Privacy Policy
delbud is a marketplace for used car parts. Buyers post what they need, sellers bid, and the two arrange the sale. This policy explains what data we handle and why.
Who we are. The service is operated by Victor Shvetsov (individual), the data controller. It may be transferred to delbud ApS in the future; this policy will be updated if that happens. Contact: victor@getd.dk.
What we collect
- Account. Your email, name, and whether you registered as a private person or a business.
- Location. If you allow it, an approximate location (rounded to about 1 km, never your exact address) so buyers and sellers can see distance and nearby demand. You can decline; the app still works.
- Vehicle data. When you look up a Danish number plate, we retrieve the vehicle's make, model, variant, fuel type and VIN from the official registry to fill in the part request.
- Content you create. Part requests, bids, photos you upload, and the messages you send in chat.
- Payment data. Payments and seller payouts are handled by Stripe. We do not store card numbers. We keep references to the payment and payout (identifiers, amount, status) to run the escrow and show order status. Sellers who receive money complete identity verification directly with Stripe.
- Device. A push-notification token and basic technical data needed to run the app.
Why we use it
To operate the marketplace: create your account, match requests with sellers, show distance, enable chat, process payments through escrow, send notifications, and prevent abuse. We do not sell your data.
Who we share it with (processors)
- Supabase — database and authentication hosting.
- Cloudflare — backend/API hosting.
- Stripe — payments, escrow, and seller identity verification (KYC/KYB).
- Synsbasen — Danish number-plate vehicle lookups.
- Expo / Google Firebase — push notifications and app updates.
Retention and deletion
We keep your data while your account is active. You can delete your account from the app; when you do, your profile and content are removed. Some records tied to completed payments may be retained where required by accounting or legal obligations. Data held by Stripe is subject to Stripe's own retention and legal requirements.
Your rights
Under the GDPR you can request access to, correction of, or deletion of your data, and object to processing. Contact us at victor@getd.dk.
Security
Data is transmitted over encrypted connections. Access to backend data is restricted to the service and protected by row-level security. Sensitive credentials are stored server-side, never in the app.
Children
delbud is not intended for anyone under 18.
Changes
We may update this policy. Material changes will be reflected here with a new date.