# Tregova — Privacy Policy

> Last updated: June 3, 2026

**GDPR Compliance:** This privacy policy is designed to comply with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

## 1. Introduction

Tregova ("we", "our", or "us") is committed to protecting your privacy. This policy explains what information we collect, how we use it, and what rights you have over your data when you use Tregova websites, mobile apps, and related marketplace services.

## 2. Information We Collect

### 2.1 Information You Provide

This includes your account details (name, email, phone, password), profile information, listing content, messages to other users, reviews, search queries, reports, block actions, account deletion requests, and any feedback or support requests you submit. The Android v1 app does not provide native listing creation/editing or native media uploads; if you open a hosted web flow from the app, information entered there is covered by this policy.

### 2.2 Information Collected Automatically

When you use the platform, we automatically collect technical information such as device type, browser, operating system, app version, pages or screens visited, and usage patterns. We also detect or infer your country or region for language, marketplace, and regional settings. The Android v1 app does not request device-location, camera, media-library, microphone, contacts, calendar, SMS, or call-log permissions.

### 2.3 Information from Third Parties

If you sign in using a third-party provider, we receive basic profile information from that provider. For paid promotions where available on supported platform surfaces, payment is handled by a third-party payment provider. We may receive payment status, confirmation, transaction reference, refund, and reconciliation metadata needed to activate promotions, provide support, prevent fraud, and keep records, but we do not store your card or bank details. Android v1 does not include paid-promotion checkout until the planned Digital POS integration is implemented and approved.

## 3. How We Use Your Information

- Creating, maintaining, and securing your account
- Providing platform features: listings, messaging, reviews, favorites, notifications, reports, and blocking
- Improving search functionality, marketplace relevance, and platform experience
- Security, fraud prevention, abuse detection, content moderation, and user safety
- Sending verification messages, service updates, and platform or in-app notifications
- Processing paid promotions where available on supported platform surfaces through third-party payment providers
- Complying with legal obligations and enforcing our terms

We use your data internally for search functionality, service reliability, support, safety, and platform improvement purposes. Messages, reports, and related metadata may be processed or reviewed for safety, abuse prevention, moderation, legal compliance, and support.

## 4. Data We Will NOT Sell

**We will not sell your personal data to third parties without your explicit permission.** We do not sell, rent, or trade your information for marketing purposes. Your data is used exclusively for operating, securing, supporting, and improving the platform. The Android v1 app does not include third-party advertising SDKs. If our data practices materially change, we will update this policy and obtain consent where required.

## 5. Information Sharing

We share information only in these limited cases:

- **With other users:** Your public profile, public listings, public reviews, and marketplace-visible activity are visible as part of normal platform use. Messages are shared with the intended conversation participants.
- **With service providers:** Trusted third parties that help us operate the platform, such as cloud hosting/storage, email delivery, security, support, error tracking, authentication, and payment processing for paid promotions where available on supported platform surfaces. The Android v1 app does not include third-party advertising SDKs, Firebase/FCM push token collection, native payment checkout, or raw card-detail collection in the approved v1 scope.
- **For legal reasons:** When required by law or to protect rights and safety
- **Business transfers:** In connection with a merger, acquisition, or sale of assets

## 6. Data Security

We implement strong technical measures to protect your data, including encryption of personal information at rest, encrypted messaging, secure password storage, HTTPS-only communication, and protection against automated attacks. No system is 100% secure, but we continuously work to safeguard your information.

## 7. Cookies

We use essential cookies to keep you logged in and protect against security threats. We also use optional cookies for remembering your preferences and understanding how the platform is used. You can manage your cookie preferences through the consent controls on the platform or your browser settings.

## 8. Data Retention

We keep your data while your account is active and for as long as needed to operate the service, resolve disputes, enforce our terms, protect users, prevent fraud or abuse, and fulfill legal obligations. When you request account deletion, we delete or anonymize personal data associated with your account, subject to legal, safety, fraud-prevention, dispute-resolution, moderation, and technical retention requirements.

## 9. Your Rights (GDPR)

You have the right to:

- Access and export a copy of your personal data
- Correct inaccurate information
- Request deletion of your account and associated personal data, subject to required retention exceptions
- Restrict or object to certain processing
- Withdraw consent for non-essential processing at any time

Contact support@tregova.com or use the account settings and support tools to exercise these rights. We will respond within 30 days unless a longer period is permitted by applicable law.

## 10. International Data Transfers

Your data may be processed in countries where our service providers operate. We ensure appropriate safeguards are in place in accordance with applicable data protection laws.

## 11. Children's Privacy

The platform is not intended for users under 18. We do not knowingly collect data from minors and will delete such data if discovered.

## 12. Changes to This Policy

We may update this policy from time to time. Material changes will be posted on the platform with an updated date.

## Contact

For questions about this Privacy Policy or to exercise your data rights, contact support@tregova.com.

---

By using Tregova, you acknowledge that you have read and understood this Privacy Policy.
