Privacy Notice

1. Scope

This notice explains how Aky processes personal data when users browse, create accounts, post listings, message each other, contact sellers, report content, request support and use future paid services.

The controller identity, privacy contact and any data protection officer details must be added before public launch.

2. Data we process

• Account data: email, phone, password hash, locale, settings, account status and verification state.
• Listing data: title, description, category, price, currency, district, photos, translations, status and history.
• Communication data: messages, contact requests, phone reveals, reports, reviews and support correspondence.
• Operational data: IP address, user agent, request ID, login events, rate limits, audit logs and moderation reasons.
• Consent and preferences: cookies, analytics, marketing, personalization, saved searches and notifications.

3. Purposes and legal bases

Account, listing, messaging, saved-search and service-notification processing is mainly necessary to provide the requested service. Security, fraud prevention, moderation, audit and platform protection usually rely on legitimate interest or legal obligation.

Marketing, ad pixels, some analytics identifiers and personalization based on device storage/access require consent unless counsel approves a narrower exception.

4. Public listings, sharing and retention

Public listing fields may be indexed by search engines and used in OpenGraph previews, sitemaps and structured data. Private emails, precise home addresses and internal moderation notes are not public.

Data may be processed by hosting, database, image storage, email, monitoring, support, payment or future KYC/escrow providers. The concrete processor list must be completed before launch.

Data is retained only as long as needed for service, security, accounting, disputes, moderation, support, legal claims and legal obligations.

5. User rights

Users can request access, correction, deletion, restriction, portability, objection to legitimate-interest processing and withdrawal of consent. They may also complain to the competent supervisory authority.

Some data cannot be deleted immediately where Aky must keep it for accounting, security, fraud prevention, moderation, legal claims or legal obligations.