Read
Last updated: 18 August 2026
Data controller
The controller of personal data is the service provider identified, with its contact details, on the “Company details and contacts” page.
Data we process
• Account and security data — name, email address, encrypted password, selected language, session and security information, including IP address and browser data.
• Profile and published content — profile image and description, company information, listings, location, contact details, and uploaded images, videos, and documents. Fields submitted for publication are publicly available.
• Service usage data — pages visited, listing views, contact and sharing actions, QR code scans, referrer, device and browser information, IP address, and country and city approximately derived from it.
• Account activity — saved listings, followed profiles, company memberships and invitations, content reports, moderation records, QR codes, short links, and API access data.
• Billing data — Stripe customer, purchase, payment, and subscription identifiers, status, amount, currency, and limited payment-method information such as card type and last four digits. We do not receive or store the full payment card number.
Why we process data
We use data to create and protect accounts, publish and manage listings and QR codes, enable contact and company collaboration, process payments, prevent abuse, moderate content, provide usage statistics, and maintain service security. Depending on the activity, processing is based on performance of a contract, compliance with a legal obligation, our legitimate interests in operating and protecting the service, or your consent where specifically requested.
Who can access data
Published profiles, listings, and the contact details provided in them are available to website visitors. Data may be accessed by authorised administrators and moderators and by company owners or members according to their permissions. We use Stripe-hosted billing services to process payments; Stripe processes payment data under its own privacy policy. Data may be disclosed where required by applicable law. We do not sell personal data or use it for third-party advertising.
Cookies and local storage
Necessary cookies and browser storage support sign-in, security, language, cookie choices, and website notices. Server security and usage records may be created independently of your optional analytics cookie choice. More information and controls are available in the “Cookie and browser storage policy”.
Retention and deletion
We retain data for as long as needed for its purpose, operation of the account and service, dispute handling, and compliance with legal obligations. Security and audit records may be retained for up to seven years. You can correct or remove some data and delete your account through account settings. Account deletion does not always immediately remove published or archived content, billing, moderation, security, and aggregated usage records where retention remains necessary. Remove public content before deleting your account or contact us if you want to request its deletion.
Your rights
Subject to applicable law, you may request access to, correction or deletion of your data, restriction of processing or data portability, and object to processing. Where processing relies on consent, you may withdraw it at any time without affecting processing already carried out. Send requests using the contact details on the “Company details and contacts” page. You also have the right to lodge a complaint with the Latvian Data State Inspectorate.
Changes
We may update this policy when the service or legal requirements change. The revised policy and its updated date will be published on this page.