Privacy Policy – Data Protection Troovo Classifieds

At Troovo, we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, and protect your information when you use our marketplace platform.

1.1 Our Commitment

• We collect only the data necessary for platform operation
• We never sell your personal information
• We use secure systems to protect your data
• We comply with Swiss and EU privacy laws

1.2 Applicable Laws

This policy complies with:

• Swiss Federal Data Protection Act (FADP)
• EU General Data Protection Regulation (GDPR)
• Swiss Consumer Protection Laws

2.1 Account Information

When you create an account, we collect:

• Basic Details: Name, username, email address
• Location: Canton and city (for local marketplace functionality)
• Language: Preferred language setting
• Account Type: Free, Professional, or Partner status

2.2 Listing Information

• Item Details: Photos, descriptions, prices, categories
• Location Data: Canton and city for item location
• Contact Preferences: How buyers should contact you

2.3 Communication Data

• Messages: Communications between users through our platform
• Support Tickets: Customer service communications
• Reports: Safety reports and policy violations

2.4 Technical Information

• Usage Data: Pages visited, time spent, clicks
• Device Info: Browser type, IP address, device identifiers
• Performance Data: Page load times, errors, system performance

2.5 Activity Logging

For fraud prevention and platform security, we log certain activities:

Logged Events:

• Account registration and login events
• Listing creation and modifications
• Verification purchases and status changes

Logged Data:

• IP addresses
• Browser and device information
• Timestamps

Activity logs are retained for security and compliance purposes.

This data may be provided to law enforcement upon valid legal request to help prevent criminal activity.

2.6 ID Verification Data

If you choose to verify your identity (CHF 5 one-time fee):

• Your government ID is processed by Stripe Identity — we do not store copies of your ID document
• We store your verified legal name and verification status
• We store the verification completion date

ID document data is handled by Stripe according to their privacy policy.

2.7 Business Verification Data

If you apply for Business Verification (CHF 75 one-time fee):

• Business registration documents
• Proof of identity
• Business address verification

Documents are reviewed by our team and deleted after verification is complete.

We retain only your verification status and approval date.

2.8 Payment Information

• Billing Details: Business name, billing address (for Professional accounts)
• Payment Processing: Processed securely through Stripe (we don't store card details)
• Transaction Records: Subscription and verification payment history

3.1 Platform Operation

• Creating and managing your account
• Displaying your listings to other users
• Facilitating communication between buyers and sellers
• Processing account subscriptions and verifications
• Providing customer support

3.2 Safety & Security

• Preventing fraud and abuse
• Investigating policy violations
• Maintaining platform security
• Complying with legal requirements

4.1 Public Information

The following information is publicly visible on your listings and profile:

• Username and first name
• General location (canton/city, not exact address)
• Listing information (photos, descriptions, prices)
• Business name (for Professional accounts)
• Verification badges (ID Verified, Business Verified, Partner)

4.2 We DO NOT Share

• Your email address (unless you choose to share it)
• Your phone number
• Your exact address
• Private messages between users
• Payment card details

5.1 Security Measures

• Encryption: All data transmitted using HTTPS/TLS
• Password Security: Strong hashing with bcrypt
• Server Security: Regular updates and monitoring
• Access Control: Limited employee access on need-to-know basis
• Backups: Regular encrypted backups

6.1 Access & Control

You have the right to:

• Access: Request a copy of your personal data
• Update: Correct inaccurate information
• Delete: Request deletion of your account and data
• Download: Export your data in common formats
• Object: Object to certain types of processing

6.2 Data Retention

When you delete your account:

Immediately Deleted:

• Your profile and personal information
• Your listings and photos
• Your messages are anonymized (shown as "Deleted User" to other parties)

Retained for Compliance:

• Payment and transaction records are retained for 10 years (Swiss tax law requirement)
• Activity logs are retained for 90 days for fraud prevention, then deleted
• Anonymized messages are deleted after 90 days
• Anonymized usage statistics (no personal data)

We may retain data longer if required by law or ongoing legal proceedings.

7.1 Essential Cookies

We use necessary cookies for:

• User authentication and sessions
• Language preferences
• Cookie consent preferences
• Security and CSRF protection

7.2 No Advertising Tracking

We do NOT use:

• Advertising cookies
• Social media tracking
• Cross-site tracking
• Behavioral advertising