Legal & privacy

Privacy policy

General Data Protection Regulation (GDPR) — WeFlipped Group AB, org. no. 559535-6857

We care about your privacy. This policy describes how WeFlipped Group AB collects and uses your personal data when you use Hästannons.se.

What data do we collect?

Account information: Email address, name (when registering via Google/email).
Ad data: Images, descriptions, phone numbers and location information you publish in ads.
Booking data (guests): If you book a service without an account we save your name, email and phone number to administer the booking.
Customer register & invoicing: If you use the invoicing tool we act as a processor for the data you store. You are the controller for that data.
Technical data: IP address, device type and browser information (via cookies).

Why do we collect data?

To provide the service — let you create and manage ads, communicate with you, and keep a safe marketplace.

Password security & data storage

Your security is our highest priority. We use the same type of encryption and security solutions as major banks and financial institutions.

Passwords are never stored in plain text. Your password is encrypted with bcrypt — an industry standard used by banks and security-critical systems worldwide. That means your password is turned into an unreadable hash that cannot be reconstructed.
No one has access to your password — not us, not our developers, not our database provider. Even we cannot see or read your password.
Our database is run by Supabase, a platform with SOC 2 Type II certification that follows strict international security standards. All data is stored encrypted, both in transit (TLS) and at rest (AES-256).
Row Level Security (RLS) ensures that each user can only access their own data at the database level.

If you sign in via Google or Facebook, authentication is handled by that service and no password is stored with us.

Your rights

You have the right to:

Request access to your personal data (a data extract).
Request correction of inaccurate data.
Request deletion of your data (the "right to be forgotten"). You can delete the account yourself at hastannons.se/radera-konto or via My profile → Account & security.

Trademarks

Google Play and the Google Play logo are trademarks of Google LLC. Apple, the Apple logo and App Store are trademarks of Apple Inc.

Cookies

We use cookies to keep you signed in and to analyse traffic. See our Cookie policy for more information.

What data do we collect?

Account information: Email address, name (when registering via Google/email).

Ad data: Images, descriptions, phone numbers and location information you publish in ads.

Booking data (guests): If you book a service without an account we save your name, email and phone number to administer the booking.

Customer register & invoicing: If you use the invoicing tool we act as a processor for the data you store. You are the controller for that data.

Technical data: IP address, device type and browser information (via cookies).

Password security & data storage

Your security is our highest priority. We use the same type of encryption and security solutions as major banks and financial institutions.

Passwords are never stored in plain text. Your password is encrypted with bcrypt — an industry standard used by banks and security-critical systems worldwide. That means your password is turned into an unreadable hash that cannot be reconstructed.

No one has access to your password — not us, not our developers, not our database provider. Even we cannot see or read your password.

Our database is run by Supabase, a platform with SOC 2 Type II certification that follows strict international security standards. All data is stored encrypted, both in transit (TLS) and at rest (AES-256).

Row Level Security (RLS) ensures that each user can only access their own data at the database level.

If you sign in via Google or Facebook, authentication is handled by that service and no password is stored with us.

Your rights

You have the right to:

Request access to your personal data (a data extract).

Request correction of inaccurate data.

Request deletion of your data (the "right to be forgotten"). You can delete the account yourself at hastannons.se/radera-konto or via My profile → Account & security.