개인정보처리방침

최종 업데이트: 2026-10-10

This Privacy Policy explains what personal data Sellboard collects and processes, for what purposes and on what legal basis, who we share it with, and what rights you have under the GDPR. Sellboard is a classifieds marketplace — the sell-board.com website and the Android and iOS apps — where users post and browse listings, message each other, and — for service listings — make bookings. This policy applies equally to the website and the apps. The service may only be used by people who are at least 18 years old.

Data controller

The data controller is Smart Software registered at Gorczyn 64B, 98-100 Łask. For any data-protection matters you can reach us at [email protected].

What we collect

• Account data: e-mail address, display name, a hashed password or a Google, Facebook or Apple sign-in identifier (with Sign in with Apple you can hide your e-mail address; we then receive an Apple relay address), an optional contact phone number, and your chosen interface language.
• Email-verification codes sent when confirming your e-mail address (one-time 6-digit codes).
• Listing content: title, description, price, category and attributes, city/region and a map location (the coordinates you choose when posting), and photos. A listing's content and location are public — other users can see them. You choose the photos yourself (in the apps through the system photo picker — the apps have no access to your whole library or the camera); they are re-encoded server-side to JPEG, which strips EXIF metadata (e.g. GPS or camera data). If you import a listing from a link, our server fetches that page to fill in the form.
• Your approximate location (optional): only when you tap "Use my location" or the location button on a map in the app and allow it in the system prompt. We only request approximate location (never in the background), round it to about 1 km and send it solely as a search parameter to show listings near you. It is not stored on our servers, not linked to your account and not written to logs. The last position is kept only on your device, and you can clear it in the app's settings.
• Messages and bookings: messages exchanged with other users, and bookings made for service listings. A phone number is required for every booking: when you book a visit, your name and phone number are shared with that business (and its team) so they can contact you about the visit. We save the number in your profile to suggest it on your next booking; you can change or remove it in your profile.
• Business teams: bookings and, when the business owner enables it, messages sent to a business may be handled by its authorised staff — the managers and employees the owner has invited, who sign in with their own Google or Apple account; the customer only sees the business's name.
• Notifications: your in-app notification list and notification settings; if you turn on push notifications in an app — the device token, platform, app version and language needed to deliver them.
• Reports and blocks: reports about listings, users and conversations (category and description), the list of users you have blocked, and records of any account suspension (suspensions are reversible).
• Connected apps: if you connect an AI assistant or another app to your account (e.g. through MCP), we store the app's name, the permissions you granted, and a log of the actions it performed, which you can see in your account settings.
• Technical data: IP address (obtained via Cloudflare and used for security, rate-limiting, and abuse prevention), browser or app type and user-agent, and listing view counts. Server logs record the request path but not search parameters.
• Smart links and the "Open in the app" banner (click2): links to listings and profiles that you share from Sellboard (the Share button, or in notifications) may go through the click2 service (click2.page), and when the banner is switched on the website can show an "Open in the app" banner on phones. When you open such a link or tap the banner, click2 records: the link, the time, the platform (iOS, Android or desktop — from the user agent), whether the link was opened in another app's built-in browser, the country (provided by the network provider), the referring page's address without its query string, and the campaign and channel (e.g. "banner"). Your IP address is not stored: to count unique clicks, click2 computes an anonymous code from the IP address and user agent together with a random value that is replaced every day and deleted after two days, and stores only that code. Browsers that send Global Privacy Control are not counted. In addition, the banner's views, taps and closes are counted only as daily totals per campaign and A/B test variant. click2 sets no cookies; the banner keeps a few values in your browser's local storage (described in the Cookie Notice).
• click2 in the apps: the apps include the click2 SDK, which recognizes smart links. When you open such a link, the app sends click2 that link (it contains, for example, the address of the matching Sellboard page and the listing number), the platform, the app version and the device language, to find out which screen to open (like any server, click2 sees the IP address of the connection, but does not store it). Tracking in the SDK is switched off: the apps do not report opens, installs or events to click2. Deferred links (landing on the right screen after installing the app from a link): on Android the app reads the Google Play install referrer once on first launch, to find the link clicked before installing; on iOS only if you tap the system "Paste" button on first launch — the app then reads the copied link, and it never reads the clipboard at any other time.
• Cookies (on the website) — see the Cookie Notice for details. The apps contain no ads, analytics or tracking tools.

