Privacy Policy
Ireland's Local Marketplace
Official policy document displayed from the legal source files.
PRIVACY POLICY
Last updated June 10, 2026
This Privacy Notice for Nicolas Nahuel Gutierrez (doing business as Fyndu ) (
Where we store data. Account and marketplace data are hosted primarily in the European Union (Ireland) via our database provider (Supabase). Some service providers (for example Google Firebase and OpenAI) may process limited data in the United States under Standard Contractual Clauses (SCCs) and supplementary measures, including transfer impact assessments (TIAs) where required after Schrems II. See processors listed in this notice.
Fyndu-specific details (marketplace).
Legal bases (Article 6) — summary. Account & listings — contract (provide the marketplace). Optional phone — contract / legitimate interests (security, fraud prevention). Automated moderation — legitimate interests (safety); see Art. 22 below. Marketing — consent where required. Crash/diagnostics — consent where the app banner applies, otherwise legitimate interests in stability.
How long we keep data (summary). Account profile — life of account, then anonymised within 30 days after deletion. Listings & photos — until you delete them or your account is removed. Listing coordinates — life of the listing only. Chat messages — messages you sent are deleted from our systems within 30 days of your account deletion request. During that period the other participant in the conversation may still be able to read those messages; after 30 days they are permanently deleted. Moderation & security logs — about 90 days (target). Server logs — about 30–90 days. Boost / app-store purchase records — up to 6 years where tax law requires.
Age requirement (18+). You must enter your date of birth at registration. We check that you are at least 18 before creating an account. This is self-declared (we do not verify identity documents at signup). If we learn an account was created by someone under 18, we will close it and delete associated data as soon as practicable.
Phone number (optional). You may add a phone number in profile settings for optional verification and account security. It is not required to register. Once set, it may be locked to reduce fraud.
Listing location. Approximate coordinates are kept for the life of a listing to show an obfuscated area on maps, then deleted with the listing. We do not retain a separate long-term GPS history beyond that.
Chat messages and account deletion. If you delete your account, we soft-delete your profile and anonymise personal details within about 30 days. Messages you sent will be deleted from our systems within 30 days of your account deletion request. During this period, the other participant in the conversation may still be able to read those messages. After 30 days, your messages are permanently deleted.
Automated moderation (Article 22 GDPR). Listings and messages are screened with automated tools (text and image checks) before or after publication to detect illegal, unsafe, or policy-breaking content. Nature: automated scoring and rules; a human may review escalations. Logic: policy rules plus third-party safety APIs (for example OpenAI, Sightengine) — we do not publish a full model specification for security reasons. Significance: a listing may be rejected or hidden; your account may be restricted for serious or repeated breaches. This is not solely automated with legal effect without recourse — you may request human review by emailing support@fyndu.ie with your listing or message reference. Legal basis: legitimate interests (marketplace safety), not consent you can withdraw to bypass checks before publishing.
Right to object (Article 21). Where we rely on legitimate interests (for example fraud prevention or automated safety checks), you may object to that processing. We will stop unless we demonstrate compelling grounds that override your interests. Contact privacy@fyndu.ie. Objecting may mean we cannot keep your listing live if safety processing is required.
Legitimate interests assessments. We document balancing tests (LIAs) for key legitimate-interest processing (moderation, security, vehicle lookup). Summaries are kept internally; you may request more information via privacy@fyndu.ie.
Vehicle registration lookup (Cars & Motorcycles). When selling a vehicle, you may optionally enter an Irish registration plate and tap Search to autofill make, model, and year. You can also fill those fields manually without using this feature. If you use Search, we send the plate to our service provider carregistrationapi.ie (via our EU-hosted backend) solely to retrieve vehicle specifications. We do not store the registration plate on your listing, display it to buyers, or retain it after the lookup. A per-user rate limit applies to prevent abuse. Legal basis: legitimate interests (seller convenience and accurate listings); you may object via privacy@fyndu.ie.
- Visit our website
at https://fyndu.ie/ or any website of ours that links to this Privacy Notice
- Download and use
our mobile application ( Fyndu) , or any other application of ours that links to this Privacy Notice
- Use
Fyndu .Fyndu is an Irish local marketplace delivered primarily through our mobile app (iOS and Android), where users can publish listings, browse items for sale, and message other users across Ireland. Our website (fyndu.ie) provides information about Fyndu and allows users to join a pre-launch waitlist. Optional paid listing boosts may be available in the app; Fyndu does not process payments between buyers and sellers for items sold offline.
