Cody Marketplace Privacy Policy

DRAFT, not reviewed by counsel.

Last updated: October 25, 2026

This Privacy Policy explains how Cody Reading Inc. ("Cody," "we," "us," or "our") collects, uses, stores, and shares ("processes") personal information when you use Cody Marketplace at https://cody-marketplace.fly.dev and any related services that link to this policy (the "Services"). Cody Marketplace is a place where educators sell and share digital teaching resources.

This policy covers Cody Marketplace only. The Cody Reading literacy platform at https://www.codyreading.com has its own privacy policy.

If you have questions or concerns, contact us at privacy@codyreading.com.

Summary of Key Points

• What we collect. Your account details, your shop and resources if you sell, your orders and downloads if you buy, and technical information such as your IP address. See Section 1.
• Sensitive information. If you sell paid resources, our payment partner may collect your Social Security number, date of birth, bank account, and photo identification to verify you. Cody does not receive or store your full Social Security number or bank account number. See Section 1.
• Information from third parties. We receive verification and payout status from our payment partner, and, if you choose to import listings from another marketplace, the public information on your store pages there. See Section 1.
• Buyers stay private. We do not share Buyers' names, email addresses, or other personal information with Sellers. See Section 3.
• We do not sell your personal information or share it for targeted advertising.
• Your rights. Depending on where you live, you may have rights to access, correct, delete, or get a copy of your information. See Sections 9 and 11.

1. What Information Do We Collect?

Information you give us

Account information. When you create an account: your display name, your email address, and, if you choose one, a password, which we store only in hashed form. You can also sign in with a one-time link that we email to you.

Seller information. If you open a shop: your shop name, bio, avatar and banner images, and the resources you upload, including files, titles, descriptions, previews, and prices. Your shop name, bio, images, and published resources are public.

Support and communications. When you contact us: the content of your messages and any information you include.

Copyright and other complaints. When you send or respond to a copyright notice or other complaint: your name, contact details, and the information in your notice. When you use the "Report this resource" form: your email address, the reason you choose, and the details you give. Under our Copyright and DMCA Policy, we may forward a notice, including the complaining party's name and contact details, to the user whose content is the subject of the notice.

Information collected by our payment partner

Payments and seller payouts are handled by our third-party payment partner and its processing and identity verification partners.

• Buyers. When you pay, you enter your card details directly with our payment partner. Cody does not receive or store your card number or security code. We give our payment partner your name and email address with your order, and we receive a record of the payment, such as its amount, its status, and the payment partner's reference number.
• Sellers. To sell paid resources and receive payouts, you complete our payment partner's onboarding form, which may collect your legal name, address, date of birth, Social Security number or tax ID, bank account details, and a photo of your identification and a selfie. Cody does not receive or store your full Social Security number or bank account number. We receive your verification status, the last four digits of your bank account, and records of your payouts, and we store them with the account and payment reference numbers our payment partner assigns.

Our payment partner handles the information it collects under its own privacy notice, which is shown to you when you pay or set up payouts.

Information we create when you use the Services

• Transactions. Orders, the resources in them, prices, fees, refunds, disputes, and payouts.
• Library. The resources you have bought or downloaded, and when you obtained them.
• Seller records. Your verification status, fee rate and any fee offer, sales and earnings figures, and notes our staff add when reviewing a shop or a complaint.

Information from other sources

Imports from other marketplaces. If you choose to import your listings from another marketplace where you sell, such as Teachers Pay Teachers, we retrieve the public pages of the store you identify and copy information from them, including your store name, titles, descriptions, prices, preview images, and file names and sizes. We may compare your store name with your shop and account to check ownership. We do not ask for, receive, or store your password for any other marketplace.

Payment partner. As described above, we receive verification, payment, and payout information from our payment partner.

Information collected automatically

When you visit or use the Services, our servers and hosting provider automatically record certain information, such as your IP address, browser and device type, the pages you request, and the date and time of your requests ("Log and Usage Data"). We store the IP address and browser type of each sign-in session. We use IP addresses to protect the Services, for example by limiting repeated sign-in attempts and repeated reports. We do not use your IP address to determine your location.

