Privacy Policy

RE.NUEVO ("we", "us") is an independent project based in Switzerland. See the Impressum for contact details. For any privacy-related request, email info@renuevo.tech.

This policy is written to comply with the Swiss revised Federal Act on Data Protection (revFADP, in force since 1 September 2023) and the EU General Data Protection Regulation (GDPR) where applicable.

• Email address — required to create an account and send you a magic login link. Legal basis: contract performance (Art. 6(1)(b) GDPR).
• Saved search criteria — the filters you set (model, max price, battery, condition). Stored to match new listings against your preferences. Legal basis: contract performance.
• Telegram chat identifier — when you link Telegram, we store the chat ID returned by Telegram so we can send you alerts. Legal basis: contract performance.
• IP address and server logs — temporarily retained by our hosting provider to operate the service and mitigate abuse. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
• Anonymised pageview data — we use self-hosted Matomo Analytics in cookie-less mode with IP anonymisation. No personal profile is built. Legal basis: legitimate interest.

We do not collect any other data. We do not sell data. We do not use advertising trackers.

We set a single session cookie (strictly necessary to keep you logged in). This cookie is HttpOnly, Secure, and SameSite=Lax. No tracking, advertising, or third-party cookies are used. Matomo Analytics runs without cookies.

We also store one local flag in your browser (renuevo.cookieNoticeDismissed) to remember that you have seen the cookie notice. It never leaves your device.

We share limited data with the following providers, which act as processors on our behalf:

• Infomaniak Network SA (Switzerland) — hosting and database. Data stays in Switzerland.
• Plunk (open source, UK) — transactional email delivery (login links and notifications). Only the recipient address and message content are sent. See Plunk's privacy policy.
• Telegram Messenger Inc. (United Arab Emirates / Global) — chat delivery for alerts. Only your Telegram chat ID and the alert text are sent to Telegram. See Telegram's privacy policy.

Transfers outside Switzerland and the EU (notably Telegram) are covered by Standard Contractual Clauses or equivalent safeguards where required. We only send the minimum data necessary for the messaging feature to work.

• Account data (email, filters, telegram chat ID): kept until you delete your account or stop using the service. If inactive for 18 months, we may delete the account.
• Session cookie: expires when you log out or after 30 days of inactivity.
• Server logs: 30 days.
• Matomo aggregates: 12 months.

Under the revFADP and GDPR, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Delete your data ("right to be forgotten").
• Port your data to another service.
• Object to or restrict processing.
• Withdraw consent at any time where consent is the basis of processing.

To exercise any of these rights, email info@renuevo.tech. You also have the right to lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) or your local EU supervisory authority.

Connections are encrypted with TLS. Passwords are replaced entirely by email magic links. Session tokens are signed and short-lived. We take reasonable technical and organisational measures to protect your data, but no online service can guarantee absolute security.

We may update this policy. Material changes will be announced on this page, and — if you have an account — by email. Continued use of the service after an update constitutes acceptance of the updated policy.