- Engage with us in other related ways, including any marketing or events
Questions or concerns? Reading this Privacy Notice will help you understand your privacy rights and choices. We are responsible for making decisions about how your personal information is processed. If you do not agree with our policies and practices, please do not use our Services.privacy@fyndu.ie .
SUMMARY OF KEY POINTS
This summary provides key points from our Privacy Notice, but you can find out more details about any of these topics by clicking the link following each key point or by using our table of contents below to find the section you are looking for.
What personal information do we process? When you visit, use, or navigate our Services, we may process personal information depending on how you interact with us and the Services, the choices you make, and the products and features you use. Learn more about personal information you disclose to us.
Do we process any sensitive personal information?
Do we collect any information from third parties?
How do we process your information? We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. We may also process your information for other purposes with your consent. We process your information only when we have a valid legal reason to do so. Learn more about how we process your information.
In what situations and with which
How do we keep your information safe? We have adequate
What are your rights? Depending on where you are located geographically, the applicable privacy law may mean you have certain rights regarding your personal information. Learn more about your privacy rights.
How do you exercise your rights? The easiest way to exercise your rights is by https://fyndu.ie/privacy-policy
Want to learn more about what we do with any information we collect? Review the Privacy Notice in full.
TABLE OF CONTENTS
1. WHAT INFORMATION DO WE COLLECT?
Personal information you disclose to us
In Short: We collect personal information that you provide to us.We collect personal information that you voluntarily provide to us when you
Personal Information Provided by You. The personal information that we collect depends on the context of your interactions with us and the Services, the choices you make, and the products and features you use. The personal information we collect may include the following:
names
phone numbers
email addresses
usernames
passwords
contact preferences
contact or authentication data
date of birth (for age verification; users must be 18 or older)
Sensitive Information (Article 9 GDPR). We do not process special category personal data (for example health, racial or ethnic origin, political opinions, or religious beliefs).
Payment Data. We may collect data necessary to process your payment if you choose to make purchases, such as your payment instrument number, and the security code associated with your payment instrument. All payment data is handled and stored byGoogle Play / Google Payments Apple App Store https://policies.google.com/privacy https://www.apple.com/legal/privacy/
Google and Apple sign-in. You may register or sign in with Google Sign-In (and Sign in with Apple on iOS when available). We do not offer sign-in through Facebook, X (Twitter), or other social networks. If you use Google or Apple sign-in, we receive certain profile information from that provider, as described in the section called
Application Data. If you use our application(s), we also may collect the following information if you choose to provide us with access or permission:
- Geolocation Information. With your permission, we may access your device's location while you use the App (for example when you first open Fyndu or when you create or edit a listing) to suggest your selling area. We do not track your location continuously in the background. You can deny permission and enter your area manually (county or town). Listing coordinates may be stored to show an approximate area on maps (typically within a few hundred metres), not your exact address.
- Mobile Device Access. We may request access or permission to certain features from your mobile device, including your mobile device's
camera ,storage ,optional on-device authentication to open the app; biometric data is not transmitted to our servers. ,and other features. If you wish to change our access or permissions, you may do so in your device's settings.
- Mobile Device Data. We automatically collect device information (such as your mobile device ID, model, and manufacturer), operating system, version information and system configuration information, device and application identification numbers, browser type and version, hardware model Internet service provider and/or mobile carrier, and Internet Protocol (IP) address (or proxy server). If you are using our application(s), we may also collect information about the phone network associated with your mobile device, your mobile device’s operating system or platform, the type of mobile device you use, your mobile device’s unique device ID, and information about the features of our application(s) you accessed.
- Push Notifications. We may request to send you push notifications regarding your account or certain features of the application(s). If you wish to opt out from receiving these types of communications, you may turn them off in your device's settings.
This information is primarily needed to maintain the security and operation of our application(s), for troubleshooting, and for our internal analytics and reporting purposes.
All personal information that you provide to us must be true, complete, and accurate, and you must notify us of any changes to such personal information.
Information automatically collected
In Short: Some information — such as your Internet Protocol (IP) address and/or browser and device characteristics — is collected automatically when you visit our Services.We automatically collect certain information when you visit, use, or navigate the Services. This information does not reveal your specific identity (like your name or contact information) but may include device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, information about how and when you use our Services, and other technical information. This information is primarily needed to maintain the security and operation of our Services, and for our internal analytics and reporting purposes.
Like many businesses, we also collect information through cookies and similar technologies.
