Privacy Policy
Last updated: settembre 2026
Note: this page is a courtesy translation. In the event of any discrepancy or conflict between this version and the original Italian text, the Italian version shall prevail.
1. Data controller
The data controller is the sole proprietorship Daniele Rosti (trading as True2Hand), registered office at Via Tripoli 2, 26833 Merlino (LO), Italy — Tax Code / VAT number IT13630950965. Contact for any request: support@true2hand.com.
2. Data processed
- Registration and login credentials: email address and user identifier, managed on Supabase infrastructure with encryption.
- User input data: listing links, images and metadata of the listing submitted for analysis.
- Service data: credit balance, transactions, subscription status and history of checks performed.
- Technical system logs and IP address, for IT security purposes and prevention of abusive access.
We do not process payment data: cards and billing are managed directly by Paddle.
3. External technical providers (data processors)
- Supabase Inc. — database, authentication and storage infrastructure.
- Paddle.com — secure processing of monetary transactions, compliant with PCI-DSS standards.
- OpenAI LLC and Google Ireland Ltd — execution of vision and text algorithmic models via enterprise APIs; the data transmitted is not used to train public models.
- Apify Technologies s.r.o. — collection of public listing data from the web.
4. Purposes and legal basis
Data is processed to perform the service contract requested by the user (Art. 6.1.b GDPR), to comply with tax and regulatory obligations (Art. 6.1.c GDPR), and to prevent fraud and abuse (Art. 6.1.f GDPR). No personal data is transferred or sold to third parties for promotional purposes and we do not carry out advertising profiling.
5. Analysed images and retention
Listing images are read from their public URL and processed only for the time strictly necessary for the analysis; any temporary files are deleted at the end of the check, within 24 hours. The score, the detected signals, and the original link are kept in the report for as long as the account remains active or until you request its deletion. Tax data related to purchases is retained by Paddle for the periods required by law.
6. Transfers outside the EU
Some providers may process data outside the European Economic Area. In such cases, the transfer takes place on the basis of the standard contractual clauses approved by the European Commission or an adequacy decision.
7. Security
We adopt appropriate technical and organisational measures (encryption in transit and at rest, access controls, per-user data isolation) to protect data from unauthorised access, loss, or disclosure.
8. User rights
You may exercise at any time the rights of access, rectification, erasure (right to be forgotten), restriction, objection, and data portability, by sending a request to support@true2hand.com. Account and associated data deletion is also available directly from the Account page. You also have the right to lodge a complaint with the data protection authority.