Privacy policy

The controller of your personal data is MaruwForm OÜ, registry code 16731562, Mustajõe SÜ 56, Auvere küla, 40107 Narva-Jõesuu linn, Ida-Viru maakond, Estonia, the operator of Nordo.

For all questions about personal data, including exercising your rights, write to info@nordo.ee. Requests are handled directly by the operator.

Account and profile — e-mail address, name, password hash, country and language; optionally phone number, city, profile photo and “about me”; favourites, saved searches and sellers you follow: to provide the service (Article 6(1)(b) GDPR, performance of a contract).

Advertisements, photographs, messages with attachments, offers, deals and reviews: to provide the service (Article 6(1)(b)) and to keep a record of what users agreed in case of a dispute (Article 6(1)(f), legitimate interest). An advertisement may also contain an address entered by the advertiser — of a shop or business, of the place where a service is provided, of a property or of a workplace — and opening hours; they are shown publicly, so enter only an address you agree to publish.

Identity verification with Smart-ID or Mobile-ID, where offered and only if you choose to use it: the verification provider SK ID Solutions sends us your name, personal identification code and country. We do not store your name or the code itself. We store a one-way hash of the code — a value from which the code cannot be recovered and which is not an identity number — solely to prevent the same person from being verified for more than one account, together with the method and date of verification (Article 6(1)(f), legitimate interest in preventing duplicate and fraudulent accounts). The hash is nevertheless personal data, because it is linked to your account.

Security — IP address, browser and device details, sessions, sign-in history and one-time codes, which are stored only as hashes: to protect accounts, to show you your active sessions and sign-ins, and to detect abuse (Article 6(1)(f)). If you turn on two-step sign-in, we store its secret key in encrypted form and the backup codes only as hashes.

View counting — for visitors who are not signed in, a one-way fingerprint of the IP address and browser; for signed-in users, the account identifier: so that repeated openings of an advertisement by the same viewer within one minute (page reloads) are not counted (Article 6(1)(f)). The fingerprint is used for nothing else and is deleted after 90 days.

Reports, moderation and appeals — the content of reports, moderation decisions and their reasons: to handle notices and inform affected users as required by the Digital Services Act (Article 6(1)(c)) and to keep the service safe (Article 6(1)(f)). If you report content without an account, the e-mail address you give is used only to reply to you about the report.

Protection against fraud and prohibited goods — before publication, the text and photos of an advertisement are checked by our rules and by an automated recognition model. Each message is checked by automated rules when it is sent for signs of fraud (links to other websites, payment links, card numbers, requests for Smart-ID or SMS codes), and the recipient is shown a warning; no one reads the conversation for this. If the same message with such signs is sent to three or more conversations within an hour, it is not delivered; this, as well as the same text sent to many conversations or a new account opening many conversations within an hour, is reported to our staff automatically. When a message is reported, the automated model reads that conversation to help our staff assess the report. Staff with access to conversations open one only to handle a report, a support request or a dispute, or where there are signs of fraud, and every opening is recorded in an internal log together with its reason, as is every search through the text of messages. Fingerprints of photos from rejected advertisements are kept so that the same photo cannot be published again. Purpose: to keep the service and its users safe (Article 6(1)(f)) and to meet our obligations under the Digital Services Act (Article 6(1)(c)).

Support — your messages to support and their attachments: to answer your request (Article 6(1)(b)).

Notifications — push notification tokens: push notifications about messages, offers, deals, job requests, saved searches and sellers you follow, price changes, reviews and the end of an advertisement’s term; about decisions on your advertisements, provider card and business status, and replies from support; and announcements from our team about the service itself, such as changes to the terms (Article 6(1)(b)). In the settings you can switch off notifications about messages and offers, price changes, reviews, saved searches and the end of an advertisement’s term; all push notifications can be switched off in your phone’s settings. We use your e-mail address only for service e-mails: the confirmation code at registration, the password reset code and notice that the account has been deleted (Article 6(1)(b)). We do not send newsletters or advertising by e-mail.

Location — the city you select is used to show advertisements nearby. When you share a meeting point in a chat, the coordinates you chose are sent to the other party as a message. We do not track your location in the background. The meeting point link opens in Google Maps only if the recipient chooses to open it. The map for choosing a meeting point is shown by Google Maps on Android and, if you select it, on iPhone; otherwise on iPhone by Apple Maps. While the map is on screen, its provider (Google or Apple) receives your device's IP address and the map area being viewed, as needed to display the map, and processes them under its own privacy policy. We do not pass your account details to the map provider.

Error monitoring — technical reports about errors on the website and in the service (type of error, page, browser, time), without cookies, form contents or passwords (Article 6(1)(f), keeping the service working).

Visit statistics — which pages of the website are opened, which website or advertising link brought the visitor (including advertising labels in the link), device type, browser and operating system, and the actions “registration”, “sign-in” and “advertisement posted” (without their content); this is counted with PostHog (servers in the EU, Frankfurt) without cookies and without storing anything in your browser. A visitor is counted using a code computed on PostHog’s servers from the IP address and browser data together with a random value that changes every day and is then deleted, so the code cannot be linked to you; the IP address is not stored, and we do not link the statistics to your account (Article 6(1)(f), understanding how the website is used and which of our advertising works).