The information we collect includes:
- Log and Usage Data. Log and usage data is service-related, diagnostic, usage, and performance information our servers automatically collect when you access or use our Services and which we record in log files. Depending on how you interact with us, this log data may include your IP address, device information, browser type, and settings and information about your activity in the Services (such as the date/time stamps associated with your usage, pages and files viewed, searches, and other actions you take such as which features you use), device event information (such as system activity, error reports (sometimes called
'crash dumps' ), and hardware settings).
- Device Data. We collect device data such as information about your computer, phone, tablet, or other device you use to access the Services. Depending on the device used, this device data may include information such as your IP address (or proxy server), device and application identification numbers, location, browser type, hardware model, Internet service provider and/or mobile carrier, operating system, and system configuration information.
- Location Data. We collect location data such as information about your device's location, which can be either precise or imprecise. How much information we collect depends on the type and settings of the device you use to access the Services. For example, we may use GPS and other technologies to collect geolocation data that tells us your current location (based on your IP address). You can opt out of allowing us to collect this information either by refusing access to the information or by disabling your Location setting on your device. However, if you choose to opt out, you may not be able to use certain aspects of the Services.
Google API
Our use of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements.Information collected from other sources
In Short: We only receive limited profile data when you choose to sign in with Google or Apple (for example name and email). We do not buy marketing lists or collect data from social media for advertising.When you use Sign in with Google or Sign in with Apple, we receive the account details those providers share with us to create or link your Fyndu account (typically name and email). We do not obtain information about you from marketing brokers, affiliate programmes, or purchased contact lists. We do not use social sign-in data for third-party advertising. Standard technical logs (such as IP address and device type) may be collected automatically for security, fraud prevention, and service operation. We do not purchase contact lists or collect job titles, intent data, or social profiles for advertising.
When you sign in with Google, we receive profile information from Google (such as your name, email address, and profile picture) as permitted by your Google account settings. We do not receive information from Facebook or X because we do not offer those sign-in options. You may have the right to withdraw your consent to processing your personal information. Learn more about withdrawing your consent. Any personal information that we collect from Google depends on your Google account privacy settings (and, when available, your Apple ID settings for Sign in with Apple). Please note that their own use of your information is not governed by this Privacy Notice.
2. HOW DO WE PROCESS YOUR INFORMATION?
In Short: We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law.We process your personal information for a variety of reasons, depending on how you interact with our Services, including:
- To facilitate account creation and authentication and otherwise manage user accounts. We may process your information so you can create and log in to your account, as well as keep your account in working order.
- To deliver and facilitate delivery of services to the user. We may process your information to provide you with the requested service.
- To respond to user inquiries/offer support to users. We may process your information to respond to your inquiries and solve any potential issues you might have with the requested service.
- To send administrative information to you. We may process your information to send you details about our products and services, changes to our terms and policies, and other similar information.
- To manage optional in-app purchases from Fyndu (for example listing boosts). We may process your information to process optional in-app purchases from Fyndu (such as listing boosts through Apple App Store or Google Play). Fyndu does not process payments, returns, or exchanges for peer-to-peer sales between users.
- To enable user-to-user communications. We may process your information if you choose to use any of our offerings that allow for communication with another user.
- To protect our Services. We may process your information as part of our efforts to keep our Services safe and secure, including fraud monitoring and prevention.
- To identify usage trends. We may process information about how you use our Services to better understand how they are being used so we can improve them.
- To save or protect an individual's vital interest. We may process your information when necessary to save or protect an individual’s vital interest, such as to prevent harm.
- Content moderation and safety.
We review listings, photos, messages, and abuse reports using automated tools and human review to enforce our Terms and keep users safe.
3. WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR INFORMATION?
In Short: We only process your personal information when we believe it is necessary and we have a valid legal reason (i.e.The General Data Protection Regulation (GDPR) and UK GDPR require us to explain the valid legal bases we rely on in order to process your personal information. As such, we may rely on the following legal bases to process your personal information:
- Consent. We may process your information if you have given us permission (i.e.
consent) to use your personal information for a specific purpose. You can withdraw your consent at any time. Learn more about withdrawing your consent.
- Performance of a Contract. We may process your personal information when we believe it is necessary to
fulfil our contractual obligations to you, including providing our Services or at your request prior to entering into a contract with you.
- Legitimate Interests. We may process your information when we believe it is reasonably necessary to achieve our legitimate business interests and those interests do not outweigh your interests and fundamental rights and freedoms. For example, we may process your personal information for some of the purposes described in order to:
Analyse how our Services are used so we can improve them to engage and retain users
- Diagnose problems and/or prevent fraudulent activities
prevent fraud, scams, illegal content, harassment, and abuse on the marketplace.
