Privacy Policy

We process the following categories of personal data:

• Account data – name, email, role (buyer, seller, agent, admin), organization, country, password hash.
• Membership & billing data – plan, status, renewal date, Stripe customer and subscription IDs. Card details are handled by Stripe; we never see or store them.
• Listing data – horse descriptions, photos, videos, pricing tier, pedigree, health notes, and media access logs.
• Vetting documentation – ID or entity documents, references, waitlist answers.
• Communication metadata – conversation subjects, inquiry content, timestamps, read receipts.
• Technical data – IP address, user-agent, cookies strictly necessary for authentication, error and security logs.

• Contract (GDPR Art. 6(1)(b)) – operating the club, servicing your membership, enabling private transactions.
• Legitimate interest (Art. 6(1)(f)) – fraud prevention, KYC on sellers and agents, platform security, aggregated analytics.
• Legal obligation (Art. 6(1)(c)) – accounting, VAT, and tax record-keeping.
• Consent (Art. 6(1)(a)) – marketing emails and optional analytics cookies, always withdrawable.

We do not sell personal data. We do not run behavioral advertising. We do not train models on member content.

• Listings are anonymous. A seller’s identity and photos are only revealed to a buyer after the seller unlocks that specific member.
• Horse Searches (search requests) are visible anonymously to members. Sellers can respond privately; the buyer’s identity is only revealed if the buyer replies.
• Rider profiles are visible to members only and show only what the rider has elected to publish.
• Administrators may access data for vetting, security, compliance, and dispute handling under strict internal controls.

• Supabase (database, authentication, storage — EU region)
• Stripe (payments — SAQ-A compliant)
• Resend (transactional email)
• Sentry (error monitoring, with IP scrubbing)
• Upstash (rate limiting)
• Mux or Cloudflare Stream (video hosting with signed playback)
• Vercel (hosting, CDN)

• Active account: while your membership is active.
• After cancellation: up to 24 months for dispute and accounting purposes, or the minimum period required by law (e.g. German HGB / AO: up to 10 years for invoices).
• Media access logs: at least 12 months for security forensics.
• Upon verified deletion request, we erase all non-mandatory personal data and retain only what is strictly required by law.