Privacy policy
Last updated: 21 September 2026
Shared account & information
Your email/password identity is hosted by Supabase and shared with the KGC portal. We process your profile, listings, uploaded photos, favourites, reports, posts and legacy messages to operate these services. Passwords are handled by the authentication provider; account exports do not contain passwords, authentication hashes or service credentials.
Public listings & private images
Approved, unexpired listings can show the seller name, location and consented phone/WhatsApp contact publicly. Do not publish information you want to keep private. Prepublication images are private. Authorized previews use short-lived signed URLs: someone holding a previously issued URL may access it until expiry, even after a listing is hidden. Public media requests recheck publication eligibility.
Retention & deletion
Marketplace listings expire 30 days after their original creation. Scheduled cleanup removes expired listing data and its cloud images; edits do not restart the clock. Cleanup can be delayed by service failures. Support requests are kept for handling and follow-up; there is no automatic support-record expiry currently. The support anti-abuse store holds a keyed IP digest rather than your raw IP and prunes counters older than two days when new requests are accepted.
Your controls
Account settings provide a JSON export of your owned records and messages you sent, excluding other participants' private messages. Deletion applies to the shared login and linked KGC portal data, not only marketplace data. A durable request hides your content and blocks new writes, removes your actual files from both image buckets, then removes linked records and the authentication identity. Failed steps are retried. Minimal deletion-job identifiers remain to prevent resurrection and record completion. Previously downloaded copies, provider logs and backups are not promised to vanish immediately. Administrative accounts must arrange responsibility transfer through support.
Support & service providers
The support form stores your contact email, subject and message in a private administrator queue. Submitting it does not mean an email was sent. Supabase supplies authentication, database and storage services; the hosting provider processes network requests and may maintain operational logs. Use the support form for privacy questions or account-access problems.