All personal information you give us must be true, complete, and accurate, and you must tell us about changes to it.

2. How Do We Use Your Information?

We use personal information to:

• create and manage accounts, and let you sign in;
• show shops and resources, and deliver purchased and free resources to the right accounts;
• process orders, refunds, and disputes, and calculate fees and earnings;
• verify Sellers and pay them, through our payment partner;
• send you emails about your account, orders, downloads, shop status, and payouts;
• check that imported listings belong to the Seller who imports them, and handle copyright and other complaints;
• respond to questions and provide support;
• protect the Services, our users, and us, including preventing fraud, abuse, and infringement;
• understand how the Services are used and improve them;
• send you news about the Marketplace, where you have not opted out. You can unsubscribe at any time using the link in the email;
• comply with the law, including tax and accounting requirements, and enforce our Terms of Service.

We do not use your resources or personal information to train artificial intelligence models, and we do not send them to artificial intelligence services.

3. When and With Whom Do We Share Your Information?

Between Buyers and Sellers. We do not share Buyers' names, email addresses, or other personal information with Sellers. Sellers see their sales (date, resource, price, fees, and earnings) but not who bought. Buyers see a Seller's public shop information.

Payment partner. We share account, shop, and order information with our payment partner to process payments, verify Sellers, send payouts, prevent fraud, and meet its legal obligations, such as issuing tax forms.

Service providers. We share personal information with companies that help us run the Services, only as needed for them to do that work and under obligations to protect it:

A current list of our service providers is available on request from privacy@codyreading.com.

Business transfers. We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or part of our business.

Legal reasons. We may disclose information if we believe it is required by law, regulation, legal process, or a government request, or to protect the rights, property, or safety of Cody, our users, or others, including to respond to copyright and other complaints.

With your consent. We may share information for other purposes with your permission.

We do not sell personal information, and we do not share it for targeted advertising.

4. Do We Use Cookies and Other Tracking Technologies?

We use only cookies that are necessary for the Services to work: a sign-in cookie that keeps you signed in, and, if you follow an invitation link to import your store, a cookie that remembers the invitation for up to seven days. Your cart is saved in your account, not in a cookie.

We do not use analytics or advertising cookies, and we do not let third parties set cookies through the Services.

Most browsers let you block or delete cookies, but if you block necessary cookies, you will not be able to sign in or buy resources.

5. How Long Do We Keep Your Information?

We keep personal information only as long as needed for the purposes in this policy, unless a longer period is required or permitted by law.

• Accounts. We keep your account information while your account is open. If you ask us to close your account, we will delete or de-identify your account information within forty-five (45) days, except information we must keep for the reasons below.
• Transactions and payouts. We keep records of orders, refunds, disputes, fees, and payouts for seven (7) years to meet tax, accounting, and legal obligations, even after an account is closed.
• Resources. When a Seller removes a resource, we keep its files as long as needed to continue serving Buyers who already bought or downloaded it, as described in our Terms of Service.
• Complaints. We keep copyright notices, counter-notices, and related records as long as needed to apply our repeat infringer policy and to resolve or defend claims.
• Logs. Our hosting provider keeps server logs for a short period. We keep sign-in session and rate-limiting records, which include IP addresses, as long as needed to secure the Services and investigate abuse.
• Backups. Deleted information may remain in backups for a limited period until they are overwritten.

Our payment partner keeps the information it collects according to its own policy and legal obligations.

6. How Do We Keep Your Information Safe?

We use reasonable technical and organizational measures designed to protect personal information, including encryption in transit, hashed passwords, access controls, and private file storage that only lets Buyers download resources they are entitled to. However, no electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure.

7. Children's Privacy

The Services are intended for adults and are not directed to children. We do not knowingly collect personal information from children under 13, and people under 18 may not create accounts. If you believe a child has given us personal information, contact us at privacy@codyreading.com and we will delete it.