- Legal Obligations. We may process your information where we believe it is necessary for compliance with our legal obligations, such as to cooperate with a law enforcement body or regulatory agency, exercise or defend our legal rights, or disclose your information as evidence in litigation in which we are involved.
- Vital Interests. We may process your information where we believe it is necessary to protect your vital interests or the vital interests of a third party, such as situations involving potential threats to the safety of any person.
Vendors, Consultants, and Other Third-Party Service Providers. We may share your data with third-party vendors, service providers, contractors, or agents (
The
- AI Service Providers
- Allow Users to Connect to Their Third-Party Accounts
- Cloud Computing Services
- Functionality and Infrastructure
Optimisation
- Invoice and Billing
- User Account Registration and Authentication
- Website Performance Monitoring
- Website Testing
Vehicle registration lookup
User authentication (iOS)
In-app purchases (iOS)
Website hosting
We
- Business Transfers. We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
- When we use Google Maps Platform APIs. We may share your information with certain Google Maps Platform APIs (e.g.
Google Maps API, Places API). We use certain Google Maps Platform APIs to retrieve certain information when you make location-specific requests. This includes: Approximate listing location (area name / locality shown on listings) Geographic coordinates associated with listings (latitude/longitude used for distance and map display) Location information derived from address or area text via geocoding (Google Maps Platform) User device location when the user grants location permission (to show nearby listings and listing area on a map) Map interaction data processed by Google when Maps is displayed (as described in Google’s policies) ;and other similar information. A full list of what we use information for can be found in this section and in the previous section titled ' HOW DO WE PROCESS YOUR INFORMATION? ' When a map is displayed, Google may process limited device or location signals under Google's own policies. Fyndu uses maps only to show approximate listing areas — not turn-by-turn navigation or driving directions. We do not store your device location on Fyndu servers for twelve months. Coordinates attached to a listing are kept only for the life of that listing, then deleted. You may revoke location permission in your device settings at any time. The Google Maps Platform APIs that we use store and access cookies and other information on your devices. If you are a user currently in the European Economic Area (EU countries, Iceland, Liechtenstein, and Norway) or the United Kingdom, please see our Cookie Policy .
- Other Users. When you share personal information
(for example, by posting comments, contributions, or other content to the Services) or otherwise interact with public areas of the Services, such personal information may be viewed by all users and may be publicly made available outside the Services in perpetuity. Similarly, other users will be able to view descriptions of your activity, communicate with you within our Services, and view your profile.
For full details on cookies and similar technologies on fyndu.ie, see our Cookie Policy (separate document).
We may use cookies and similar tracking technologies (like web beacons and pixels) to gather information when you interact with our Services. Some online tracking technologies help us maintain the security of our Services
We may use limited third-party technologies (for example Google Firebase or cookies on fyndu.ie) for security, crash reporting, and service performance — not to display third-party advertisements, retarget you, or send shopping-cart reminders. Fyndu is a peer-to-peer marketplace and does not sell goods directly or operate a checkout cart. See our Cookie Policy for details.
Specific information about how we use such technologies and how you can refuse certain cookies is set out in our Cookie Notice
6. DO WE OFFER ARTIFICIAL INTELLIGENCE-BASED PRODUCTS?
In Short: We offer products, features, or tools powered by artificial intelligence, machine learning, or similar technologies.As part of our Services, we offer products, features, or tools powered by artificial intelligence, machine learning, or similar technologies (collectively,
Use of AI Technologies
We provide the AI Products through third-party service providers (OpenAI Sightengine
Our AI Products
Our AI Products are designed for the following functions:
Image analysis
Text analysis
How We Process Your Data Using AI
All personal information processed using our AI Products is handled in line with our Privacy Notice and our agreement with third parties. This ensures high security and safeguards your personal information throughout the process, giving you peace of mind about your data's safety.
How to Opt Out
This section applies to optional AI-assisted features, if and when offered in the app. It does not cover automated safety moderation — see the note below. To opt out of optional AI features, you can:
Contact us using the contact information provided
Automated safety moderation (legitimate interest — not an opt-out). Automated checks on listings and messages keep the marketplace safe and are not optional opt-out processing. If you disagree with a moderation decision, contact privacy@fyndu.ie or support@fyndu.ie to request human review.
Our Services offer you the ability to register and log in using Google Sign-In (and Sign in with Apple on iOS when available). We do not support sign-in through Facebook or X (Twitter). Where you choose to do this, we will receive certain profile information from Google or Apple. The profile information we receive may vary depending on the provider; for Google this typically includes your name, email address, and profile picture, as permitted by your Google account settings.