Where you came from when registering — if you register on the website after following a link with advertising labels (for example, the name of an advertising campaign) or coming from another website, we save this label or the name of that website with your account. The label is kept only in the open browser tab until you register, is not stored in your browser and is sent only together with the registration form; registrations in the app are marked “app”. Purpose: to know which advertising brings new users (Article 6(1)(f)). It is deleted together with the account.

We do not use advertising trackers, do not profile users for advertising and do not sell personal data.

Services: provider card and job requests — if you open a provider card, the name you choose (for a business, its name), the description, the kinds of work, the cities you serve, an indicative starting price, working hours, photos of past work and, if you switch it on, a phone number are shown publicly in the catalogue. A phone number is never required: it may be left for contact with our team only, and the display can be switched off or the number removed at any time. A job request is opened in a conversation when a client first writes to a provider — from the provider card or from an advertisement in a subcategory for work to order — and the text of that first message becomes the text of the request. The request — its text, the agreed price, the confirmations of completion and any reason given for cancelling or declining it — is seen by you and the other party, and by our moderation and support staff when they handle a report, a support request or a dispute or look after the service, for example to find requests left without an answer; the rest of the conversation is opened by staff only under the rules for conversations described above (Article 6(1)(b) GDPR, performance of a contract; and Article 6(1)(f), safety of the service). Before a card is published, its text is checked by automated rules and its photos are compared with photos already refused in advertisements; a card that raises doubt is looked at by our staff before it appears in the catalogue (Article 6(1)(f), and Article 6(1)(c) under the Digital Services Act).

Business status — if you apply to sell as a business: the name and registration number of the business, the country of registration, the legal address, the e-mail for buyers and, if you give it, a phone number. Purpose: to tell buyers that they are dealing with a trader and that consumer rights apply, as consumer protection law requires (Article 6(1)(c) GDPR), and to provide the service (Article 6(1)(b)). You can give the name and registration number when registering or later in the profile. If you register as a business, the e-mail address of your account is used as the e-mail for buyers until you change it in the profile, and if you do not give an address, the legal address published in the register is used. Every application is checked automatically: we look up the registration number in the public register of the country of registration (the Estonian e-Business Register, the Latvian Register of Enterprises, the Lithuanian Register of Legal Entities, the Finnish Trade Register (PRH/YTJ); for Sweden, the public company page on allabolag.se; if the Estonian register does not respond, the public company page on e-krediidiinfo.ee of Creditinfo Eesti AS) and compare the name and status of the business with the application; where the names are not identical word for word, the comparison is made by automated moderation. If the check confirms the business, the status is granted at once (Article 6(1)(b)); in all other cases a member of our team decides, and an application is never refused automatically. The result of the check is kept with the application. Our team can withdraw the status at any time. Once the status is confirmed, the name and registration number are shown with the “Business” label in your advertisements, on your provider card and in your public profile, and these details, together with the address, e-mail and phone number you gave, are shown to buyers under “Business details” in each advertisement you publish as a business, on your provider card and in your public profile, so that buyers have the trader details required by law. When the status is confirmed, these details are also added to your current advertisements — drafts, those under review, published and expired ones; when the status is withdrawn or you give it up, they are removed from them. Reserved and sold advertisements keep the details they showed when the deal was agreed.

Account and profile: until you delete the account. On deletion, the e-mail address, name, photo, phone number, password, two-step sign-in data, identity verification data (the hash of the code, method, date and all verification attempts), favourites, saved searches, notification settings and push tokens are deleted immediately, and your advertisements are removed from the service.

Advertisements: an advertisement is shown on the service for 60 days; after that it is hidden and stays in your account until you publish it again or delete it. An advertisement without conversations or deals is deleted together with its photos as soon as you delete it. If it was discussed in a chat or was part of a deal, its description, characteristics and photos are erased 12 months after deletion; the title remains so that the other party can recognise the conversation.

Messages: kept for both participants while their accounts exist. If one participant deletes the account, the conversation remains in anonymised form and is deleted 3 years after the last message. Offers made from a deleted account are deleted 3 years after they were made.

Deals and reviews: kept for as long as the service operates, because they make up users’ ratings; after an account is deleted they are shown as from “Deleted user”.

Sign-in history and inactive sessions: 90 days. View-counting fingerprints: 90 days. One-time codes: 1 day after they expire. Identity verification attempts (method, country, the hash of the code and the result): 1 year. The record that an account has been verified (method, date and hash) is kept only while the account exists. Notifications in the service: 1 year.

Support requests: 3 years after they are closed. Reports and moderation decisions: 3 years after the decision or, if it was appealed, after the appeal was decided.

Database backups: 30 days. Error reports: no longer than 90 days. Server logs: no longer than 30 days.

We keep data longer only where the law requires it or where it is needed to establish, exercise or defend a legal claim, and only for that time.

