Privacy Policy

1. What we collect

Account details you give us (name, email, and a profile photo if you sign in with Google). Content you post: vehicle desires, listings, offers, messages, and reviews — including the town or city and budget you enter. Technical data your browser sends automatically, such as IP address and the country it resolves to.

2. Why we collect it

To run the marketplace: to show your desire to sellers, to let the two of you talk, and to keep your account secure. We do not sell personal data, and we do not use it for advertising.

3. Who processes it for us

Gogoa is built on services that process data on our behalf:

• Supabase — accounts, authentication and the database (hosted in the United States).
• Cloudflare — website hosting and delivery, plus Turnstile, which checks you are human when you sign in or post. Waitlist addresses are stored in Cloudflare D1 in Western Europe.
• Google — only if you choose "Continue with Google". Google tells us your name, email address and profile picture.
• Resend — sends our emails, such as sign-up confirmations.
• Vimeo — hosts the introduction videos. Nothing is sent to Vimeo unless you press play; until then we show only a still image.
• OpenStreetMap — map tiles and turning a town name into coordinates. Your IP address and the place name reach OpenStreetMap when a map is shown.
• NHTSA — the public vehicle make and model list. No personal data is sent.

4. What other users can see

Your display name, profile photo, rating and reviews are public, along with any desire or listing you post — that is the point of the marketplace. Your email address is never shown to other users. Messages and offers are visible only to you and the person you are dealing with.

5. How long we keep it

For as long as your account exists. Ask us to delete it and we remove your account, desires, listings and messages. We may keep a minimal record of a completed transaction where we are legally required to.

6. Your rights

Wherever you live, you can ask for a copy of your data, ask us to correct it, or ask us to delete it. If you are in the EU or UK, the GDPR gives you those rights explicitly, along with the right to object to processing and to complain to your data protection authority. Email [email protected] and we will respond within 30 days.

7. International transfers

Our processors operate in the United States and Europe, so your data may be transferred between them. Where required, those transfers rely on the European Commission's Standard Contractual Clauses.

8. Cookies and similar technology

We use browser storage to keep you signed in and to remember whether you have seen the introduction. Cloudflare Turnstile sets what it needs to tell people from bots. We do not use advertising or analytics trackers.

9. Children

Gogoa is not intended for anyone under 18, and we do not knowingly collect their data.

10. Changes

If we change this policy in a way that materially affects you, we will tell you by email or a notice on the site before it takes effect.