Privacy policy

1. Introduction and Data Controller

HORSES.SALE is operated by Horsense shop s.r.o., a company registered in the Czech Republic with its registered office at Turnovská 478/4, 180 00 Prague, Company ID (IČO) 06345816, registered in the Commercial Register maintained by the Municipal Court in Prague, Section C, File No. 280625 ("we", "us"). We are the controller of the personal data described in this policy. This policy explains how we collect, use, share and protect your personal data when you use our website and the HORSES.SALE mobile application for iOS and Android.

2. Data We Collect

Data you provide to us:

• Account data: name, email address, phone number, language, and business details (for sellers and transporters).
• Content you create: horse listings, transport and sale requests, photos, videos, x-rays and documents of horses, contracts, and messages exchanged through in-app chat (between buyers and sellers, and with transporters).
• Voice recordings, if you choose to dictate a request instead of typing it.
• Payment data: billing details and purchase history. Card details are entered directly with our payment providers; we never see or store full card numbers.

Data collected automatically:

• Website usage data through Google Analytics and Google Tag Manager (pages visited, device and browser type, approximate location derived from IP address).
• Mobile app data: a device push notification token (via Google Firebase), and app events such as installs, app opens and in-app purchases, together with your device's advertising identifier where you allow it (see section 5).
• Technical logs: IP address, request times and error reports, used to keep the service secure and working.

3. Photos, Videos and Device Media

With your permission, the HORSES.SALE mobile application can access your photo library and camera to let you add pictures and videos of your horse to a listing, and can save video frames you capture back to your photo library. Videos you upload may be processed and hosted by our video infrastructure provider (Mux) or embedded from YouTube for playback within the app. Where you use the rider-blur or frame enhancement features, your video or image is processed automatically to produce the edited version.

4. Push Notifications

With your permission, we send push notifications about new matches, messages, and requests relevant to your account. Your device push token is stored securely and linked to your account. You can disable push notifications at any time in the app settings or your device settings.

5. Advertising and Ad Measurement (Meta)

We advertise the HORSES.SALE app on Facebook and Instagram. To measure which ads lead people to install and use the app, the app includes the Meta (Facebook) SDK, provided by Meta Platforms Ireland Ltd. The SDK sends Meta app events, such as app installs, app opens and in-app purchases (including the purchase amount and currency), together with device information and, where permitted, your device's advertising identifier (IDFA on iOS, Google Advertising ID on Android). Meta uses this data to attribute installs to our ads, report ad performance to us, and optimise who sees our ads. We do not send Meta the content of your listings, messages or documents.

On iOS, the app asks for your permission through Apple's App Tracking Transparency prompt, and your advertising identifier is only shared if you allow it. You can change this at any time in Settings > Privacy & Security > Tracking. On Android, you can reset or delete your advertising ID in your device's Settings > Google > Ads (or Settings > Privacy > Ads). Meta processes this data under its own privacy policy, available at facebook.com/privacy/policy.

6. How We Use Personal Data and Legal Bases

• To provide the service: account management, listings, matching, messaging between buyers, sellers and transporters, the Sharing hub (sharing horse pages, videos, x-rays and documents), contracts and e-signing, and processing payments. Legal basis: performance of our contract with you (Art. 6(1)(b) GDPR).
• To send service messages such as match alerts, chat notifications, verification codes and account emails. Legal basis: performance of contract, and your consent for push notifications and optional channels such as WhatsApp.
• AI-assisted features, such as writing listing descriptions, transcribing dictated requests and enhancing video frames. Legal basis: performance of contract, at your request.
• Website analytics and app advertising measurement (section 5). Legal basis: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.
• Security, fraud prevention and improving the service. Legal basis: our legitimate interests (Art. 6(1)(f) GDPR).
• Keeping accounting and tax records. Legal basis: legal obligation (Art. 6(1)(c) GDPR).

7. What Other Users Can See

Published horse listings, including their photos, videos, description, price and the seller's public contact details, are visible to anyone visiting HORSES.SALE and may be shared by link. Items you mark as private in the Sharing hub are only visible to people you share them with. Chat messages are visible to the participants of the conversation.

8. Listings from Public Sources

To help buyers find horses, some horse offers shown on HORSES.SALE or sent as matches are compiled from publicly available sale posts, such as posts in public Facebook groups. These may include the poster's name and the contact details they published. We use them on the basis of our legitimate interest in providing a comprehensive horse marketplace. If you find your post on HORSES.SALE and want it removed, contact us at hello@horses.sale and we will remove it.

9. Confidentiality of User Documents

Users who use our contract customization and eSign services, or who share x-rays and other documents through the Sharing hub, may submit confidential documents. We handle all documents securely and do not disclose or use them for purposes beyond providing the service.

10. Third-Party Service Providers

We use the following providers to operate our services. They process data on our behalf, or as independent controllers where stated, under their own privacy policies:

• Stripe and PayPal: payment processing.
• Apple App Store and Google Play: in-app purchases in the mobile app (independent controllers).
• Auth0 (Okta): sign-in and authentication.
• Google Analytics and Google Tag Manager: website analytics.
• Google Firebase: push notification delivery.
• Meta Platforms Ireland Ltd.: app advertising and ad measurement (see section 5).
• Mux and YouTube: video hosting and playback.
• Amazon Web Services: file storage and video processing.
• OpenAI: AI-assisted features (listing descriptions, voice transcription, image enhancement).
• SignWell: contract e-signing.
• Twilio: SMS phone verification and WhatsApp messages.
• Mailgun: transactional and notification emails.
• Vercel and MongoDB Atlas: website hosting and databases.

We do not sell your personal data.

11. International Data Transfers

Some of the providers above are located in, or access data from, countries outside the European Economic Area, in particular the United States. Where this happens, we rely on the European Commission's adequacy decision for the EU-U.S. Data Privacy Framework or on the European Commission's Standard Contractual Clauses to protect your data.

12. Data Retention

User data is retained for as long as the account remains active. Payment records are stored for the legally required period (typically 5-10 years). Listing, request, and message history is retained while your account is active so participants can access it. Users can request data deletion, except where retention is required for legal reasons. See Deleting your account below.

13. Deleting Your Account

You can delete your HORSES.SALE account at any time:

• In the mobile app: open Profile, scroll to the bottom and tap Delete account.
• On the website: sign in, open your Profile and use Delete account.
• By email: write to hello@horses.sale from the email address of your account and ask us to delete it.

When your account is deleted, your profile and sign-in data are permanently removed, together with the personal data linked to your account. Records we must keep by law, such as invoices and payment records, are retained for the legally required period and then deleted.

14. Your Rights

Under the GDPR you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data deleted;
• restrict or object to our processing of your data;
• receive your data in a portable format;
• withdraw your consent at any time, without affecting processing carried out before the withdrawal.

Requests can be submitted by email to hello@horses.sale and will be handled within the timeframes required by applicable law. You also have the right to lodge a complaint with a data protection supervisory authority, in particular the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů, www.uoou.gov.cz) or the authority in your country of residence.

15. Data Security

We implement security measures to protect user data from unauthorized access, loss, or misuse. Data is transmitted over encrypted connections.

16. Children's Privacy

Our services are not directed at children under the age of 16, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us at hello@horses.sale and we will delete it.

17. Policy Updates

We may update this policy periodically. Users will be notified of significant changes via email or website announcements.

18. Contact

For any privacy-related questions or requests, contact Horsense shop s.r.o., Turnovská 478/4, 180 00 Prague, Czech Republic, at hello@horses.sale.