Nakovia is a marketplace where property owners rent out space for advertising. This policy says what we collect, why, who else sees it, how long we keep it, and what you can do about any of it. It is written to be read rather than to be defensible, and every category below corresponds to something the app actually does.
1. What we collect, and why
- Account: your name, email address, and password. Needed to have an account at all. Your password is stored only as a hash — we cannot read it.
- Phone number, if you give us one: to text you about time-sensitive things like a design waiting on your approval or a kit being delivered. You opt in explicitly and can turn it off or reply STOP at any time.
- Listings, if you host: the property address, its exact GPS coordinates, photos, the size and type of the display surface, your answers about visibility and audience, and your confirmation that you are allowed to advertise there. Needed to show the spot to advertisers and to print and install the right thing.
- Bookings: the dates, the amounts, the ad artwork you upload, and the state of the booking as it moves through design, printing, shipping, installation and verification. This is the record of a contract between two people.
- Verification media, if you host: the four photos and the short video you take of the installed ad. Needed to prove to the advertiser that what they paid for is actually up, and to detect the same photo being submitted twice.
- Payment details: entered directly with our payment processor. Nakovia never receives or stores your card number. We hold the processor’s reference for the card, the amounts, and whether each charge succeeded.
- Payout details, if you host: your bank details are entered with the payment processor during their identity check, not with us. We hold their account reference and the record of each transfer.
- Messages and offers you send through Nakovia, including the amounts offered and any note attached.
- Reviews you write and reviews written about you, including the private note a reviewer can leave that only the recipient sees.
- Technical data collected automatically: your IP address, browser and device type, and the pages you visit. Used to keep the service running, to investigate faults, and to detect fraud.
2. Who else receives it
- Supabase — our database and file storage. Everything above is stored there. Photos, ad artwork and verification media are in restricted storage buckets.
- Our payment processor — payments, saved cards, host identity checks and payouts. Your card and bank details are theirs, not ours; their privacy policy governs them.
- Resend — sends our emails. Receives your email address and the contents of the message being sent.
- Twilio — our text-message provider. It receives your phone number and the message, and only if you have verified a number and switched text alerts on in Settings. Text alerts are not currently switched on for the platform; nothing has been sent through this route yet.
- Anthropic — our AI provider. Receives listing titles and descriptions to write a summary, the city and state of a listing to sanity-check its traffic figure, and uploaded ad artwork to screen it for content problems. When a Nakovia administrator uses our internal search tool it also receives account names, listing titles and booking amounts. It never receives your email address, phone number, street address, or anything to do with payments.
- Vercel — our hosting. Traffic to the site passes through their network, which means they process your IP address.
- The US Census Bureau and OpenStreetMap — we send a listing’s approximate area to look up population and nearby landmarks. Neither receives anything that identifies you.
- Our print and shipping suppliers — receive the ad artwork, the delivery address and the recipient name for a booking, because somebody has to post the box.
- The other party to a booking — an advertiser sees the host’s name and, once a booking is confirmed, the exact address, because they are paying for a specific place. A host sees the advertiser’s name and their artwork. Neither sees the other’s email, phone number or payment details.
- Law enforcement or a regulator, where we are legally required to hand something over.
- Nakovia does not sell your personal information, and does not share it for cross-context behavioural advertising, as those terms are defined under California law.
3. How long we keep it
- Your account and profile: while your account is open, and then removed when you close it, subject to the exceptions below.
- Booking and payment records: seven years from the end of the booking. Tax law and anti-fraud obligations require this, and it applies whether or not you close your account.
- Listing details and photos: while the listing exists, and for seven years afterwards where the listing is attached to a completed booking.
- Verification photos and video: three years from the end of the booking. They are the evidence that an advertiser got what they paid for, and disputes surface late.
- Ad artwork: three years, for the same reason, and because it is the thing we printed.
- Messages, offers and reviews: while your account is open. Published reviews remain visible on the profile they were written about even if the author closes their account, with the author shown as a former user.
- Phone number and text consent: until you remove it or reply STOP, at which point the number is deleted and only the record that you opted out is kept, so we do not text you again by accident.
- Technical logs: held by our hosting and database providers under their own retention schedules rather than ours. We do not keep a separate copy.
- These are our intended retention periods. If you ask us to delete your data we will tell you specifically what we removed and what we kept, and why.
4. Your rights, and how to use them
- See what we hold: Settings → Privacy → Your data → Download. This produces a file immediately, without asking anyone.
- Take it elsewhere: the same download is machine-readable JSON, which is what a right to portability asks for.
- Correct something: most things you can change yourself in Settings. For anything you cannot, use Settings → Privacy → Request a correction.
- Delete your account and data: Settings → Privacy → Request deletion. A booking that is still running cannot be deleted while the other party is relying on it, and completed transaction records are kept for the period in section 3. We will tell you exactly what was removed and what was kept.
- Stop non-essential emails: Settings → Notifications. Emails that carry a deadline or move money cannot be switched off while you have an active booking, because missing one costs you money.
- We answer every request within 30 days.
- Depending on where you live you may also have the right to complain to a data protection authority, and the right not to be treated worse for exercising any of these rights. We do not treat you differently for asking.
5. Where your data is, and how it is protected
- Data is stored on encrypted infrastructure in the United States. If you are in the UK or the EU, using Nakovia means your data is transferred to and processed in the US.
- Traffic between your browser and our servers is encrypted in transit.
- Access to the database is restricted by row-level security, so one account cannot read another’s data.
- Ad artwork and verification media are held in private storage and served through short-lived links rather than public URLs.
- You can turn on two-factor authentication in Settings → Login and security. We recommend it for any account that receives payouts.
6. Cookies
- Nakovia sets a cookie to keep you signed in. Without it you cannot have a session.
- We do not use advertising cookies, and we do not run third-party trackers.
- You can clear cookies from your browser at any time. Doing so signs you out.
7. Children
- Nakovia is not for anyone under 18. We do not knowingly collect data from children. If you believe a child has an account, email privacy@nakovia.com and we will remove it.
8. Changes, and how to reach us
- If we change this policy in a way that materially affects you, we will email you before it takes effect.
- For anything about your data: privacy@nakovia.com.