Privacy Policy

Last updated: May 2026

1. Who we are

Limited operates a marketplace for authentic like-new products in Albania. This policy explains what personal data we collect, why, and how you can exercise your rights.

2. Data we collect

Account data: name, email address, phone number, shopping preferences, and role (buyer, seller, or courier).
Delivery data: street address, city, postcode, and delivery notes you provide during checkout.
Transaction data: purchase requests, reservation status, and delivery history.
Usage data: page views, search queries, and listing interactions collected via Vercel Analytics (privacy-friendly, no personal identifiers stored).
Photos (sellers): product images you upload for listing creation. These are stored securely and processed by AI models to generate listing content.
Virtual Try-On photos: photos you submit to the try-on feature are processed in real time by Google Gemini and are not stored after processing.
Push subscriptions: browser push tokens if you opt in to notifications.

3. How we use your data

To operate and personalise the marketplace.
To coordinate delivery between stores and buyers.
To send transactional notifications (order status, SMS, email).
To improve the platform through aggregate analytics.
To generate AI-assisted product listings (seller photos only).

4. Third-party services

We use the following third-party services:

Supabase — database, authentication, and file storage (EU region).
Anthropic Claude— AI product identification and listing generation. Images are sent to Anthropic's API and are subject to Anthropic's privacy policy.
Google Gemini — marketing image generation and virtual try-on.
Twilio — SMS and WhatsApp notifications (when configured).
Vercel — hosting and privacy-friendly analytics.

5. Your rights

Under Albanian Law No. 9887 on Personal Data Protection (aligned with GDPR principles) you have the right to:

Access the personal data we hold about you.
Request correction of inaccurate data.
Request deletion of your account and associated data.
Object to processing for direct marketing.

To exercise these rights, email us at privacy@limited.al.

6. Data retention

We retain account data for as long as your account is active. Closed accounts are deleted within 30 days except where we are required to retain records by law.

7. Cookies

We use a single first-party cookie to remember your language preference. We do not use third-party tracking cookies. Authentication sessions are managed via HTTP-only cookies set by Supabase.

8. Changes

We may update this policy. Material changes will be communicated via email or an in-app notice.

9. Contact

Privacy questions? privacy@limited.al

2. Data we collect

Account data: name, email address, phone number, shopping preferences, and role (buyer, seller, or courier).

Delivery data: street address, city, postcode, and delivery notes you provide during checkout.

Transaction data: purchase requests, reservation status, and delivery history.

Usage data: page views, search queries, and listing interactions collected via Vercel Analytics (privacy-friendly, no personal identifiers stored).

Photos (sellers): product images you upload for listing creation. These are stored securely and processed by AI models to generate listing content.

Virtual Try-On photos: photos you submit to the try-on feature are processed in real time by Google Gemini and are not stored after processing.

Push subscriptions: browser push tokens if you opt in to notifications.

4. Third-party services

We use the following third-party services:

Supabase — database, authentication, and file storage (EU region).

Anthropic Claude— AI product identification and listing generation. Images are sent to Anthropic's API and are subject to Anthropic's privacy policy.

Google Gemini — marketing image generation and virtual try-on.

Twilio — SMS and WhatsApp notifications (when configured).

Vercel — hosting and privacy-friendly analytics.

5. Your rights

Under Albanian Law No. 9887 on Personal Data Protection (aligned with GDPR principles) you have the right to:

Access the personal data we hold about you.

Request correction of inaccurate data.

Request deletion of your account and associated data.

Object to processing for direct marketing.

To exercise these rights, email us at privacy@limited.al.