Dernière mise à jour : September 2026
1. Data we collect
As part of your use of PostiGo, we collect the following data:
- Identification data: name, username, email address, phone number.
- Profile data: city, profile photo.
- Listing content: title, description, price, photos.
- Messaging data: messages exchanged between users.
- Usage data: interactions with the app (views, favorites), IP address, device identifier, operating system.
- Notification token: a technical identifier used to send you push notifications (new messages, listing status). You can disable notifications at any time in your device settings.
- Photos and camera: with your prior authorization, to illustrate your listings.
- Identity documents: when requesting account verification, we collect photos of official identification documents (national ID card, passport, driver’s license, or residence permit). These documents are used to verify your identity and, where applicable, to handle a dispute or fraud involving your account. They are stored in a private space, accessible only to the PostiGo administration team, and automatically deleted no later than 180 days after submission. Your “verified” badge remains after this automatic deletion. You may request early deletion at postigoappli@gmail.com; the “verified” badge is then removed from your profile. If a report concerning you is being processed, deletion takes place once it is closed.
- Approximate location: with your authorization, we access your approximate location to display it on the built-in map. This data is never stored on our servers.
- Payment data: when you purchase credits through the App Store or Google Play, we retain the purchase record and the history of your credit movements (purchases, spending on Pro subscriptions, featuring, or quota resets). PostiGo does not process or store any bank or payment card data: payments are handled directly between you and Apple or Google.
2. Purpose of processing
Your data is used to:
- Create and manage your user account.
- Display your listings and enable users to connect with each other.
- Send you notifications related to your activity (messages, listing status).
- Improve the user experience and features of the app.
- Fight fraud and ensure the security of the platform.
- Comply with our legal obligations.
3. Data retention
Your data is retained for as long as you use the app.
If your account is deleted (from the app or upon an external request), access to your account is blocked immediately and irreversibly: no reactivation is possible. Your content (listings, requests, profile, reviews, subscriptions) becomes invisible to other users as soon as it is deleted.
Your data, including messages, is nonetheless retained for a further 30 days before permanent deletion, accessible only to our moderation team, in order to handle any reports, disputes, or fraud concerning the account. After this period, all your data (listings, messages, conversations, favorites, reviews, reports, identity documents, notification token) is permanently and irreversibly deleted.
In the case of an external request (form), the same process is triggered within a maximum of 30 days of your request.
- Identity documents are deleted no later than 180 days after submission (see section 1).
- Technical logs are retained for 3 months for security purposes, independently of account deletion.
After these periods, your data is deleted or anonymized.
4. Sharing with third parties
PostiGo does not sell your personal data to third parties.
Your data is hosted and processed by Supabase Inc. (United States), our main technical provider, which handles the database, authentication, and file storage. Supabase is SOC 2 Type II certified and contractually commits to protecting your data.
Interactive maps are provided by Google Maps (Google LLC, United States), which may collect approximate location data in accordance with its own privacy policy.
Credit purchases are processed by Apple (App Store) or Google (Google Play), each subject to their own respective privacy policies.
No other data sharing takes place without your explicit consent.
5. International transfers
Your data is processed on servers located in the United States (Supabase Inc.). These transfers are governed by standard contractual clauses guaranteeing an adequate level of protection for your personal data.
6. Your rights
In accordance with applicable regulations, you have the following rights over your data:
- Right of access: obtain a copy of your data.
- Right of rectification: correct inaccurate data.
- Right to erasure: request deletion of your data.
- Right to object: object to certain processing.
- Right to data portability: receive your data in a structured format.
You can update or delete your information directly from your profile in the app. For any further request, contact us at postigoappli@gmail.com.
7. Protection of minors
PostiGo is intended for people aged 16 and older. We do not knowingly collect personal data from minors under 16. If you are a parent or guardian and become aware that your child has provided us with data, contact us immediately at postigoappli@gmail.com so we can delete it.
8. Security
PostiGo implements appropriate technical and organizational measures to protect your data: encrypted communications (TLS), secure storage of credentials (encryption at rest), and access to data restricted according to the principle of least privilege.
No system is infallible. In the event of a data breach likely to affect your rights, we commit to informing you as soon as possible.
9. Changes to this policy
We may update this policy from time to time. Any substantial change will be notified to you by email or via an in-app notification before it takes effect. The date of the last update is shown at the top of this document.
10. Contact
For any question about this privacy policy or to exercise your rights:
Email: postigoappli@gmail.com
Phone: +228 99 29 86 00