Privacy policy
Placeholder only. This is not a legally reviewed privacy policy. Before launch, the operator must have a proper privacy policy drafted/reviewed (covering, among others, GDPR if EU users are targeted, the payment processor, and email provider used) and publish it here.
What this MVP stores, for reference
- Account email and password hash (never the plain password).
- Sales page content: title, description, country/city, pickup notes, optional WhatsApp number.
- Product listings and uploaded photos.
- Contact messages sent by buyers (name, email, message) - forwarded to the seller by email.
- Payment records (amount, package, status, provider session/intent IDs) - not card numbers.
Data retention
[TODO: operator to confirm exact retention periods.] As a starting assumption, billing/payment records are kept only as long as applicable tax/commercial law requires record-keeping (commonly several years under German law, e.g. §147 AO / §257 HGB), and sales page content (listing text, photos) is deleted once the listing expires or is closed, as implemented in this MVP. This is a technical assumption, not legal advice - confirm the exact periods with a tax/legal advisor before launch.