Privacy Policy

2. Data Controller (Titolare del Trattamento)

The Data Controller responsible for your personal data is:

3. The Data We Collect

We collect, use, store, and transfer different kinds of personal data about you:

• Identity Data: First name, last name, username.
• Contact Data: Email address.
• Profile Data: Your password (encrypted), profile picture, shoe size preferences, and the Listings you create (including photos of items, descriptions, and kilometers run).
• Transaction Data: Details about payments to us (subscriptions). Note: We do not store your credit card details. All payment transactions are processed by Stripe, our third-party payment processor.
• Communication Data: Messages sent to other users via our in-app messaging system.
• Technical Data: IP address, browser type, time zone setting, and device information.

4. How We Use Your Personal Data

We will only use your personal data when the law allows us to. Most commonly, we use your personal data in the following circumstances:

• Performance of a Contract: To register you as a new customer, process your subscription, and enable you to create listings and chat with other members.
• Legitimate Interest: To manage our relationship with you, prevent fraud/spam, and improve our website/app.
• Legal Obligation: To keep records for tax and accounting purposes (e.g., retaining subscription invoices).

5. Data Sharing (Recipients)

We do not sell your data. We may share your data with:

• Service Providers: Companies that provide IT and system administration services (e.g., Hosting providers like Vercel/Supabase/AWS, Email services).
• Payment Processors: Stripe (to process your subscription).
• Other Users: Your Listings (photos, descriptions) and public profile info (Username, verified status) are visible to other members of the community. Your chat messages are visible to the recipient.

6. International Transfers

Some of our external third parties (like Stripe or Google) may be based outside the European Economic Area (EEA). Whenever we transfer your personal data out of the EEA, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:

• We will only transfer your personal data to countries that have been deemed to provide an adequate level of protection for personal data by the European Commission.
• Where we use certain service providers, we may use specific contracts approved by the European Commission (Standard Contractual Clauses).

7. Data Retention

• Account Data: We retain your profile data as long as your account is active.
• Tax Data: By law, we must keep basic information about our customers (including Transaction Data) for 10 years for tax purposes.
• Deleted Accounts: If you request account deletion, we will remove your Profile and Listings. Chat messages may be anonymized but retained if needed for safety reports/disputes.

8. Your Legal Rights

Under the GDPR, you have the following rights regarding your personal data:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Correction: Request correction of incomplete or inaccurate data.
• Right to Erasure ("Right to be Forgotten"): Ask us to delete your data where there is no good reason for us continuing to process it.
• Right to Object: Object to processing where we are relying on a legitimate interest.
• Right to Restriction: Ask us to suspend the processing of your data.
• Right to Data Portability: Request the transfer of your data to you or a third party.
• Right to Withdraw Consent: Withdraw consent at any time where we are relying on consent to process your data.

To exercise any of these rights, please contact us at info@swapstride.com. We try to respond to all legitimate requests within one month.

9. Security

We have put in place appropriate security measures (encryption, secure HTTPS connections) to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way.

10. Complaints

You have the right to make a complaint at any time to the Garante per la protezione dei dati personali (the Italian Supervisory Authority), though we would appreciate the chance to deal with your concerns before you approach the Authority.