Privacy Policy

• Browsing listings requires no account and no personal information.
• Selling requires an email address. Whatever contact details you choose to publish on a listing are public by design — that is the point of the listing.
• Sending an inquiry passes your name, email, any phone number you give and your message to the seller of that specific listing — or to Vac4Sale, where the listing has no seller address on file, so that we can pass it on.
• Saving a search stores the email address you give and the filters you chose, so we can email you when equipment matches. One click in any alert stops it.
• Payments are processed by Stripe. We never see or store your card number.
• Ask us to delete your data at support@vac4sale.com and we will.

Seller accounts

An email address, and whatever name, company name and phone number you choose to add. Sign-in works by emailed one-time link, so we store no password for sellers.

Listing content

Everything you enter about the equipment — description, specifications, photographs, videos, documents and location — plus the contact details you choose to publish. You control, per listing, whether your email address and phone number are shown.

Buyer inquiries and contact messages

When you contact a seller we collect your name, email address, any phone number you provide and your message, and we store a one-way hash of your IP address. The hash exists only to rate-limit abuse: it cannot be reversed into an address, and we do not use it to identify you.

Saved searches

If you ask to be emailed when new equipment matches a search, we store the email address you gave, the filters that make up that search, and how often you asked to hear from us. Every alert email carries a one-click unsubscribe link, and using it switches that saved search off.

Technical data

Standard server logs, aggregate page analytics, and a per-listing view count. Payment records are limited to the identifiers Stripe returns — subscription and customer references, amounts and dates. Card numbers never reach our servers.

• Publishing the listings sellers ask us to publish.
• Delivering buyer inquiries to the seller, sending the one-time links that sign you in, and sending the saved-search alerts you asked for. Receipts for paid listings are emailed by Stripe.
• Taking and managing payment for paid listings through Stripe.
• Detecting and preventing spam, fraud and abuse, which is the only purpose the hashed IP addresses serve.
• Understanding aggregate use of the site so we can improve it.
• Meeting legal, tax and accounting obligations.

We do not sell personal information, we do not share it with data brokers, and we do not use it to build advertising profiles.

That is the purpose of a marketplace listing, but the consequence is worth stating explicitly: an email address or phone number you publish can be seen, copied and crawled by anyone, including automated scrapers. If you would rather not publish a phone number, do not enable it — inquiries reach the email address on your seller account either way. Where a listing publishes no email address and has no seller account behind it, an inquiry is delivered to Vac4Sale instead, and we forward it.

When a listing is removed, expires or is marked sold, its page stops being served and drops out of search results as engines re-crawl. We cannot control third-party copies, caches or screenshots made while it was live.

Hydrovac News is a sibling site operated by the same team. Syndication is a per-listing choice you make when you publish and can change at any time. What is shared is the listing — its content and the contact details you already chose to publish — and nothing else: your account details, your billing records and inquiries sent to you are not shared with the other site’s audience.

Turning syndication off tells the other site to take the listing down, which it does shortly afterwards rather than in the same instant. It does not retroactively remove copies that third parties made while it was live.

• Stripe — payment processing for paid listings. Stripe collects your card details directly on its own checkout page and handles them under its own privacy policy.
• Resend — delivery of transactional email (sign-in links, inquiry notifications) and of the saved-search alerts you subscribe to.
• Vercel — hosting, content delivery and aggregate site analytics.
• Vercel Blob — storage and delivery of the files uploaded to a listing — photographs, walkaround video and spec sheet PDFs.
• Neon — the managed Postgres database that stores listings, seller accounts, buyer inquiries and saved-search alerts.

We may also disclose information where we are legally required to, or where it is necessary to investigate fraud or protect someone’s safety.

The sign-in cookie holds a signed session token so you stay logged in to your seller or admin account. It is strictly necessary — without it you would have to re-authenticate on every page — and it is removed when you sign out.

Page analytics are aggregate and privacy-preserving: they count visits and page views without setting a tracking cookie or building a cross-site profile. Per-listing view counts are shown to the seller as a total and are never broken out per visitor.

• Listings are kept while your account holds them. An expired or sold listing stays in your dashboard so you can relist without retyping everything, and is deleted when you ask us to delete it or close the account.
• Seller accounts are kept while the account exists, and deleted on request.
• Inquiries and contact messages have no fixed expiry: we keep them while they are still useful for resolving a dispute or investigating abuse, and delete them on request. The hashed IP address stored alongside an inquiry lives exactly as long as that inquiry does — it is used only for rate limiting, and it cannot be turned back into an address.
• Saved searches stop sending as soon as you use the unsubscribe link in any alert email, and the saved search itself is deleted on request.
• Records of what was sent to Hydrovac News — which include a snapshot of the contact details published on the listing at the time — are deleted thirty days after they are queued, once they have been delivered or superseded.
• Per-visit view records are deleted after six months. The view count a seller sees is a running total, never a list of who visited.
• Payment records are kept as long as tax and accounting rules require.

Depending on where you live you may have rights to access a copy of your data, to correct it, to delete it, to object to or restrict certain processing, to receive it in a portable format, and not to be discriminated against for exercising any of them. We apply these to everyone rather than checking your jurisdiction first.

To make a request, email support@vac4sale.com from the address associated with your account, or tell us which listing or inquiry the request concerns so we can find it. We may need to verify your identity before acting on a request affecting an account.

One limit worth stating plainly: deleting your account removes your listings from this site, but we cannot retract emails already delivered to a buyer or seller, or remove copies that third parties made while a listing was public.

Passwords, where used, are stored only as salted hashes, and seller sign-in avoids passwords entirely by using one-time emailed links. IP addresses used for rate limiting are hashed before storage. No system is perfectly secure, and we do not claim otherwise — if a breach affects your information we will tell you as promptly as the applicable law requires.

If you are outside the United States, using this site involves transferring your information to the United States, where privacy law differs from that of your home country.

The company responsible for this site, and for the personal information described here, is Hydrovac News LLC, 5900 Balcones Drive, Ste 100, Austin, TX 78731. Vac4Sale is a trading name of that company.

Questions about anything here go to support@vac4sale.com. The terms of service cover the rules for using the marketplace itself.