Purposes and legal bases

• Providing the service (account creation and management, listings, messaging, bookings, notifications about your conversations and bookings) — performance of a contract (Art. 6(1)(b) GDPR).
• Security, fraud and abuse prevention, handling reports and moderating content, blocking users, basic cookieless analytics, running smart links and the "Open in the app" banner (including counting their use), and backups — our legitimate interest (Art. 6(1)(f) GDPR).
• Complying with legal obligations, e.g. responding to lawful authority requests and handling notices of illegal content — legal obligation (Art. 6(1)(c) GDPR).
• Your device's approximate location, push notifications, and signing in with Google, Facebook or Apple — your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time in your device or app settings. We do not currently send marketing communications.

Who we share data with

We do not sell data. We rely on a small number of trusted service providers (processors), who only receive data to the extent needed to run the service:

• Cloudflare, Inc. — CDN, secure tunnel, TLS encryption, DDoS/WAF protection; Cloudflare Web Analytics (a cookieless tool that collects no personal data and needs no consent); Cloudflare Turnstile — anti-bot protection that may set a short-lived security cookie.
• Contabo GmbH — hosts the server Sellboard runs on (Germany, EU).
• Backblaze (B2) — encrypted, off-site backups of the database and images.
• Brevo (Sendinblue SAS) — sends verification codes and transactional e-mails (processes your e-mail address).
• SMSPLANET, Bird — Booking text messages: when a business texts you about a visit (confirmation, change, cancellation or reminder), the message is sent through SMS providers acting as our processors - SMSPLANET for numbers in Poland and Bird for other countries - and your number and the text are shared with them only for that booking. You can stop further messages with the link in the SMS.
• click2 (click2.page) — the smart-link and "Open in the app" banner service, operated by the same company that runs Sellboard (Smart Software). It processes, on our behalf, the data described above (link clicks, banner views and taps, and in the apps link recognition). click2's own policy: click2.page/privacy.
• Google — Google sign-in; in the apps, delivery of push notifications through Firebase Cloud Messaging (device token and notification content).
• Apple — Sign in with Apple and delivery of push notifications to Apple devices (Apple Push Notification service).
• Meta / Facebook — Facebook sign-in, for users who choose to use it.
• OpenStreetMap Foundation — map tiles on the website (when a map loads, your IP address is sent to OSM's tile servers) and address search (Nominatim): when you search for a city while posting, our server sends the text or coordinates you entered — not your IP address.
• OpenFreeMap — map tiles in the mobile apps (when a map loads, your IP address is sent to it).
• YouTube (Google) — videos added to listings are shown from YouTube in privacy-enhanced mode only after you click play (until then only the thumbnail image is loaded); from that point YouTube's privacy policy applies.

The content of a published listing (including its location and your display name) is public. Your phone number is shown only to signed-in users, and only if you add it. Apps you connect to your account yourself only get access within the permissions you granted, and you can disconnect them at any time.

International transfers

Some of the providers above (including Google, Apple, Meta, Cloudflare, and Backblaze) may process data outside the European Economic Area. Where this happens, we rely on appropriate safeguards, including Standard Contractual Clauses approved by the European Commission.

Retention

• We keep account data for as long as your account exists. When you delete your account, personal data is erased or anonymized; records shared with other users (messages, bookings) are retained in anonymized form.
• Deleted listings are permanently erased after 30 days, expired listings after 3 months, and sold listings 90 days after they expire. Listings that were reported, and the reports themselves, are kept for as long as needed for moderation and possible legal claims.
• Your device's approximate location is not stored on our servers. Notification tokens are removed when you sign out, disconnect a device, or when they become invalid.
• Individual smart-link click records at click2 are deleted after two years (730 days); the banner's daily totals are kept for the same period.
• The content of sent e-mails is deleted after 30 days. For sent text messages, the recipient's number and the text are deleted after 31 days (and at once when the customer's or the business's account is deleted); only the billing data (segments, cost, dates) is kept.
• The activity log of connected apps is kept for 180 days. Server technical logs are rotated automatically once they reach a size limit.
• Backups are rotated automatically — kept for 7 daily and 4 weekly generations — and then permanently purged.

Your rights

Under the GDPR you have the right to access, rectify, erase, restrict the processing of, and port your data, and to object to processing, as well as the right to withdraw consent at any time (without affecting the lawfulness of processing carried out before withdrawal). You can delete your account yourself at any time — on your profile page or in the app (Account → Settings → Delete account), and download a copy of your data (a JSON file) on your profile page ("Download my data"). You can turn off location access and notifications in your device settings, and disconnect connected apps in your account settings. You also have the right to lodge a complaint with the Polish supervisory authority, the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, UODO), if you believe our processing violates data-protection law.

Contact

For any privacy-related question, contact us at [email protected].