Privacy Policy

1. Who is responsible

The controller of your data is Sterlix, a service operated from Uruguay. For privacy questions, write to us through the Help Center inside the Platform.

2. What data we collect

We collect the following data:

• Registration data: name, email, and password (stored encrypted, never in plain text).
• Profile data: account type (individual or company), country, approximate location, description, and profile photo.
• Verification documentation: identity document or tax registration you voluntarily provide to verify your account.
• Content you post: listings, images, messages with other users, reviews, and comments.
• Usage and device data: pages visited, actions in the app, device type, browser, and IP address.

3. What we use your data for

We use the information to:

• Create and manage your account and provide the service.
• Verify your identity when you request it.
• Operate and improve the Platform, including search, reputation, and fraud detection.
• Process your credit purchases and keep your account ledger.
• Communicate account news, changes to the terms, or to the service.
• Comply with legal obligations and prevent misuse.

4. Legal basis

We process your data on the basis of: performance of the contract (to provide the service), your consent (verification and promotional communications, which you can revoke), our legitimate interest (security and improvement), and compliance with legal obligations.

5. Who we share data with

We do not sell your personal data. We may share it with:

• Providers that let us operate: infrastructure and database (Supabase/PostgreSQL), payment processing (Paddle), and product analytics (PostHog). All act under confidentiality agreements.
• Authorities, when required by law or to protect rights and the safety of people or the Platform.
• Other users: part of your profile (name, account type, verification level, and reputation) is visible so the Platform can work.

Verification documents are never made public: only the Sterlix team accesses them, for the sole purpose of verifying your account.

6. Security

We apply reasonable technical and organizational measures to protect your information:

• Encryption in transit (TLS) and access control over the data.
• Passwords protected with modern hashing (Argon2), never stored in plain text.
• Access to personal data limited to authorized personnel.
• Continuous monitoring and abuse protection via rate limiting and traffic filtering.

No system is 100% infallible; we cannot guarantee absolute security, but we work to minimize the risks.

7. International transfers

Sterlix operates internationally and uses global providers, so your data may be processed in countries other than yours. When this happens, we ensure appropriate safeguards under applicable law.

8. Your rights

Depending on your jurisdiction, you may exercise the rights of access, rectification, erasure, restriction, objection, and portability, and withdraw your consent. To exercise them, write to us through the Help Center inside the Platform.

9. Data retention

We keep your data while your account is active or as needed for the purposes described. When you delete your account, most of your data is erased within 30 days, except what we must keep for legal obligations. Verification documents are deleted within 90 days afterwards, unless a different legal requirement applies.

10. Minors

The Platform is not directed at minors under 18 and we do not knowingly collect data from minors. If we find we did so without the appropriate consent, we will delete it.

11. Cookies

We use essential cookies (for authentication and security) and analytics cookies (to understand usage and improve). The detail is in our Cookie Policy.

12. Changes and contact

We may update this policy; material changes will be announced inside the Platform. For any questions, write to us through the Help Center inside the Platform.