Provider card: kept while it exists and deleted together with its photos when you delete the account. Job requests and reviews of work: like deals and reviews of sellers, they are kept for as long as the service operates, because provider ratings are made up of them; after an account is deleted they are shown as from “Deleted user”. The The messages of the conversation in which a request was handled are kept under the rules for messages above. outcome of each automated check of a card and the staff decision on it are kept for 3 years.

Business status: the details are kept while the account exists — also after you give up the status, so that you can apply again without entering them anew — and are erased when you delete the account. In an advertisement that was discussed in a chat or was part of a deal, the business details are erased together with its description, 12 months after the advertisement is deleted.

Other users see your public profile (name, rating, reviews and number of deals, and your city and phone number if you choose to show them), your advertisements, and your messages in conversations you take part in. The e-mail address of your account is not shown, except when you register as a business: it then becomes the e-mail for buyers until you change it in the profile. If you sell as a business, buyers see the business details, as described above.

Service providers that process data on our behalf under contracts with data processing terms: Render — servers and database (Frankfurt, Germany); Cloudflare — storage and delivery of photos and files, and database backups; Resend — sending e-mail (EU region); Sentry — error monitoring; PostHog — website visit statistics without cookies (servers in the EU, Frankfurt); Expo — delivering push notifications and app updates; Automated moderation (USA) — automated check of the text and photos of advertisements before publication, of a conversation after a message in it has been reported, and of business status applications (not used to train models); Migadu — our mailbox, when you write to us; SK ID Solutions AS, Estonia — identity verification, only if you use it.

Apple and Google act as independent controllers when you download the app from the App Store or Google Play; their own privacy policies apply to that. Separately, push notifications reach your device through the Apple Push Notification service and Firebase Cloud Messaging, which we use through Expo only to deliver them; a notification contains only its title, text and a link within the service.

Public authorities and courts where the law requires it, including orders under the Digital Services Act. Where there are signs of fraud or another crime against users, we may also report it to the police on our own initiative and provide the data needed for the investigation (Article 6(1)(f)).

Public business registers — the Estonian e-Business Register, the Latvian Register of Enterprises (open data portal data.gov.lv), the Lithuanian Register of Legal Entities (Registrų centras) and the Finnish Patent and Registration Office (PRH/YTJ): when a business registered in one of these countries applies for business status, we send only the registration number it entered to that country’s register to look up the business; no other data is sent.

Address suggestions — street names are suggested from our own directory built from OpenStreetMap data (© OpenStreetMap contributors, ODbL), and nothing is sent outside for them. Only when you type a house number or the street is not in the directory does our server send the typed text and the approximate coordinates of the town you chose: for Estonia to the Estonian address data system In-ADS (Estonian Land and Spatial Development Board), for other countries to the Photon service (komoot GmbH, Germany, OpenStreetMap data). Your name, account and IP address are not sent.

Our servers and database are in the European Union (Frankfurt, Germany), and e-mail is sent from the EU region. These providers are established outside the European Economic Area or may access data from there: Cloudflare (USA) — photos, files and database backups; Resend (USA) — e-mail, processed in the EU region; Sentry (USA) — error reports; PostHog (USA) — website visit statistics, stored in the EU region; Expo (USA) — push notifications; automated moderation (USA) — text and photos of advertisements, reported conversations and business status applications for automated checks; Migadu (Switzerland) — our mailbox. Transfers to Switzerland rely on the European Commission’s adequacy decision. Transfers to the USA rely on the EU–US Data Privacy Framework where the provider is certified under it, and otherwise on the Commission’s standard contractual clauses in the provider’s data processing terms. You can ask for a copy of these safeguards at info@nordo.ee.

You have the right to access your data and receive a copy, to have it corrected or deleted, to restrict its processing, to receive it in a portable format, to object to processing based on legitimate interest, and to withdraw consent at any time without affecting earlier processing.

You can edit your profile, manage notifications and delete your account yourself in the app and on the website (Profile → Security → Delete account). For a copy of your data or any other request, write to info@nordo.ee; we answer within one month.

You may lodge a complaint with a supervisory authority: the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, www.aki.ee), where the operator is established, or the authority of the country where you live, listed in the country annex of the “Legal information” page.

The service is intended for persons aged 16 and over. We do not create accounts for persons under 16 and do not knowingly collect their personal data. At registration the user confirms that they are at least 16 years old; we record only the fact of this confirmation, not a date of birth, and we do not verify age independently. If we learn that an account belongs to a person under 16, we close it and delete its personal data. The data of users aged 16 and 17 are processed on the same terms as those of other users, and we do not use them for profiling or advertising.

Every advertisement passes an automated check before publication; a doubtful one is held until a person has looked at it. We do not take decisions about users based solely on automated processing. Reports, advertisements and accounts are reviewed by people. You can ask for any moderation decision to be reviewed again by writing to support in the app or to info@nordo.ee.

The website uses only cookies needed for it to work and to remember your choices: sign-in session, country, city, search radius, language and theme. Recent searches and the service announcements you have closed are kept in your browser’s local storage. The app keeps the same settings, your sign-in and unfinished advertisement drafts on the device. We do not use analytics, advertising or tracking cookies. Details are on the “Cookies” page.

We update this policy when the service or the law changes. The date of the last change is shown at the top of the page. We announce material changes in the service before they take effect.