RALVE — Privacy Policy (draft)

Last updated: July 23, 2026

1. Data controller

RALVE, a brand operated by Roberto Gómez, holder of Spanish national ID (DNI) 04226092A, domiciled in Ávila, Spain, contact at hola@playralve.com.

2. What data we collect

• Registration data: first name, last name, email, country, password (stored encrypted, never in plain text).
• Content you generate: photos of your items, your cataloged library, published listings, messages with other users.
• Technical data: IP address, browser type, cookies strictly necessary for the service to work.
• Beta waitlist data: email, if you signed up before having an account.

3. What we use your data for

• Providing the service: creating your account, managing your library and listings, enabling messaging between users.
• Verification and fraud prevention (e.g., detecting bad-faith accounts or reports).
• Service-related communications (confirmations, security notices).
• Product improvement, in aggregated form and, whenever possible, anonymized.

4. Legal basis

• Performance of the contract for the provision of the service (the data necessary for the platform to function).
• Consent, for non-essential communications (e.g., if you join the waitlist).
• Legitimate interest, for security and fraud-prevention measures.

5. Who we share your data with

We never sell your identifiable personal data to third parties, under any circumstances. We share data only with:

• Technology providers necessary to operate the service (database hosting, web hosting, anti-bot verification), under their own data protection guarantees.
• Authorities, when there is a legal obligation to do so.

If in the future we commercially exploit trend/demand data with third parties, this will always be aggregated and anonymized data, never information that could identify a specific person.

6. How long we keep your data

For as long as your account is active, and for the additional period required by applicable law after it is closed.

7. Your rights

You have the right to access, rectify, erase, restrict processing of, object to, and request portability of your data. You can exercise these rights by writing to hola@playralve.com. You also have the right to file a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD).

8. Minors

RALVE is not directed at anyone under 18. We do not knowingly collect data from minors; if we detect an account belonging to a minor, we will suspend it.

9. International transfers

Application data is processed and stored through Supabase, whose infrastructure for RALVE is located in the eu-west-1 region (Dublin, Ireland), within the European Union — there is no transfer outside the European Economic Area (EEA) for this purpose.

The web application is hosted through Vercel Inc., headquartered in the United States; the server functions that handle each request run in the London (United Kingdom) region, the closest available one to our database's location. Where processing involves a data transfer outside the EEA, we apply the safeguards required by data protection regulations in force at the time (such as the standard contractual clauses approved by the European Commission).

10. Security

We apply technical and organizational measures to protect your data (password encryption, per-user access control, uploaded file validation, access-attempt limits, among others).

11. Changes to this Policy

We may update this Policy. We will notify substantial changes with reasonable advance notice.

12. Contact

hola@playralve.com