Privacy Policy

1. Who is responsible

The controller responsible for processing your personal data is SwissCarExport, [ADDRESS], Switzerland. For any data-protection question or to exercise your rights, contact us at [DATA PROTECTION EMAIL].

2. What data we collect

• Account data: name, email address, phone number, password (stored securely by our authentication provider), account type (buyer/seller), and language preference.
• Seller / business data: company name, business type, tax ID, and address, where you provide them.
• Identity documents: if you upload an ID document for verification, we process it to confirm your identity. This is sensitive data and is processed only with your explicit consent.
• Listing data: vehicle details, photos, price and location you publish.
• Messages: the content of chats you exchange with other users through the platform.
• Wallet & transactions: your balance, listing fees, and transaction history.
• Technical data: IP address, browser information and server logs generated when you use the site.

3. Why we process it and on what basis

• To provide the marketplace (accounts, listings, messaging, wallet) — performance of our contract with you.
• To verify identity and prevent fraud/abuse — your consent (for ID documents) and our legitimate interest in a trustworthy platform.
• To process listing fees and keep records — performance of contract and our legal accounting obligations.
• To secure the site and diagnose problems — our legitimate interest in a safe, working service.
• To comply with legal obligations where the law requires it.

4. How long we keep it

• Account data: for as long as your account is active, and up to 12 months after you close it, unless a longer period is legally required.
• Identity documents: until verification is complete and then deleted, or at most 90 days, unless we must keep them for a legal reason.
• Transaction and invoice records: 10 years, as required by the Swiss Code of Obligations.
• Server logs: up to 90 days.

5. Who we share it with

We use trusted service providers who process data on our behalf: Supabase (database, authentication and file storage) and Render (hosting). Your listing details and public profile information are visible to other users of the platform. Your contact details are shared with a counterparty only as needed to complete a transaction. We do not sell your personal data.

6. International transfers

Some providers may process data outside Switzerland or the EU/EEA. Where they do, we rely on adequacy decisions or appropriate safeguards (such as standard contractual clauses) to protect your data.

7. Your rights

You have the right to access, correct, delete, restrict, or object to the processing of your personal data, and to receive it in a portable form. To exercise any of these, email [DATA PROTECTION EMAIL]; we will respond within 30 days. You may also lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC), or, if you are in the EU, your local data protection authority.

8. Cookies

We use only strictly necessary cookies: a session cookie to keep you logged in and a cookie that remembers your language choice. These are required for the site to work and do not need consent. We do not currently use advertising or analytics cookies. If we add analytics in the future, we will ask for your consent first and update this policy.

9. Security

We take reasonable technical and organisational measures to protect your data, including access controls and encrypted connections. No system is perfectly secure, but we work to keep your information safe and will notify you and the authorities of a serious data breach as required by law.

10. Changes

We may update this policy. The "last updated" date shows the latest version, and we will notify you of significant changes.