We will use the information we receive only for the purposes that are described in this Privacy Notice or that are otherwise made clear to you on the relevant Services. Please note that we do not control, and are not responsible for, other uses of your personal information by your third-party social media provider. We recommend that you review their privacy notice to understand how they collect, use, and share your personal information, and how you can set your privacy preferences on their sites and apps.
8. IS YOUR INFORMATION TRANSFERRED INTERNATIONALLY?
In Short: We may transfer, store, and process your information in countries other than your own.Our servers are located inIreland United States,
If you are a resident in the European Economic Area (EEA), United Kingdom (UK), or Switzerland, then these countries may not necessarily have data protection laws or other similar laws as comprehensive as those in your country. However, we will take all necessary measures to protect your personal information in accordance with this Privacy Notice and applicable law.
European Commission's Standard Contractual Clauses:
We have implemented measures to protect your personal information, including by using the European Commission's Standard Contractual Clauses for transfers of personal information between us and our third-party providers. These clauses require all recipients to protect all personal information that they process originating from the EEA or UK in accordance with European data protection laws and regulations.https://supabase.com/legal/dpa .
9. HOW LONG DO WE KEEP YOUR INFORMATION?
In Short: We keep your information for as long as necessary toWe will only keep your personal information for as long as it is necessary for the purposes set out in this Privacy Notice, unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements).
Fyndu retention schedule (summary). Account data — life of account + 30 days after deletion request. Listings/images — until deleted or account removed. Listing GPS — life of listing only. Chat — while parties have accounts (see account deletion section). Moderation/security logs — ~90 days. Boost purchases — up to 6 years for tax/accounting where required.
When we have no ongoing legitimate business need to process your personal information, we will either delete or
10. HOW DO WE KEEP YOUR INFORMATION SAFE?
In Short: We aim to protect your personal information through a system ofWe have implemented appropriate and reasonable technical and
11. DO WE COLLECT INFORMATION FROM MINORS?
In Short: We do not knowingly collect data from or market toWe do not knowingly collect, solicit data from, or market to children under 18 years of agesupport@fyndu.ie
12. WHAT ARE YOUR PRIVACY RIGHTS?
In Short:In some regions (like
We will consider and act upon any request in accordance with applicable data protection laws.
Fyndu is operated from Ireland. Our lead supervisory authority is the Data Protection Commission (DPC). If you are located in the EEA or UK and you believe we are unlawfully processing your personal information, you also have the right to complain to your Member State data protection authority or UK data protection authority.
If you are located in Switzerland, you may contact the Federal Data Protection and Information Commissioner.
Withdrawing your consent: If we are relying on your consent to process your personal information,
However, please note that this will not affect the lawfulness of the processing before its withdrawal nor,
Opting out of marketing and promotional communications: You can unsubscribe from our marketing and promotional communications at any time by
Account Information
If you would at any time like to review or change the information in your account or terminate your account, you can:Log in to your account settings and update your user account.
Contact us using the contact information provided.
Upon your request to terminate your account, we will deactivate or delete your account and information from our active databases. However, we may retain some information in our files to prevent fraud, troubleshoot problems, assist with any investigations, enforce our legal terms and/or comply with applicable legal requirements.
Cookies and similar technologies: Most Web browsers are set to accept cookies by default. If you prefer, you can usually choose to set your browser to remove cookies and to reject cookies. If you choose to remove cookies or reject cookies, this could affect certain features or services of our Services.
If you have questions or comments about your privacy rights, you may email us at privacy@fyndu.ie .
13. CONTROLS FOR DO-NOT-TRACK FEATURES
Most web browsers and some mobile operating systems and mobile applications include a Do-Not-Track (14. WHO OPERATES FYNDU
15. PAYMENTS BETWEEN USERS
16. ACCOUNT DELETION AND RETENTION
17. MARKETING AND SECURITY COMMUNICATIONS
18. HOW TO EXERCISE YOUR PRIVACY RIGHTS
19. DO WE MAKE UPDATES TO THIS NOTICE?
In Short: Yes, we will update this notice as necessary to stay compliant with relevant laws.We may update this Privacy Notice from time to time. The updated version will be indicated by an updated
Privacy contact. We are not required to appoint a Data Protection Officer. For data protection questions or to exercise your rights, email privacy@fyndu.ie.
7. HOW DO WE HANDLE YOUR SOCIAL LOGINS?
In Short: If you choose to register or log in with Google or Apple, we may receive certain information about you from that provider.