Privacy Policy

WowTo ("we", "us", or "our"), operated at wowto.ch, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you use our platform.

This policy complies with the Swiss Federal Act on Data Protection (nFADP) and the EU General Data Protection Regulation (GDPR) where applicable.

The data controller responsible for your personal data is:

WowTo · [Address placeholder] · Zurich, Switzerland · Email: privacy@wowto.ch

Account data: name, email address, password (hashed), phone number (optional).

Listing data: vehicle information, photos, descriptions, pricing, and location.

Transaction data: payment information processed securely through Stripe. We do not store credit card numbers.

Usage data: IP address, browser type, pages visited, and interaction patterns for analytics and security.

Communication data: messages exchanged between buyers and sellers on the platform.

We use your data to: provide and maintain our services; process listings and transactions; communicate with you about your account; improve our platform and AI features; ensure security and prevent fraud; comply with legal obligations.

AI features (powered by OpenAI) may process listing descriptions and photos to generate enhanced content. This data is processed in accordance with our data processing agreements with OpenAI.

Essential cookies: required for the site to function (session management, security tokens). These cannot be disabled.

Analytics cookies: used only with your consent to understand how the site is used.

We do not use advertising cookies or sell your data to third parties for advertising purposes.

You can manage your cookie preferences at any time via the cookie settings on our site.

We share data with the following trusted third-party providers:

Stripe: payment processing (PCI-DSS compliant). See stripe.com/privacy.

OpenAI: AI-powered listing enhancement. Data is processed under strict data processing agreements.

Amazon Web Services (AWS): hosting, storage, and email delivery (SES). Data is stored in EU regions (eu-central-1).

We ensure all third-party providers meet equivalent data protection standards as required by Swiss and EU law.

Account data is retained for the duration of your account and up to 2 years after deletion for legal compliance.

Listing data is retained for 90 days after a listing expires or is removed.

Transaction records are retained for 10 years as required by Swiss commercial law.

Under the nFADP and GDPR, you have the right to: access your personal data; rectify inaccurate data; request deletion of your data; restrict or object to processing; data portability; withdraw consent at any time.

To exercise any of these rights, contact us at privacy@wowto.ch. We will respond within 30 days.

We implement appropriate technical and organisational measures to protect your personal data, including encryption in transit (TLS) and at rest, access controls, and regular security reviews.

Your data is primarily stored in Switzerland and the EU. Where transfers to other countries are necessary (e.g., OpenAI services), we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs).

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or a prominent notice on our platform. The date of the last update is indicated at the top of this page.

For privacy-related inquiries, please contact:

WowTo Privacy · Email: privacy@wowto.ch · [Address placeholder], Zurich, Switzerland