Privacy Policy

Last updated: [DATE]. Data controller: [COMPANY NAME], [ADDRESS], [SUPPORT EMAIL]. This notice explains what we do with personal data under the GDPR (Regulation (EU) 2016/679).

1. Data we process

  • Account data — email, password hash, display name, role, profile photo (legal basis: contract, Art. 6(1)(b)).
  • Contact data you publish — phone and WhatsApp numbers shown on your ads (contract; you choose to publish them).
  • Content — ads, photos, reviews. Photos are analysed automatically to detect and mask explicit regions (legitimate interest in a safe platform, Art. 6(1)(f); the analysis is performed by software, and flagged results can be reviewed by staff).
  • Payment data — pack purchased, amount, Mollie payment ID and status. Card details go directly to our payment provider, Mollie B.V. (Netherlands); we never see them (contract / legal obligation for bookkeeping).
  • Technical data — IP address, security logs (legitimate interest); analytics only with your consent (Art. 6(1)(a)).

2. Recipients

Hosting and database: Supabase; application hosting/CDN: Vercel and Cloudflare; payments: Mollie B.V. Each acts under a data-processing agreement. Where data leaves the EEA, transfers rely on adequacy decisions or Standard Contractual Clauses.

3. Retention

Account data: until deletion of the account plus a short backup window. Payment records: as required by tax law (up to 10 years in Italy). Original uploaded photos: kept privately for moderation audit, then deleted on account deletion. Security logs: up to 12 months.

4. Your rights

You can request access, rectification, erasure, restriction, portability, and object to processing based on legitimate interest, and withdraw consent at any time (Art. 15–21). Write to [SUPPORT EMAIL]. You may lodge a complaint with your supervisory authority — in Italy, the Garante per la protezione dei dati personali.

5. Automated decision-making

Image screening is automated but only masks image regions; it does not produce legal or similarly significant effects without human review. You can contest any moderation outcome at [SUPPORT EMAIL].