privacy.

NexZila Evolved (Einzelunternehmen)
Postlagernd, Bahnhofplatz 2
9470 Buchs SG, Schweiz
E-mail: kontakt@oppis.ch

• Account: e-mail address, public display name, optionally postcode and canton.
• Listings, services and requests: texts, prices, location and photos. Photos are resized in your browser; location data (EXIF/GPS) is removed in the process.
• Chat messages between you and other users.
• Reviews, watchlist, saved searches, points and badges.
• Paid boosts: amount, date and payment reference. We never receive card or TWINT details — they go straight to Stripe.
• Technical data: IP address, browser and time of access in our providers' server logs.

Your listings with photos and location, your display name, when you joined, number of sales and your reviews. Your e-mail address is never public. Only the two people involved can see messages.

Running the marketplace and your account, sign-in by e-mail link, connecting buyers and sellers, security and abuse prevention, processing paid boosts and legal obligations. No advertising profiles.

We only use technically necessary cookies: the sign-in cookie that keeps you logged in. In your browser we store settings such as the colour theme and — while you're signed out — your watchlist. No analytics or advertising cookies, no cross-site tracking.

These companies process data on our behalf:

• Supabase Inc. (USA): database, sign-in and photo storage — data stored in the Zurich region (Switzerland).
• Vercel Inc. (USA): hosting and delivery of the website through a global network.
• Resend (USA): sending sign-in e-mails.
• Stripe Payments Europe Ltd. (Ireland): payments for boosts.
• Microsoft Ireland Operations Ltd. (Ireland): our mailbox kontakt@oppis.ch.

Where data reaches the USA, we rely on the Swiss-U.S. Data Privacy Framework or standard contractual clauses recognised by the FDPIC.

As long as your account exists. When you delete a listing, it disappears together with its photos. When you delete your account, we immediately erase account, listings, photos, messages, watchlist, saved searches and points. Payment records are kept by Stripe for as long as the law requires.

Encrypted connection (HTTPS), access rules enforced in the database itself — everyone can only change their own data — and photos without location data.

You can request access to your data, have it corrected or deleted, and receive it in a common format. Export and account deletion are in your profile under "Account & data". For anything else: kontakt@oppis.ch. You can lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC). If you live in the EU, you also have the rights under the GDPR.

If the service changes, we update this policy. Significant changes are announced on the website.