Rechtliches
Privacy Policy
This page is the working MVP draft of the IMOTO privacy policy and should be reviewed by legal counsel before launch.
Data We Process
IMOTO processes account, profile, property, document, viewing, offer, audit, and communication data required to operate the platform.
Core Processing Purposes
- account creation and authentication
- listing publication and seller support
- buyer viewing and offer handling
- document access control
- audit logging and legal retention
- operational emails and notifications
- privacy and cookie consent management
Retention Highlights
- audit-relevant events: minimum 7 years
- GPS confirmation data: 90 days
- chat metadata: 90 days
- feedback data: 24 months, then anonymized where applicable
Privacy/Cookie Consent
IMOTO separates necessary, functional, analytics/statistics, and marketing/tracking categories. Anonymous visitor choices are kept client-side. Logged-in changes are persisted against the account and recorded as audit events.
Providers and Categories
necessary
- Better Auth (active): Authentication, sessions, and account security.
- Vercel (active): Hosting, edge delivery, server logs, and platform operation.
- Neon (active): Operational production database.
- Vercel Blob (active): Listing media and document file storage.
- Resend (active): Transactional platform email delivery.
- Twilio (active): SMS verification for identity and regulated actions.
- Sentry (active): Error tracking, diagnostics, and operational monitoring.
functional
- IMOTO preferences (prepared): Optional interface preferences and convenience storage.
analytics
- Analytics/statistics tools (prepared): Usage statistics, performance analysis, and product improvement.
marketing
- Marketing/tracking tools (prepared): Consent-based campaign measurement and advertising attribution.
Account Deletion
Users may request account deletion, but legally required records can remain stored or be anonymized where required by law.