Privacy Policy

1. Introduction

KHT Market ("we", "us", "our") respects your privacy. This Privacy Policy explains how we collect, use, and protect your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable Polish and EU law.

2. Data We Collect

• Account data: Name, email address, password (hashed), country, city
• Profile data: Bio, avatar photo, Instagram username
• Listing data: Photos, titles, descriptions, prices you submit
• Messages: Content of messages between buyers and sellers
• Waitlist: Email address if you sign up for our waitlist
• Usage data: Pages visited, listing views (anonymous, no tracking cookies)

3. How We Use Your Data

• To provide and operate the marketplace
• To display your profile and listings to other users
• To facilitate communication between buyers and sellers
• To send important service updates (account, security)
• To improve the Platform

We do not sell your data to third parties. We do not use your data for advertising.

4. Legal Basis (GDPR)

• Contract: Processing necessary to provide the marketplace service
• Consent: Waitlist signup, optional profile information
• Legitimate interest: Platform security, fraud prevention

5. Data Storage & Security

Your data is stored securely on Supabase (cloud infrastructure hosted in the EU). We use encryption in transit (HTTPS/TLS) and at rest. Access to personal data is restricted to authorized personnel only.

6. Your Rights (GDPR)

As an EU resident, you have the right to:

• Access your personal data
• Rectify inaccurate data
• Delete your data ("right to be forgotten")
• Export your data (data portability)
• Withdraw consent at any time
• Object to processing
• Lodge a complaint with a supervisory authority (UODO in Poland)

To exercise any of these rights, contact hello@kht.market.

7. Cookies

We use only essential cookies required for the Platform to function:

• Authentication cookies: To keep you logged in
• Preference cookies: Theme (dark/light mode), language
• Admin cookie: For admin panel access

We do not use analytics cookies, tracking cookies, or third-party advertising cookies.

8. Third-Party Services

• Supabase: Database and authentication (EU hosting)
• Vercel: Website hosting
• Google: OAuth sign-in (if you choose to sign in with Google)

9. Data Retention

We retain your data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where required by law.

10. Children

KHT Market is not intended for children under 16. We do not knowingly collect data from children under 16.

11. Contact

For privacy questions or GDPR requests:
Email: hello@kht.market
KHT Market, Poland