Privacy Policy

1. Who We Are

Equitaro operates the marketplace at equitaro.com and is based in Portugal. As the data controller, you can reach us at [email protected]. We are committed to protecting your personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable national laws.

2. Data We Collect

We collect the following personal data:

• Account information: name, email address (required for registration)
• Profile information: phone number, WhatsApp, location, bio, profile photo (optional, controlled by you)
• Listing data: photos, descriptions, prices, horse details that you publish
• Messages: content of conversations between buyers and sellers
• Usage data: pages visited, search queries, IP address (for security)

3. How We Use Your Data

We use your data to:

• Provide and operate the marketplace
• Enable communication between buyers and sellers
• Process promotion payments via Stripe
• Prevent fraud and ensure platform security

Legal bases: we process your data to perform our contract with you (operating your account and listings), on the basis of our legitimate interest (security, fraud prevention, and contacting professionals about the platform), and on your consent where applicable (optional profile data and marketing emails).

4. Your Rights (GDPR)

Under the GDPR, you have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your account and all associated data (right to be forgotten)
• Export your data in a portable format
• Withdraw consent for optional data processing (marketing emails)
• Object to profiling or automated decision-making
• Lodge a complaint with your data protection authority (in Portugal, the CNPD)

5. Data Sharing

We do not sell your personal data. We share data only with service providers that process it on our behalf: Supabase (database hosting, EU), Stripe (payment processing), Cloudflare (CDN and security), DeepL (automatic listing translation, EU), and Resend (transactional and outreach email; US, certified under the EU-U.S. Data Privacy Framework). We also send operational alerts (e.g. new registrations) to our team via Telegram. Your phone number and WhatsApp are only visible to other users if you explicitly enable this in your privacy settings.

Promotional sharing: under the licence described in the Terms of Service, listing content (text, photos and videos) may be shared on Equitaro's official channels, including social media. This involves transferring that content to the corresponding platforms, including providers in the US (for example Meta, certified under the EU-U.S. Data Privacy Framework). Any identifiable person in the photos or videos may object to this sharing or request the removal of the posts (Articles 17 and 21 GDPR) by contacting us — we will carry out the removal within a reasonable time.

6. Data Retention

We retain your data for as long as your account is active. When you delete your account, all personal data is permanently removed from our live systems within 30 days. Encrypted security backups are kept for up to 6 months and are not restored selectively; deleted data expires from them automatically. Billing records may be kept longer where required by tax law. Anonymized usage statistics may be retained for analytics.

7. Contact

For privacy-related requests or to exercise your GDPR rights, contact us at:

Contact: [email protected]