Privacy

Last updated 4 October 2026.

Who we are

The Auctioneer (theauctioneer.ai) is operated by BlueMesa Systems LC, a New Mexico limited liability company, 1209 Mountain Road Pl NE, Albuquerque, NM 87110, USA (“we”). We are the data controller for personal data processed through this service. Contact: [email protected].

What we collect and why

Without an account we collect no personal data. Filters and preferences stay in your browser. Our hosting provider records standard server logs (IP address, user agent, requested URL) for security and abuse prevention, retained for up to 30 days.

With a free account we process your email address (to send you a sign-in link and, if you choose, alerts), the auctions you save, and sign-in timestamps. Legal basis: performance of a contract (GDPR Art. 6(1)(b)).

With a Pro subscription we additionally process your subscription status, plan, renewal date and a Stripe customer reference. Card numbers never reach us: payment is handled entirely by Stripe. Legal basis: performance of a contract; retention of billing records for as long as tax and accounting law requires (GDPR Art. 6(1)(c)).

Saved-search alerts (Pro) are sent only to searches you create and can be switched off per search or by deleting the search.

Processors

We use these sub-processors, each under a data processing agreement: Cloudflare, Inc. (hosting, CDN, edge compute, and the accounts database on Cloudflare D1 — data may be processed at Cloudflare edge locations worldwide, with EU data localisation where available); Stripe, Inc. (payments); Resend (transactional email). We do not sell personal data, and we use no advertising trackers or third-party analytics cookies.

Auction data

The auction listings we display are public notices published by courts, government agencies and auction houses. We store titles, dates and links only. If a listing contains personal data and you are the data subject or the publishing platform, contact us and we will remove it.

Your rights

Under the GDPR and UK GDPR you may access, correct, export, restrict or delete your personal data, object to processing, and lodge a complaint with your supervisory authority. Email [email protected] from your account address; we respond within 30 days. Deleting your account removes your profile, saved auctions and saved searches immediately; billing records are kept only as long as the law requires.

International transfers

BlueMesa Systems LC is based in the United States. Where data leaves the EU/UK, we rely on Standard Contractual Clauses.

Cookies and storage

We set no tracking cookies. Your browser's local storage holds your sign-in session and interface preferences; clearing it signs you out.

Changes to this policy are posted here with a new “last updated” date.