eTROC
Legal

Privacy Policy

What eTROC collects, why, who it's shared with, and how to export or delete your data.

Last updated 9 October 2026

1. Who we are

eTROC (etroc.app) is an AI-matched marketplace to buy, sell and swap second-hand items. eTROC is the controller of the personal data described here. Contact us about privacy at [email protected].

2. Data we collect

  • Account — email address, name, account type (Buyer, Seller or Business) and a salted hash of your password. We never store your password itself.
  • Google or Facebook sign-in— when you choose it, we receive your name, email address and profile photo from that provider. We don't receive your password or post anything on your behalf.
  • Listings and activity — items you post (photos, descriptions, prices, condition), items you save, offers, swap proposals, alerts and messages with other members.
  • Location— the search area and radius you choose. If you allow it, your browser's location is used to suggest a nearby area; we store an approximate point, not a continuous location history.
  • Connected channels — if you link WhatsApp, Telegram, iMessage, RCS or email to the eTROC agent, we store the identifier for that channel and the messages you exchange with the agent there.
  • Device and usage — basic technical data (browser, device type, pages viewed, errors) and, if you enable them, push notification tokens.

3. How we use it

  • To run your account, show listings near you and let buyers and sellers talk, offer and swap.
  • To match listings with the people most likely to want them, using your saved preferences, budget, area and activity.
  • To answer you through the eTROC agent on the web and on the channels you connect.
  • To send the alerts, sign-in links and notifications you ask for.
  • To keep eTROC safe: preventing fraud, spam and abuse, and enforcing our Terms.
  • To understand and improve the product, with analytics only where you have agreed.

4. AI matching and on-device processing

Part of your taste profile is computed in your browser and stays on your device; you can wipe it at any time. When your browser provides a built-in model, eTROC uses it locally to re-rank matches. Conversations with the eTROC agent are processed by AI models run on Cloudflare Workers AI, with an OpenAI model as a fallback through Cloudflare's AI Gateway. We don't use your messages to train third-party models, and AI suggestions never make legally binding decisions about you.

5. Cookies and analytics

Essential cookies keep you signed in and remember your settings. Google Analytics 4 and Firebase Performance load only after you accept analytics in the consent banner, and you can change that choice at any time. We also use Vercel Analytics and Cloudflare Web Analytics, which are cookieless and don't identify you across sites. We don't sell your data or use it for third-party advertising.

6. Who we share it with

Other members see what you choose to publish: your listings, display name and messages you send them. We use trusted processors to run eTROC, bound by contracts to use your data only on our instructions:
  • Vercel (web hosting) and Cloudflare (network, AI, email and the agent service).
  • Neon (database) and Cloudflare R2 (photo storage).
  • Google Firebase (sign-in with Google, analytics with consent, push notifications).
  • Meta, Telegram, Apple and Google, only to deliver messages on channels you connect.
We may disclose data if the law requires it or to protect members from fraud or harm.

7. International transfers

Our providers may process data outside your country, including in the European Union and the United States. Where required, transfers rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

8. How long we keep it

We keep your account data while your account is open. When you delete your account, we delete your profile, listings, saved items and messages within 30 days, except where we must keep limited records longer to meet legal obligations or resolve disputes. Analytics data is kept for up to 14 months.

9. Your rights

Depending on where you live — including under the GDPR and Moroccan Law 09-08 — you can access, correct, export or delete your data, object to or restrict certain processing, and withdraw consent at any time. Export or delete your data yourself in Account → Data & privacy, or follow the steps on Delete your eTROC account. You can also write to [email protected]. We reply within 30 days. You can also complain to your local data protection authority (in Morocco, the CNDP).

10. Security

Data is encrypted in transit, passwords are hashed with a per-user salt, and access to production systems is restricted. No service is perfectly secure; if a breach affects you, we'll tell you and the relevant authorities as the law requires.

11. Children

eTROC is not intended for anyone under 16, and we don't knowingly collect their data.

12. Changes

We'll post updates here and change the date above. If a change materially affects how we use your data, we'll notify you by email or in the app before it takes effect. See also our Terms of Service.