Privacy Policy

Last updated: April 2026  |  Cabalisto

At Cabalisto we are committed to protecting your privacy. This Privacy Policy describes how we collect, use, store and share your information when you use our mobile application and website (together, the "Services").

1. Data Controller

The data controller for your personal data is Cabalisto, contact: welcome@cabalisto.com.

2. Information We Collect

We may collect the following types of information:

• Account information: name, email address, password (encrypted) and profile photo.
• Social login information: if you sign in with Google, we receive your name and email from that provider.
• Listing content: photos, descriptions, prices and contact details you publish.
• Messages: the content of messages exchanged between users on the platform.
• Usage data: pages visited, searches performed, interactions with listings.
• Device data: model, operating system, device identifier, language and IP address.
• Notification token (FCM): to send you push notifications.
• Location (manually selected): city or region the user specifies when posting a listing; we do not access the device GPS.

3. How We Use Your Information

• Create and manage your user account.
• Publish and manage your classified listings.
• Facilitate communication between buyers and sellers.
• Send you notifications related to your activity on the platform.
• Improve and personalise the Services.
• Display relevant advertising through Google AdSense and associated advertising networks.
• Detect and prevent fraud or misuse.
• Comply with applicable legal obligations.

4. Cookies and Similar Technologies

We use cookies and similar tracking technologies (pixels, web beacons, local storage) to improve your experience, analyse traffic and display personalised advertising.

What is a cookie?

A cookie is a small text file stored on your device when you visit a website. It allows us to remember your preferences, keep you logged in and offer you content tailored to your interests.

Types of cookies we use

Google AdSense and Third-Party Advertising

Cabalisto uses Google AdSense to display advertisements. Google and its partners may use cookies (such as the DoubleClick cookie) to serve ads based on prior visits to this or other websites. This is known as interest-based or personalised advertising.

Google uses the advertising identifier (IDFA on iOS / GAID on Android) to deliver personalised ads in the mobile app.

You can learn more about how Google uses data when you use our partners' sites or apps at: policies.google.com/technologies/partner-sites.

Managing cookies in your browser

You can configure your browser to reject all cookies, accept only cookies from trusted sites, or alert you when a cookie is set. Please note that disabling cookies may affect site functionality.

• Google Chrome
• Mozilla Firefox
• Safari
• Microsoft Edge

5. Legal Basis for Processing (GDPR)

We process your data on the following legal bases:

• Performance of a contract: where processing is necessary to provide the Services.
• Consent: for push notifications, non-essential cookies and marketing communications (revocable at any time).
• Legitimate interests: for security, fraud prevention and improvement of the Services.
• Legal obligation: where required by law.

6. Sharing Data with Third Parties

We do not sell your personal data. We may share information with:

• Google LLC: Firebase (notifications, storage), Google Analytics (analytics), Google AdSense / DoubleClick (advertising). Google may transfer data to third countries with appropriate safeguards.
• Authentication providers: Google Sign-In.
• Hosting providers: servers where platform data is stored.
• Legal authorities: when required by law or to protect our rights.

All our providers are contractually bound to protect your information and not to use it for purposes other than those stated.

7. International Data Transfers

Some of our providers, such as Google, may process data outside the European Economic Area (EEA). In such cases, we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

8. Data Retention

We retain your data for as long as your account is active or as necessary to provide the Services. After you delete your account, we will delete or anonymise your data within a maximum of 30 days, unless the law requires a longer period.

9. Your Rights

Under GDPR and applicable law, you have the right to:

• Access the data we hold about you.
• Rectify inaccurate or incomplete data.
• Delete your account and all your data (from Settings → Account → Delete account).
• Object to processing based on legitimate interests or for direct marketing.
• Data portability in a readable format.
• Withdraw consent at any time, without affecting the lawfulness of prior processing.
• Lodge a complaint with your local data protection authority.

To exercise any right, contact us at welcome@cabalisto.com.

10. Security

We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss or destruction. Communication between the app and our servers is encrypted using HTTPS/TLS.

11. Children's Privacy

Our Services are not directed at persons under the age of 16. If we become aware that we have collected data from a minor without verifiable parental consent, we will delete it immediately. Parents or guardians who believe their child has provided personal data may contact us at welcome@cabalisto.com.

12. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes via an in-app notice or by email. Continued use of the Services after changes are posted constitutes acceptance of the updated policy.

13. Contact

For any questions about this policy or the processing of your data:

• Email: welcome@cabalisto.com
• Web: www.cabalisto.com

Google Privacy Policy: policies.google.com/privacy