Privacy Policy · Adonboard

1.Who is responsible for your data

Hoang Solutions, trading as Adonboard, Chamber of Commerce number 76128016, decides how and why your personal data is used. That makes us the controller under the GDPR. For anything about privacy, email info@emmercemedia.nl.

2.What we collect

Account: your email address, and your display name and profile picture. If you sign in with Google, LinkedIn or X, that name and picture come from them. Signing in with Google or LinkedIn also records that you did so, which we show on your listings as a trust mark.
Seller profile: the suitcase you describe (size, shell, colour) and the 3D model we draw from that description, the spots and prices you set, your travel profile (home country, destinations, how often you travel, traveller type), the country you pay tax in and whether you sell as a person or a business, your promise about applying stickers, the proof photos you post, and the campaigns you publish.
Brand profile: your brand name, website, logo, the short description you write, your briefs and your applications and invitations.
Bids and claims: the amount, the time, the logo shown, and the email address behind it. We also keep what each spot cost, our commission, what the seller receives, and whether the money has been charged, refunded or paid out.
Payments: when payments are switched on, Stripe handles card details. We never see or store your full card number. We keep your Stripe customer or account reference, the card brand and its last four digits, and whether payouts are set up.
Technical: the request logs our hosting provider keeps, including IP address, browser and pages visited, for security and troubleshooting.
Proof and approvals: the photos a seller posts of each sticker, whether the brand approved them, and anything a brand writes when it says a photo is not right - which we pass on to the seller in full, and read ourselves if it has to be settled.
Messages: anything you email us.

3.Why we use it, and on what legal basis

To run your account, your listings, your briefs and the auction, and to pay out what is owed. Basis: performing our agreement with you.
To show public parts of the platform: listings, bids with brand names and logos, brand profiles and briefs. Basis: performing our agreement, since this is what the service is.
To let sellers and brands find each other by traveller type and destination. Basis: performing our agreement.
To keep the platform safe, prevent abuse and fix faults. Basis: our legitimate interest in a working, trustworthy platform.
To email you about your account and your auctions, such as an outbid notice or a won spot. Basis: performing our agreement.
To meet legal duties, such as keeping records for tax and accounting. Basis: legal obligation.

4.What is public and what is not

Public: published listings with their 3D model, spot prices, amounts paid or bid with the brand's name and logo, the seller's display name, profile picture, travel profile and track record, and the proof photos of the stickers on the case. Proof photos are part of what a sponsor buys - the evidence the sticker went on - so they are shown on the listing and anyone with the link to the image file can open it. Photograph the suitcase, not your home or the people in it.

Not public: email addresses, card details and Stripe references, the country you pay tax in and whether you sell as a person or a business, private brief links, applications and invitations (only the seller and the brand involved see those), what a brand writes when querying a photo (the seller sees it, nobody else), and anything in your dashboard before you publish it.

5.Who we share it with

These companies act as our processors, or as their own controller where that is unavoidable, such as Stripe for payments. Some of them are based outside the European Economic Area. Where data leaves the EEA, it is protected by the European Commission's standard contractual clauses.

We do not sell your personal data, and we do not use it for advertising by other companies.

Supabase - database, file storage and login, hosted in the European Union (Ireland).
Vercel - hosting and delivery of the website.
Resend - sends our email. Every message we send you passes through them, with your address and what the message says.
Google, LinkedIn and X - only if you choose to sign in with one of them. They tell us your name, email and profile picture. Your profile picture is then loaded from their servers when someone views your listing, so they can see that the page was opened.
Stripe - card payments, refunds and seller payouts. Sellers also give Stripe the identity details it needs by law before it can pay them.
Professional advisers or authorities, when the law requires it.

6.Cookies and local storage

What the site needs to work goes on without asking: a cookie that keeps you signed in, and small pieces of data stored in your own browser, such as which spots you have bid on and the name and email you last used for a bid. There is no advertising and nothing is sold to anyone.

We also measure how the site is used, so we can fix what trips people up: which pages are opened, what is clicked, and where people give up. We use DataFast and Google Analytics for this, which means those companies receive it too. That is not necessary to run the site, so we ask first and nothing loads until you agree. Saying no costs you nothing and is remembered. You can change your mind at any time through the Cookies link at the bottom of any page, and declining again stops it.

Google Search Console is different and is always on. It tells us which Google searches showed Adonboard and how many people clicked, from Google's own records. It sets nothing on your device and cannot see you individually, so there is nothing to agree to.

7.How long we keep it

Account and profile data: while your account exists, and up to six months after you close it, in case of disputes.
Listings, bids and proof photos: kept as a record of what was agreed, for seven years, because tax law requires it.
Payment records: seven years, as tax law requires.
Technical logs: usually up to 30 days at our hosting provider.
Emails you send us: up to two years.

8.Your rights

You can ask us for a copy of your data, to correct it, to delete it, to limit what we do with it, or to receive it in a portable file. You can object to use based on our legitimate interest. Where we rely on your consent, you can withdraw it at any time.

Email info@emmercemedia.nl and we will answer within one month. If you think we handle your data wrongly, you can complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens), or to the regulator in the country you live in.

Deleting your account. There is a button for it, at the bottom of your dashboard. It erases your email address, your name and picture, any card we hold, and the way you sign in. You do not have to ask us and you do not have to wait.

We refuse only while money is in flight - a listing still taking sponsors, a spot still being charged, a payout not yet sent, or proof you are still owed. Letting an account vanish mid-listing would strand whoever is on the other side of it. The page tells you exactly what is outstanding, and the moment those are settled it goes through.

If money changed hands on your listings, the amounts, dates and our commission stay on our books for the seven years tax law requires, with your name taken off them. If none ever did, nothing of yours is kept at all.

9.Security

Data is sent over encrypted connections and stored with access rules that keep private data, such as email addresses and payment references, away from the public parts of the site. Signing in uses a one-time link instead of a password, so there is no password to steal. No system is perfect: if a data breach puts you at risk, we will tell you and the regulator as the law requires.

10.Children

Adonboard is not meant for children. You must be 18 or older to use it.

11.Changes to this policy

If we change this policy, the date at the top changes too, and we tell you about important changes by email or on the site. See also our Terms of Service.