Privacy Policy

At click4ble.com, we take your privacy seriously and are committed to protecting your personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable Bulgarian data protection law. This Privacy Policy explains what personal data we collect, why we collect it, how we use and share it, how long we keep it, and the rights you have over it.

1. Who We Are

click4ble.com is operated by [Legal Entity Name], a company registered in [Country of Registration] under registration number [Company Registration Number], with its registered office at [Registered Business Address] ("we", "us", or "our"). We are the data controller responsible for your personal data under the GDPR and applicable Bulgarian data protection law.

We have not appointed a statutory Data Protection Officer, as our processing activities do not meet the criteria requiring one under Article 37 of the GDPR. Questions about this Privacy Policy or our data practices are handled directly by our support team via the Contact Us page.

2. Information We Collect

We collect the following categories of personal data when you use our platform:

Account information — your name, email address, password (stored as a salted hash), and, if you choose to verify it, your phone number.
Social login data — if you sign in with Google, we receive your name, email address, and Google account identifier from Google.
Listing content — the title, description, category, price, photos, and contact details you include in a classified advertisement.
Communications — messages exchanged with other users through our buyer/seller messaging system, and correspondence with our support team.
Job application documents — CVs, cover letters, portfolio files, and job application entries you upload or log through your dashboard.
Transaction records — details of featured-ad purchases and escrow transactions. Your card and payment details are collected and processed directly by Stripe; we do not store your full card number.
Parcel tracking data — the carrier name and tracking number you provide for an escrow order, if you use our in-platform delivery tracking.
Technical and usage data — your IP address, browser type, device information, log data, and cookie identifiers.

3. How We Use Your Information and Our Legal Bases

We only process your personal data where we have a valid legal basis to do so under Article 6 of the GDPR:

To provide our services, such as creating and managing your account, publishing listings, enabling messaging, and processing job applications — necessary for the performance of our contract with you.
To process payments for featured ads and escrow transactions through Stripe — necessary for the performance of our contract with you.
To verify accounts, moderate content, prevent fraud, and protect the security of our platform — our legitimate interest in maintaining a safe and trustworthy marketplace.
To send you service notifications, such as new messages or watched-ad price changes, by email or SMS — necessary for the performance of our contract, and based on your notification preferences.
To provide AI-assisted features, such as ad description generation, content moderation, and support chat — our legitimate interest in operating and improving the platform, as described below.
To set non-essential cookies and analyze site traffic — based on the consent you give or withdraw through our cookie preference banner.
To comply with legal obligations, such as responding to lawful requests from public authorities or preventing fraud — necessary for compliance with a legal obligation.

4. Automated Decision-Making and AI-Assisted Processing

We use artificial intelligence to support several features on our platform:

Ad content moderation — every listing is automatically screened by an AI moderation agent before it is published. If a listing is rejected, you receive a reason and can edit and resubmit it, and our administrators can review or override the automated outcome.
AI-generated listing suggestions — if you use our "Auto-Generate Description" tool, your uploaded photo is analyzed to suggest a title, category, and description, which you can review, edit, or discard before publishing.
AI support chat — our virtual support assistant analyzes your messages to answer questions and look up ad status. Conversations it cannot resolve are automatically escalated to a human support agent.

None of these processes make decisions that produce legal effects concerning you, or similarly significantly affect you, without the possibility of human review. You can request human review of an automated moderation decision at any time by contacting our support team.

5. Cookies and Tracking Technologies

We use cookies and similar technologies to operate and improve our platform. Essential cookies, such as those that keep you signed in and remember your theme and language preferences, are always active because they are required for the site to function. Non-essential cookies, used for traffic analysis and personalization, are only set with your consent. You can accept, decline, or change your cookie choices at any time using "Manage Cookie Preferences" in our cookie banner.

7. International Data Transfers

Some of our service providers, including Stripe, Twilio, and certain AI service providers, are located, or process data, outside the European Economic Area (EEA), including in the United States. Where this occurs, we rely on safeguards recognized under the GDPR, such as the European Commission's Standard Contractual Clauses or an adequacy decision, to ensure your data receives an adequate level of protection. You can request more information about these safeguards by contacting us.

8. Data Retention

We retain personal data only for as long as necessary for the purposes described in this Policy:

Account data is retained for as long as your account remains active.
Listings are retained until they expire, are removed by you, or are deactivated under our expiry policy.
If you schedule your account for deletion from Account Settings, your account and associated personal data are permanently deleted at the end of the grace period, unless we must retain certain records to comply with legal, tax, or fraud-prevention obligations.
Messages, transaction records, and support tickets are retained for as long as needed to resolve disputes, comply with legal or accounting obligations, and maintain platform security.

9. Data Security

We employ modern physical, electronic, and administrative safeguards to protect your personal data, including encryption of data in transit, restricted access to production systems, and verified signing of communications between our internal services. However, no method of transmission over the internet is completely secure, and we encourage you to use a strong, unique password and enable any account security features we offer.

10. Your Rights Under the GDPR

If you are located in the European Economic Area, the United Kingdom, or otherwise protected by the GDPR, you have the following rights over your personal data, subject to certain exceptions provided by law:

Right of access — request a copy of the personal data we hold about you.
Right to rectification — request correction of inaccurate or incomplete data.
Right to erasure — request deletion of your personal data, also available directly from Account Settings.
Right to restriction of processing — request that we limit how we use your data in certain circumstances.
Right to data portability — request a copy of the data you provided to us in a structured, machine-readable format.
Right to object — object to processing based on our legitimate interests, including related profiling.
Right to withdraw consent — withdraw consent at any time for processing that relies on consent, such as non-essential cookies, without affecting the lawfulness of processing carried out before withdrawal.

You can exercise these rights by navigating to your Account Settings or contacting us via the Contact Us page. If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection supervisory authority, such as the Bulgarian Commission for Personal Data Protection (Комисия за защита на личните данни), if you reside in Bulgaria.

11. Children's Privacy

Our services are not directed at, and may not be used by, individuals under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will post the updated version on this page with a revised "Last updated" date and, where changes are material, notify you by email or through a notice on our platform.

Last updated: July 2, 2026. For privacy concerns or to exercise your rights, please contact our team via the Contact Us page, or directly from your Account Settings.