Privacy Policy

Last updated: PLACEHOLDER — set this to the date you actually publish this policy

Before you publish this: this reflects exactly what Gada's current infrastructure actually collects and where it goes — not generic boilerplate — but it still needs a lawyer's review. One Australia-specific point worth knowing: the Privacy Act 1988 (Cth) exempts most businesses with annual turnover of $3 million AUD or less (the "small business exemption", Privacy Act s6D), which at launch likely covers Gada — meaning the Australian Privacy Principles (APPs) may not be strictly mandatory yet. We'd still recommend treating this policy as binding regardless, for three reasons: a new statutory tort for serious invasions of privacy applies to every entity regardless of turnover; the government has already agreed in principle to removing the small business exemption in a future reform tranche, so compliance now avoids retrofitting later; and sign-in providers and users generally expect a real privacy policy regardless of the strict legal threshold.

1. Who this policy covers

This Privacy Policy explains how PLACEHOLDER — your registered company/legal entity name ("Gada", "we") collects, uses, and shares information when you use the Gada app and website (the "Service").

2. Information we collect

Account information. When you sign in, we receive your email address — via Google sign-in, or directly if you use an email link. We don't request or store your name or profile photo from Google; your account is identified by email only.

Location. With your permission, we use your device's location (or a location you type in manually) to show you nearby listings and to attach an approximate location to anything you list. We only ever show other users a city or neighbourhood level location for a listing — never an exact address or coordinates.

Listings and photos. Titles, descriptions, prices, categories, and any photos you upload when creating a listing.

Messages. Chat messages between buyers and sellers, including any translated version of a message you request.

Favourites and drafts. Which listings you've favourited, and the content of an in-progress listing you haven't published yet (draft text — photos aren't included in a saved draft).

Support requests. If you contact support, we receive the email address and message you provide, and the page you were on when you sent it.

Local device preferences. Your search radius and distance-unit (km/mi) preference are stored only in your own browser, never sent to or stored on our servers.

3. How we use it

To operate the Service — showing you relevant listings, delivering messages, remembering your favourites
To provide AI-assisted features — translating listings or chats, suggesting a price range or description when you ask for one
To respond to support requests
To maintain the security and integrity of the Service

We don't sell your personal information, and we don't use your data to serve third-party advertising.

4. Who we share information with

Gada is built on a small number of infrastructure providers, each of which processes a specific slice of your data to make the Service work:

Supabase — hosts our database, handles authentication, and stores uploaded photos. Essentially all account, listing, and message data passes through Supabase's infrastructure.
Anthropic — powers the translation, AI chat assistant, and listing/price suggestion features. When you use one of these features, the relevant text (a listing's content, a chat message, your question to the assistant) is sent to Anthropic's API to generate a response. It is not used to train Anthropic's models.
Resend — delivers transactional email, including account sign-in links and support request emails.
Vercel — hosts the app and website you're using right now.

We don't share your information with data brokers or advertisers. We may disclose information if required by law, or to investigate a violation of our Terms of Service.

5. International data transfers

The providers above are substantially based in or operate infrastructure in the United States. Where that's the case, your information may be processed there rather than in Australia. We rely on these providers' own safeguards and certifications for cross-border transfers. If and when the Australian Privacy Principles formally apply to Gada, this disclosure is intended to satisfy APP 8's requirement to name the likely overseas recipient countries.

6. How long we keep information

A favourite is automatically removed 30 days after you add it, unless you remove it sooner
A conversation's message history is deleted once the related listing is marked sold
A listing is automatically removed if it sits expired and unrelisted for 4 weeks
Account information is kept until you delete your account

7. Your rights and choices

You can edit or remove a listing, remove a favourite, and delete your account at any time from within the app — deleting your account removes your account record and associated personal data, other than information we're required to retain for legal reasons. Depending on where you live, you may also have rights to request a copy of your data, ask us to correct it, or object to certain processing. Contact us at support@gada.ai to exercise these. If we're required to handle your request under the Australian Privacy Principles, you can also raise an unresolved complaint with the Office of the Australian Information Commissioner (OAIC).

8. Cookies and local storage

We use a session cookie/token (set by Supabase Auth) to keep you signed in. Beyond that, we don't use advertising or tracking cookies. Your search radius and unit preference are stored only in your browser's local storage and never leave your device.

9. Children's privacy

The Service isn't directed at, and isn't intended for use by, anyone under 18. We don't knowingly collect information from children.

10. Security

We rely on our infrastructure providers' security practices (encryption in transit, access controls) to protect your information, but no method of transmission or storage is completely secure, and we can't guarantee absolute security.

11. Changes to this policy

If we make material changes to this policy, we'll take reasonable steps to let you know, such as an in-app notice. The "Last updated" date above reflects the most recent version.

12. Contact

Questions about this policy, or a request about your data? Reach us at support@gada.ai, or through the Help button in the app.