Resources on the Marketplace must not contain students' personal information or images of identifiable students without consent from a parent or legal guardian, as described in our Terms of Service. If you find a resource that contains a student's information, please report it to support@codyreading.com and we will review it promptly.

8. Do We Use Automated Decision-Making?

We use automated checks to help match imported listings to Sellers' files and to flag possible ownership conflicts for staff review. Our payment partner uses automated identity and fraud checks when verifying Sellers. Decisions to reject a Seller's verification are made by our payment partner under its own policies.

9. What Are Your Privacy Rights?

Account information. You can review and change your shop information in your dashboard. To change your account name or email address, or to close your account, contact us at support@codyreading.com.

Marketing emails. You can unsubscribe from marketing emails at any time using the link in the email. We will still send you emails about your account, orders, and payouts.

Withdrawing consent. Where we rely on your consent, you may withdraw it at any time. This does not affect processing we did before you withdrew it.

10. Controls for Do-Not-Track Features

Most web browsers include a Do-Not-Track ("DNT") setting. No uniform technology standard for recognizing and implementing DNT signals has been finalized, so we do not currently respond to DNT signals. Because we do not use advertising or cross-site tracking cookies, there is no cross-site tracking for a DNT signal to turn off.

11. Do United States Residents Have Specific Privacy Rights?

Depending on where you live, you may have the rights below. These rights are not absolute, and in some cases we may decline a request as permitted by law.

Categories of personal information we collect

The table below describes the categories of personal information Cody collects. Some information is collected directly by our payment partner under its own privacy notice and is not received by Cody; the table says where that is the case.

We use sensitive personal information only to provide and secure the Services, and not to infer characteristics about you. Because we use it only for these purposes, we do not offer a separate right to limit its use. Our payment partner separately determines how it handles sensitive information it collects directly.

Your rights

• Right to know whether we are processing your personal data
• Right to access your personal data
• Right to correct inaccuracies in your personal data
• Right to request deletion of your personal data
• Right to obtain a copy of the personal data you previously shared with us
• Right to opt out of the processing of your personal data for targeted advertising, the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects. We do not sell personal data, share it for targeted advertising, or use it for such profiling.
• Right to non-discrimination for exercising your rights

Depending on where you live, you may also have additional rights, such as the right to obtain a list of the third parties to whom we have disclosed personal data.

How to exercise your rights

Email us at privacy@codyreading.com. We will respond within forty-five (45) days, or tell you within that time if we need longer as the law allows. You may designate an authorized agent to make a request on your behalf. We will accept a request from an authorized agent only if you have verified your identity with us, given the agent written permission, and, where the applicable state's law requires, the agent has a valid power of attorney.

Some information is held by our payment partner, not by us. We will pass on requests that concern it, or you may contact our payment partner directly. We may need to keep transaction records to meet legal obligations even if you ask us to delete them.

Request verification. When we receive your request, we may need to verify that you are the person the information is about, using a method proportionate to the request, such as confirming control of your account email. We will use information provided in your request only to verify your identity or authority to make the request.

Appeals. Where applicable law provides an appeal right, you may appeal a denial by emailing privacy@codyreading.com. We will respond within the period required by applicable law (generally sixty (60) days) and explain the result. If the appeal is denied, we will explain how to contact the relevant state regulator or attorney general, as required by applicable law.

California "Shine The Light" Law

California Civil Code Section 1798.83 permits California residents to request, once a year and free of charge, information about the categories of personal information (if any) we disclosed to third parties for their direct marketing purposes and the names and addresses of those third parties. We do not disclose personal information to third parties for their direct marketing purposes. To make a request, contact us using the details below.

12. Do We Make Updates to This Policy?

We may update this policy from time to time. The updated version will be indicated by an updated "Last updated" date. If we make material changes, we will notify you by email or with a notice on the Services before the changes take effect.

13. How Can You Contact Us About This Policy?

Cody Reading Inc. 2810 North Church Street, PMB 936381 Wilmington, DE 19802 United States

Email: privacy@codyreading.com