Privacy Policy

1. Controller

The data controller is Euxhenjo Nexhipi, Corso Don Orione 62, 15057 Tortona (AL), Italy. Privacy contact: euxhenjonex@gmail.com.

2. Data we process

• Public profile data: display name, website or public profile link, category, tagline, description, page icon, optional logo and optional X or LinkedIn URLs.
• Private purchase data: payment email, accepted legal version and timestamp, slot and price, payment identifiers, status and optional billing or tax information supplied through Stripe. We do not receive full card details.
• Technical data: IP-derived security information, request timestamps, device/browser information, error and abuse-prevention logs.
• Cookieless analytics: aggregated visit, referral, device and conversion information collected through DataFast without advertising cookies.

3. Purposes and legal bases

• To reserve, charge for and publish a space, perform the contract and provide support.
• To comply with tax, accounting, payment and legal obligations.
• To protect the service, prevent fraud and abuse, diagnose errors and measure service performance based on our legitimate interests.
• To establish, exercise or defend legal claims.

4. Public information

Profile fields and uploaded assets are deliberately public. The payment email, billing details, acceptance record and payment identifiers are not displayed in the public profile.

5. Service providers

We use service providers acting as processors or independent controllers where applicable, including Stripe for payments and billing, Vercel for hosting and file storage, Neon for database hosting, and DataFast for cookieless analytics. They process data under their own terms and appropriate data-protection safeguards.

6. International transfers

Some providers may process data outside the European Economic Area. Where required, transfers rely on adequacy decisions, Standard Contractual Clauses or another lawful safeguard.

7. Retention

Expired, released or failed reservation data is deleted or anonymised on a short operational schedule, normally within 24 hours after it is no longer needed. Published profile data is retained while the placement and service operate. Payment, consent, tax and accounting records are kept for the period required by applicable law, generally up to ten years. Security logs are retained only as long as reasonably necessary.

8. Your rights

Subject to applicable law, you may request access, correction, erasure, restriction, portability or objection. You may also complain to the Italian data protection authority (Garante per la protezione dei dati personali). Contact euxhenjonex@gmail.com to exercise a right. We may need to verify your identity and authority over the relevant data or profile.

9. Security and automated decisions

We use access controls, encrypted transport, signed payment webhooks and transactional slot allocation. No decision producing legal or similarly significant effects is made solely by automated profiling.

10. Updates

We may update this notice when the service or providers change. The effective date and version appear above; material changes will be communicated where required.