1. Who we are
pekou (the “Service”) is operated as a private members community for car enthusiasts. This Privacy Policy explains what personal data we collect, how we use it, and the rights you have over it.
2. Data we collect
We collect: (a) account information you provide such as your name, username (“handle”), email, phone number and password; (b) profile content such as a display name and an indicator of whether you are an official seller; (c) the listings you create, including photos, descriptions, price, location and contact preferences; (d) support requests you send us, including any screenshots you attach; and (e) basic technical data needed to operate the Service such as IP address, device type, timestamps and basic usage events.
3. How we use your data
We use your data to provide the Service: to authenticate you, to host and display your listings to other members, to enable communication between members, to investigate abuse, to comply with legal obligations, and to improve and secure the Service. We do not sell your personal data.
4. Legal basis (EEA / UK users)
We process your data on the basis of the contract between you and us (to operate your account), your consent (where you choose to provide it, e.g. by accepting these policies at signup), our legitimate interests in operating, securing and improving the Service, and our legal obligations.
5. Sharing with third parties
Other members can see your listings, your username, your display name, and any contact channel you publish on a listing. We share data with infrastructure providers strictly to run the Service (hosting, database, authentication, file storage, email delivery, analytics). These providers are bound by contractual confidentiality and security obligations. We may disclose data when required by law, by a valid court order, or to protect the rights, property or safety of pekou, our members or the public.
6. Cookies and similar technologies
We use a small number of strictly necessary cookies and similar local storage to keep you signed in and to remember basic preferences. We do not use third-party advertising cookies.
7. Data retention
We keep your account data for as long as your account exists. When you delete your account, we delete or anonymise your personal data within a reasonable period, except where we are required to retain it for legal, accounting, or fraud prevention reasons. Logs and backups are kept for a limited period and then automatically purged.
8. Your rights
Depending on your jurisdiction, you may have the right to access, correct, delete, restrict or object to the processing of your personal data, to data portability, and to withdraw consent at any time. You can exercise most of these rights directly in Settings, or by contacting support from Settings → Help.
9. Security
We use industry-standard security measures including encryption in transit, row-level security in the database, and strict access controls. No system is perfectly secure; please use a strong unique password and notify us immediately if you suspect unauthorised access.
10. International transfers
Your data may be processed in countries other than your own. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses to protect international transfers.
11. Children
The Service is not directed to people under 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can remove it.
12. Changes
We may update this Privacy Policy from time to time. Material changes will be communicated in-app and the “Last updated” date above will be revised. Continued use of the Service after changes means you accept the updated policy.
13. Contact
For privacy questions or to exercise your rights, contact support from Settings → Help inside the app.