with a display name and the letter used to number their items. Only accounts we have approved can see anything in GYF.
Items
For each item: its details, such as brand, size, category and condition; the seller’s own notes, kept exactly as typed; listing text; prices; notes about comparable sales; whether and when it was approved; its status; and the dates it was created and changed.
Photos
The photos a seller takes of an item, kept as the original files. Photo files can contain information added by the phone or camera, such as when the photo was taken and, depending on the device’s settings, where. GYF stores original files as uploaded and does not remove that information.
Suggestions
GYF suggests item details from the photos and the seller’s notes, using OpenAI (section 8). Each suggestion records where it came from and how confident it is. Suggestions are kept apart from the details a seller enters or approves, and earlier suggestions are kept as a history.
A record of changes
GYF keeps a record of what was done to each item, by which seller profile, and when. For example, that an item was created or its photos changed.
4 · Information from eBay
A seller can connect their eBay account to GYF. Sign-in happens on eBay. GYF never asks for or stores a seller’s eBay password. eBay gives GYF a permission that the seller can withdraw at any time (section 10).
GYF asks eBay for four permissions:
- Basic eBay access. The standard access eBay requires for any connected app.
- Listings and inventory. To create, update and manage listings for items the seller has approved.
- Seller account settings. To use the seller’s business policies, such as shipping, payment and returns, that a listing needs.
- Orders, read only. To see whether an item has sold and where the sale stands. GYF cannot change orders or shipping.
Through these permissions GYF can receive: the permission eBay issues for the seller’s account; identifiers for the seller’s eBay account and listings; listing and inventory details; the seller’s business policies; and order and sale information. We aim to retrieve and keep only the eBay information GYF needs for these jobs.
5 · Buyers’ information
Order information from eBay can include details about the buyer, such as their name or shipping address. Buyers never use GYF. GYF uses order information only to follow the status of a seller’s own sales.
GYF does not send buyers’ personal information to OpenAI or to any other AI service. We do not use buyers’ information for marketing, and we do not contact buyers through GYF.
6 · What is collected automatically
- Sign-in cookies. Cookies that keep a seller signed in. They are necessary for GYF to work and are not used to track anyone.
- Ordinary request information. Like any website, GYF’s hosting provider receives normal request information when a page loads, including the IP address and browser type.
- Nothing else. GYF contains no analytics, advertising or tracking code.
7 · How it is used
To run GYF for its sellers. To keep the inventory and its photos. To suggest item details. To prepare and manage listings a seller has approved. To follow the status of sales. To keep GYF secure and working. To answer you when you write to us.
We do not sell information or share it for advertising.
8 · Service providers
These companies handle information so that GYF can work. Each receives only what its job requires.
Supabase: database, sign-in and photo storage
GYF’s data, seller accounts and photos are held with Supabase. Supabase also sends GYF’s sign-in and password-reset emails.
Vercel: hosting
The GYF application runs on Vercel, which receives the requests made to it as described in section 6.
OpenAI: item suggestions
To suggest item details, GYF sends OpenAI the seller’s notes for that item and its photos. Photos go to OpenAI as the files the seller uploaded, except Apple HEIC photos, which GYF converts to JPEG for this purpose without keeping the converted copy. GYF does not send OpenAI a seller’s email address or password, or any buyer’s information. OpenAI processes this under its API terms.
eBay
When a seller connects eBay, GYF exchanges information with eBay to manage that seller’s listings and follow their sales. eBay’s handling of information is covered by eBay’s own privacy notice.
Beyond these, we disclose information only if the law requires it, or to protect someone’s safety or our legal rights. If North 27 were sold or merged, GYF’s information could transfer as part of that.
9 · How long things are kept
GYF does not delete information on a schedule. Seller accounts, items, photos, suggestions and the record of changes are kept while GYF is in use, unless they are deleted at a seller’s request (section 10). Items and original photos cannot be deleted from inside GYF. This is on purpose, so nothing is lost by mistake.
Before GYF connects to eBay’s live environment, we will update this page to say how long information from eBay is kept.
10 · Deleting and disconnecting
Deleting your information
GYF does not have a delete-your-account button. To delete your GYF account and the personal information that goes with it, write to contactus@north27studio.com from the address on the account. We will honor the request. We may keep information we need for legal, security or fraud-prevention reasons, or for other legitimate operational reasons.
Disconnecting eBay
You can withdraw GYF’s permission on eBay at any time. Go to Account settings, then Sign in and security, then Third-party app access. You can also write to us and ask us to disconnect it.
11 · Security
What we do. GYF is served over HTTPS. Inside the app, database rules let only approved seller accounts see or change GYF’s information. Photos are kept in private storage with no public links, and GYF shows them through links that expire within an hour. The secret keys GYF uses to reach its service providers are kept on the server and never sent to browsers.
What we will not claim. No method of storing or sending information is completely secure, and we do not promise that GYF is. If a breach affects your information, we will tell you as the law requires.
12 · Your rights
You can ask us to show you what GYF holds about you, correct it, delete it, or send you a copy. Write to contactus@north27studio.com. We may need to confirm that a request really comes from you. If you believe GYF holds personal information about you, you can contact us.
GYF is not for children. It is used only by approved adult sellers.
13 · Changes to this policy
When this policy changes, the date at the top changes with it.
14 · Contact
Privacy questions, requests and complaints go to one address. We answer them directly.
North 27 LLC · Scottsdale, Arizona, United States
contactus@north27studio.com