Privacy Policy
Last updated: June 2026
1. Data controller
OXO SRL (VAT RO6926354), based in Miercurea Ciuc, Romania, is the controller of your personal data under Regulation (EU) 2016/679 (GDPR). Data protection contact: gdpr@oxo.ro.
2. Data we collect
Account data (name, email), listing and message content, contact details you voluntarily provide, and minimal technical data (usage logs) needed to operate.
3. Purpose
Providing the service, authentication, facilitating contact between users, content moderation, improving the platform and transactional communications (e.g. account confirmation, password reset).
4. Legal basis
Performance of contract (terms of use), legitimate interest in operating and securing the platform, and where applicable, your consent.
5. Cookies
We use essential cookies for authentication and operation. We do not use marketing cookies without your consent. Manage preferences via the cookie banner.
6. Sharing
We do not sell your data. Contact details in listings become visible to other users only when you initiate or accept a contact. We may use infrastructure providers (hosting, email) under confidentiality obligations.
7. Your rights
You have the rights of access, rectification, erasure, restriction, portability and objection. You can export your data (JSON) and delete your account directly from “My account” → “Privacy & data”. Contact gdpr@oxo.ro or lodge a complaint with the supervisory authority (ANSPDCP).
8. Retention
We retain data while your account is active or as needed for the described purposes and legal obligations. Password reset tokens expire automatically within 1 hour.