Privacy Policy

1. Data we collect

• Identity and contact: name, email, and (for social sign-in) the identifier your provider returns.
• Profile: display name, bio, avatar, country, and preferred language.
• Content you create: gigs and proposals, chat messages and their attachments (including voice notes), reviews.
• Transactions: your orders and the related payment metadata handled by our payment processor (we do not receive or store card numbers).
• Technical: IP address (used, for example, to suggest your country at sign-up), device identifiers for push notifications, and basic usage logs.
• Where you enable it, analytics about how you use the app.

2. How and why we use your data (legal bases)

• To provide the marketplace — creating your account, gigs, orders, messaging, and payments — on the basis of performing our contract with you.
• To meet legal obligations — accounting and tax record-keeping, fraud prevention, and responding to lawful requests.
• For our legitimate interests — securing the service, preventing abuse and off-platform circumvention, moderating content, and improving Sawa — balanced against your rights.
• With your consent — sending promotional announcements and, where offered, using non-essential analytics or cookies. You can withdraw consent at any time.

3. Who we share data with

We share data with service providers that process it on our behalf: Supabase (database, authentication, and file storage), Vercel (website hosting), Resend (transactional email), Stripe (payments), Apple and Google (sign-in and push notifications), DeepL (translation of our own announcements, never your private content), and, where enabled, an analytics provider. We also share the information reasonably necessary between a buyer and a seller so they can complete an order, and we disclose data to authorities where the law requires it. We do not sell your personal data.

4. International transfers

Some providers process data outside the European Economic Area. Where that happens, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses or an adequacy decision. Where a choice exists, we prefer EU-hosted processing.

5. How long we keep your data

We keep your account data while your account is active. When you delete your account, we delete or anonymise your personal data; however, records connected to orders and payments are retained in anonymised form for as long as required by law (for example, accounting records for up to ten years). We keep a one-way, irreversible hash of your email after deletion or a ban solely to prevent evasion, never the email itself.

6. Your rights

You have the right to access, correct, delete, restrict, and port your personal data, to object to certain processing, and to withdraw consent. You can edit your profile, manage notifications, and delete your account in the app, or contact us at contact@sawamarketplace.com. You also have the right to lodge a complaint with the French data protection authority, the CNIL (www.cnil.fr).

7. Automated processing

We use automated tools to help keep Sawa safe — for example, screening messages for contact-sharing that breaches our anti-circumvention policy, checking eligibility, and detecting abuse — which can lead to content being hidden or an account being restricted. You can ask us to review any such decision by contacting contact@sawamarketplace.com.

8. Security

We use technical and organisational measures to protect your data, and payment data is handled by our PCI-compliant processor. No system is perfectly secure; if a breach affects your rights, we will notify the authorities and, where required, you.

9. Cookies, age, and changes

We use essential cookies to keep you signed in and, with your consent, may use analytics; see our Cookie Policy. Sawa is for users aged 18 and over. We may update this Policy and will post the new version with its date.