Privacy Policy

Effective Date: 14 September 2026

For users resident in Canada.

Our role in your privacy

Karrot Canada Corp. (“Karrot”, “we”, “us”) is responsible for the personal information we handle when you use the Karrot app and website (our “Service”). This policy explains what data we collect, how we use it, whom we share it with, how long we keep it, how we protect it, and your rights and choices.

Data we collect

A. Data you provide

• Your account information. When you create a Karrot account, we collect your username together with either your mobile phone number or your email address, depending on the sign-up method you use. We also collect the city and neighbourhood you choose, along with information about your preferences, such as your language and your account settings. If you sign up using Apple, Google or Facebook, see “Data we receive from others” below.
• Your listings and activity. We collect information about the items you list such as your item descriptions, photos and prices. We also collect information about your activity on Karrot, such as your profile picture, the reviews you leave, Karrot members you follow and any media you upload.
• Your messages. We collect the messages you send and receive through Karrot, including your chats with other members and your emails and customer support messages, along with associated information such as dates and attachments.
• Your managed transaction details. If you buy or sell with payment and delivery through Karrot, we collect your chosen payment method, card identifiers such as the last four digits of your card number, and your bank or payout details. We also collect information about the transaction itself, such as your orders, payments, refunds, invoices and the sales tax charged on your orders, along with the full name, email, phone number, and address you provide. Your full card number is handled by our payment provider and is not stored by Karrot.
• Your tax information. If you sell through Karrot, tax rules may require us to collect information we need to meet our reporting requirements, including identification information, such as your name, date of birth, primary address, jurisdiction of tax residence, tax identification number and bank account number, as well as activity information, such as the compensation paid or credited to you on Karrot.
• Proof of your identity. If we ask you to verify your identity, we collect your government-issued ID, along with a photo of your face. With your express consent, our identity verification provider compares the photo of your face with the photo on your ID using facial recognition technology.

B. Data we collect automatically

• Usage data. When you use Karrot, we collect information about how you engage with the Service, such as when and how long you use it, the pages you view, the searches you run, the features you use, how you interact with ads, and the interest categories we infer from your activity.
• Technical data. We collect information about the device you use to access Karrot, including your IP address, device identifiers, operating system and technical diagnostics.
• Location data. We also infer your approximate location such as your city or region, based on your IP address. If you grant us permission, we will also collect your device’s precise location.
• Security signals. We collect information about the security of your account and of the Service, such as fraud indicators and records of any account restrictions.
• Cookies and similar technologies. A cookie is a small piece of data that we send to your browser, which may then be stored on your device so we can recognise it when you return. You can set your browser to notify you when you receive a cookie or to decline certain cookies. If you choose not to accept cookies, some features of the Service may not be available to you.
• Compliance records. We generate records relating to your use of the Service, such as the consents you give, the results of any identity verification, and any safety or security checks we carry out on your account.

C. Data we receive from others

• Your sign-in provider. If you register or log in using Apple, Google or Facebook, that provider shares information with us such as your name, email address and profile picture, depending on your settings with them.
• Our payment provider. When you use managed transactions, our payment provider shares information with us such as the status of the transaction and the results of any identity checks it has carried out.
• Our delivery partner. When a parcel is in transit, our delivery partner shares tracking updates with us so we can keep you informed.
• Other Karrot members. Other members may leave reviews about you or report concerns about you to us.
• Authorities and rightsholders. We may receive information about you from public authorities or rightsholders, for example where a request or complaint is forwarded to us.

How we use data

• To provide the Service. To let you create and use your account, browse, list, and complete local transactions and managed transactions, and to give you updates about them.
• To confirm your location. To verify your neighbourhood and to show you and nearby items on the map view.
• To process payments. To take and process payments, refunds and payouts for managed transactions, and to issue invoices and receipts.
• To ship items. To arrange and track delivery of items bought and sold through a managed transaction.
• To personalise your experience. To customise your feed, rank and recommend listings, including by using internal machine-learning and AI models.
• To improve Karrot. To improve our products and services, including by developing internal machine-learning and AI models. We use these models only to run and improve the Service and keep it safe.
• To show you relevant ads. To select, deliver and measure the ads you see on Karrot. We choose which ads to show you using information such as your interest categories, your usage data, your approximate location and your device information, and we measure how those ads perform.
• To verify your identity. To confirm who you are when you sell for payout or receive payouts, for higher-value transactions, to resolve disputes, where our fraud and safety checks indicate that additional verification is needed, and where our payment provider is required to verify your identity under anti-money-laundering law. If you choose to verify your identity, we also display a verified badge on your profile so other members know your identity has been confirmed.
• To keep you and the community safe. To detect and prevent fraud, abuse and unauthorised access, including through automated checks on registration, sign-in, listings, chat and device signals.
• To enforce our rules. To investigate and respond to conduct that breaches our Terms of Service or Community Guidelines, including by warning, restricting or removing accounts and listings.
• To provide support. To answer your questions and handle reports, appeals and disputes.
• For surveys and feedback. To ask for your feedback, run surveys and interviews, and use what we learn to improve the Service.
• For contests and promotions. To administer contests and promotions you take part in, including to contact you and deliver any prize or reward.
• For marketing. If you sign up for marketing emails or texts, we’ll send you news, tips and offers about Karrot. You can unsubscribe using the link in the email, stop our texts by following the instructions in the message, or contact us using the details in “Contact and changes” below. You may still get messages we need to send you about your account and your transactions, like verification codes and order updates.
• For legal and compliance purposes. To meet our legal obligations and to establish, exercise or defend legal claims. To comply with tax reporting obligations, we may identify sellers we have to report, verify the information we hold about them, prepare our reports, and inform those sellers about what we reported.

