Privacy Policy

We collect data you give us directly, and a small amount of data generated by using the Platform:

• Account data: display name, username, email address, phone number, avatar, and — if you complete a seller/dealer profile — your address, municipality, and (for company accounts) business details.
• Sign-in data: if you sign in with Google, we receive your name, email, and profile photo from Google. If you sign in with email and password, your password is stored and verified by our authentication provider (Firebase) — we never see or store it in plain text.
• Listing content: anything you include in a listing — photos, description, price, category, and location.
• Activity data: favorites, saved searches, booking requests, messages you send other users, and reviews you leave.
• Payment data: if you pay a listing fee, our payment processor, Stripe, handles your card details directly. We receive confirmation of payment and limited metadata (amount, currency, status, and which listing the payment relates to) — never your full card number.
• Technical data: a strictly necessary session cookie that keeps you signed in, and standard server logs (such as IP address and timestamps) generated by our hosting and security infrastructure.

We do not currently use analytics, advertising, or cross-site tracking cookies. If that changes, we will update this policy and, where required by law, ask for your consent first.

• To create and manage your account, and to authenticate you when you sign in;
• To publish and display your listings, and to show relevant listings to other users;
• To let users message each other, request bookings, and leave reviews;
• To process listing-fee payments and keep the related records;
• To communicate with you about your account, listings, or transactions;
• To detect and prevent fraud, abuse, and violations of our Terms;
• To comply with legal obligations, such as tax and accounting record-keeping.

We process your data to perform the contract we have with you (running your account and listings), to comply with our legal obligations (such as bookkeeping), for our legitimate interests (such as keeping the Platform secure and preventing fraud), and, where applicable, based on your consent (for example, optional profile fields).

We share data with other users only where it's needed to use the Platform — for example, a seller sees the name and message content of a buyer who contacts them about a listing, and your listing content is public by design.

We also share data with service providers who process it on our behalf, including:

• Firebase / Google Cloud — authentication and, for images and avatars, file storage;
• Stripe — payment processing;
• Our database and hosting providers — to run and store the Platform's data.

We do not sell your personal data, and we do not share it with third parties for their own advertising purposes. We may disclose data where required by law, to enforce our Terms, or to protect the rights, property, or safety of SoMiFali, our users, or the public.

We keep your account and listing data for as long as your account is active. If you delete your account, we keep your data for 30 days — during that window your listings are hidden from public view, but signing back in restores your account and any listings that were active when you deleted it. After 30 days, we permanently delete your account, listings, and associated files (photos, avatar) from our systems.

Some records, such as payment and invoicing data, may be retained for longer where required by applicable tax or accounting law, even after account deletion.

Subject to applicable law, you have the right to access the personal data we hold about you, request correction of inaccurate data, request deletion of your data, object to or restrict certain processing, and request a copy of your data in a portable format. You can update most of your account data directly from your account settings, or delete your account at any time.

To exercise any of these rights, contact us at privacy@somifali.com. If you believe we have not handled your data properly, you also have the right to lodge a complaint with the Personal Data Protection Agency of North Macedonia.

We use one strictly necessary cookie to keep you signed in. It does not track you across other websites and is not used for advertising. Because it's strictly necessary for the Platform to function, it does not require a cookie-consent banner under most privacy frameworks.

The Platform is not directed at, and is not intended for use by, anyone under 18. We do not knowingly collect data from children.

We use reasonable technical and organizational measures, such as encrypted connections and access controls, to protect your data. No method of transmission or storage is completely secure, so we can't guarantee absolute security.

Some of our service providers (such as Google and Stripe) may process data outside North Macedonia or the European Economic Area. Where that happens, we rely on the safeguards those providers offer, such as standard contractual clauses or equivalent measures, to protect your data.

We may update this Privacy Policy from time to time. If we make material changes, we will update the “Last updated” date above and, where appropriate, notify you through the Platform.

For any question about this Privacy Policy or how we handle your data, contact us at privacy@somifali.com.