Skip to main content
Vintew United StatesVintew United States

Privacy Policy

Last updated: May 28, 2026

1. Data controller

Vintew, based in France, is the controller of personal data collected through the Service.

2. Data we collect

  • Registration data: mobile phone number (required), email address (optional).
  • Profile data: display name, profile photo, bio and city.
  • Listing data: title, description, price, photos, category and location.
  • Messaging data: content of messages exchanged between users.
  • Technical data: IP address, device type, browser, pages visited and timestamps.

3. How we use your data

  • Create and manage your user account.
  • Publish and display your listings.
  • Connect buyers and sellers.
  • Moderate content and prevent fraud.
  • Improve the Service and produce anonymized statistical analysis.
  • Send notifications relating to your account and listings.

4. Legal basis

We process your data on the following legal bases: performance of the contract (Terms) for data needed to operate the Service; your consent for optional data (email); and our legitimate interests in security and fraud prevention.

5. Hosting and processors

Your data is hosted in the European Union. Our technical processors are:

ProcessorPurposeLocation
Hetzner Online GmbHServers and databaseGermany (EU)
Cloudflare Inc. (R2)File storage (photos)EU (EU region)
Vercel Inc.Frontend hosting (Edge Network)EU (European PoPs) - SCCs in place
Firebase (Google)Push notificationsEU - SCCs in place
WhatsApp Business API / AzureSending OTP codes (SMS/WhatsApp)EU - SCCs in place

For processors based outside the EU, transfers are governed by Standard Contractual Clauses (SCCs) approved by the European Commission. We implement appropriate technical and organizational measures to protect your data (TLS encryption, access controls and logging).

6. Data retention

  • Active account: data is retained while the account remains active.
  • Deleted account: data is deleted within 30 days, unless retention is required by law.
  • Expired listings: archived for 12 months and then deleted.
  • Technical logs: retained for up to 12 months.

7. Your rights

Under the GDPR, you have the following rights:

  • Access: obtain a copy of your personal data.
  • Rectification: correct inaccurate or incomplete data.
  • Erasure: request deletion of your data.
  • Portability: receive your data in a structured, readable format.
  • Objection: object to the processing of your data.
  • Restriction: request that processing be restricted.

To exercise your rights, contact us at: [email protected]

We aim to respond to your request within one month, in accordance with GDPR Article 12(3). You may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.

8. Automated decisions and profiling

Under GDPR Article 22, the following automated processing takes place:

  • Listing quality score: an algorithm automatically assesses each listing (photos, description and price) to optimize ranking. This score does not automatically reject listings; a human moderator makes any rejection decision.
  • Detection of unlawful content: automated filters identify potentially prohibited keywords and images. Flagged content is always reviewed by a person before action is taken.
  • Trust score: calculated automatically from objective criteria (completed verifications and account age). It is for information only and does not restrict any features.

You have the right to contest any automated decision, express your point of view and request human intervention by contacting [email protected].

9. Cookies

The Service uses only technical cookies needed for operation (authentication sessions). No advertising or tracking cookies are used.

10. Sharing with third parties

Your data is never sold. It may be shared with our technical processors (hosting and SMS/OTP delivery) in accordance with the GDPR, or with competent authorities when legally required.

11. Contact

For questions about the protection of your data: [email protected]

You may also lodge a complaint with the CNIL (French Data Protection Authority):

  • Address: 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France
  • Website: www.cnil.fr