Who we share your data with

• Other members and the public. Your listings and public profile information are visible to other Karrot members. Depending on how you use Karrot, they may also be visible to people who are not signed in, such as visitors browsing the app or website. In a managed transaction, the seller may see the buyer’s name and delivery address in order to send the item, and the buyer may see the seller’s return address if the item is returned; this information may also appear on the shipping label.
• Sign-in providers. If you register or log in using Apple, Google or Facebook, we share information such as your app ID and sign-in tokens with that provider.
• Service providers. We may share your information with third parties that provide services on our behalf, such as payment processing, shipment delivery, identity verification, analytics, cloud hosting, security, fraud prevention, customer support and advertising.
• Affiliates. We may share your information with other companies in our corporate group that act as service providers to help us operate and improve Karrot.
• Legal and compliance. We may provide your information in response to a search warrant or other legally valid inquiry or order, or to another organization to investigate a breach of an agreement or a contravention of law or to detect, suppress or prevent fraud, or as otherwise may be required or permitted by applicable law or legal process. This includes disclosures we make to meet our tax reporting obligations. We may also disclose your information where necessary to establish, exercise or defend legal claims and to investigate or prevent actual or suspected loss or harm to persons or property.
• Personalised advertising. We may share a hashed version of your email address and your interest categories with advertising partners to show you more relevant ads and reach people with similar interests. You can opt out in Settings.
• Sale of business. We may share your personal information in connection with a proposed or completed merger, acquisition or sale (including as part of insolvency or bankruptcy proceedings) involving all or part of Karrot, or as part of a corporate reorganization or other change in corporate control.

International transfers

Where your data is stored or accessed. We and our service providers (including affiliates of our corporate group) may access, store and otherwise process your information outside of Canada (including outside of Quebec) in jurisdictions such as the United States. We and our service providers may disclose your personal information if we are required or permitted by applicable law or legal process, which may include lawful access by foreign courts, law enforcement or other government authorities in the jurisdictions in which we or our service providers operate. If you would like information about how we or our service providers process your personal information, you can contact us using the details in “Contact and changes” below.

How long we keep your data

Retention practices. We retain personal information only for as long as necessary to fulfil the purpose for which it was collected, or for a period required by law. For example, we may be required to retain seller records to comply with tax reporting requirements, or we may retain certain information after an account is deleted to enforce our Terms of Service and Community Guidelines. Once personal information is no longer required, we delete or anonymise it.

How we protect your data

Our safeguards. We use technical, physical and administrative measures to protect your data. No system is perfectly secure, so please protect your own account details too.

Our policies and practices

We are committed to protecting the personal information in our care. We maintain policies and practices that govern how we handle personal information and ensure its protection. For example:

• Privacy Officer. Our Privacy Officer is the person in charge of protecting personal information, approving our privacy policies and practices, and overseeing our compliance with privacy law.
• Roles and responsibilities. Access to personal information is limited to employees who need it to do their jobs, and only for as long as their task requires. Everyone who handles personal information is trained to protect it and is responsible for doing so at every stage of the information lifecycle, from collection through to destruction.
• Questions and Complaints. If you have questions or concerns about how we handle your personal information, you can contact our Privacy Officer using the details at “Contact and changes” below.

Your rights and choices

• What you can ask for. Subject to exceptions under applicable law, you have the right to access, update, rectify and correct inaccuracies in your personal information and to withdraw your consent to our collection, use and disclosure of your personal information. To exercise any of these rights, contact our Privacy Officer at privacy@karrotmarket.com; we may need to verify your identity.
• What you can do in the app. When you are signed in to the Karrot app, you can view and update your account information, and edit or delete your listings. Your notification and privacy preferences can be managed in Settings, where you can also delete your account.
• Cookies. You can control non-essential cookies through your browser or our cookie settings; blocking some may affect how Karrot works.

Contact and changes

Contact. Privacy Officer, Karrot Canada Corp., 119 Spadina Avenue, Suite 701, Toronto, ON M5V 2L1, Canada · privacy@karrotmarket.com.

Changes. We may update this privacy policy periodically to reflect changes to our privacy practices. We encourage you to periodically review this page to ensure you are familiar with those changes. We will indicate at the top of this privacy policy when it was most recently updated.