Privacy Policy

Controller

The controller responsible for data processing is:
Melograno Group OÜ
Aiandi tn 8/1-26
12915 Tallinn, Estonia
Registration Number: 17314151
E-Mail: contact@publishmany.eu

Data Processing Activities

Authentication

We use Supabase (hosted in the EU) for user authentication. When you sign up or log in, we process your email address and authentication tokens. Legal basis: Art. 6(1)(b) GDPR — necessary for the performance of the contract.

Item Data Storage

When you create listings, we store the title, description, price, category, and uploaded photos you provide. This data is stored in our EU-hosted database. Legal basis: Art. 6(1)(b) GDPR — necessary for the performance of the contract.

AI-Powered Item Identification

When you use the AI identification feature, your uploaded photos are sent to OpenAI (USA) for analysis. OpenAI processes the images to identify items and generate descriptions. Legal basis: Art. 6(1)(b) GDPR — necessary for the performance of the contract.

Push Notifications

If you opt in, we send push notifications to your browser or device to notify you about your listings. We store your push subscription endpoint for this purpose. Legal basis: Art. 6(1)(a) GDPR — your consent. You can withdraw consent at any time by disabling notifications in your browser or device settings.

Error Tracking (Sentry)

We use Sentry (EU) to monitor and fix technical errors. Sentry may collect technical data such as error messages, stack traces, browser type, and IP address (anonymized). Legal basis: Art. 6(1)(f) GDPR — our legitimate interest in maintaining a stable and secure service.

Analytics (Google Tag Manager)

With your consent, we use Google Tag Manager to load analytics scripts that help us understand how our website is used. No analytics data is collected without your explicit consent via our cookie banner. Legal basis: Art. 6(1)(a) GDPR — your consent.

Marketing (Facebook Pixel & Microsoft Clarity)

With your consent, we use Facebook Pixel (Meta) for conversion tracking and ad optimization, and Microsoft Clarity for session recordings and heatmaps to improve our website usability. No marketing data is collected without your explicit consent via our cookie banner. Legal basis: Art. 6(1)(a) GDPR — your consent.

Customer Support (chrisp.chat)

With your consent, we use chrisp.chat, a live chat service, to provide you with direct customer support via our website. When you use the chat, your chat messages, name (if provided), email address (if provided), IP address, browser information, and conversation timestamps are transmitted to chrisp.chat and stored on servers located in the EU. Legal basis: Art. 6(1)(a) GDPR — your consent. You can withdraw your consent at any time by changing your cookie settings or by not using the chat feature. Withdrawal does not affect the lawfulness of processing based on consent before its withdrawal.

Recipients of Your Data

Your personal data may be shared with the following service providers who process data on our behalf:

• Supabase Inc. (authentication, EU hosting)
• OpenAI, LLC (AI item identification, USA)
• Functional Software, Inc. / Sentry (error tracking, EU)
• Google LLC (analytics via GTM, USA)
• Meta Platforms, Inc. (Facebook Pixel, USA)
• Microsoft Corporation (Clarity, USA)
• chrisp.chat (customer support chat, EU hosting)
• Browser/OS push notification services (Apple, Google, Mozilla)

Third-Country Transfers

Some of our service providers are based in the USA. For transfers to the USA, we rely on the EU-U.S. Data Privacy Framework (DPF) where the provider is certified, supplemented by Standard Contractual Clauses (SCCs) pursuant to Art. 46(2)(c) GDPR. Supabase processes authentication data within the EU.

Data Retention

Item data and images are retained until you delete them or delete your account. Account data is retained until you request account deletion. Error tracking data (Sentry) is retained according to Sentry's data retention policies (typically 90 days). Analytics and marketing data is retained according to the respective provider's policies.

Your Rights

Under the GDPR, you have the following rights regarding your personal data:

• Right of access (Art. 15 GDPR) — You can request information about what personal data we process about you.
• Right to rectification (Art. 16 GDPR) — You can request correction of inaccurate data.
• Right to erasure (Art. 17 GDPR) — You can request deletion of your personal data.
• Right to restriction of processing (Art. 18 GDPR) — You can request that we restrict the processing of your data.
• Right to data portability (Art. 20 GDPR) — You can request your data in a structured, machine-readable format.
• Right to object (Art. 21 GDPR) — You can object to data processing based on legitimate interests.
• Right to withdraw consent (Art. 7(3) GDPR) — You can withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
• Right to lodge a complaint (Art. 77 GDPR) — You have the right to lodge a complaint with a supervisory authority.

To exercise your rights, please contact us at contact@publishmany.eu.

Supervisory Authority

The competent supervisory authority is the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon – AKI), Tatari 39, 10134 Tallinn, Estonia, info@aki.ee.

Cookies

Our website uses cookies. Necessary cookies are required for the website to function and are always active. Analytics and marketing cookies are only set with your explicit consent, which you can manage via our cookie banner. You can change your cookie preferences at any time using the "Cookie Settings" link in the footer.

Web Fonts

This website uses Google Fonts, which are served locally via next/font. No requests are made to Google servers when loading fonts, so no personal data is transmitted to Google for this purpose.

Microsoft Clarity

With your consent, we use Microsoft Clarity to capture how you use and interact with our website through behavioral metrics, heatmaps, and session replay. Website usage data is captured using first and third-party cookies and other tracking technologies to determine the popularity of products/services and online activity. We use this information for site optimization, fraud/security purposes, and advertising. For more information, please refer to Microsoft's privacy policy.

Contact

If you have questions about this privacy policy or about data protection, please contact: contact@publishmany.eu