Anuto.app is operated by Otuny OÜ, with contact address at Juhkentali 8, 10144 Tallinn, Estonia.
1. Who is responsible
The operator named above is the controller of your personal data. Contact: [email protected].
2. What we process and why
- Account: email, name, sign-in method (password or a sign-in provider you choose, such as your social account) and, if you verify it, your phone number. Purpose: to provide the service (contract).
- Listings and messages: the content you publish and send. Purpose: to provide the service (contract).
- Support: your requests and our replies. Purpose: to help you (contract, legitimate interest).
- Payments and invoices: purchase details and your billing details (name, address, country, tax ID). Purpose: payments and legal obligations.
- Shipping: when you use a protected purchase with shipping, names, addresses and parcel details. Purpose: to deliver the order (contract).
- AI-assisted listing creation and automated review: see section 3.
- Fraud and multiple-account prevention: after you sign in, device characteristics and your IP address, linked to your account. Purpose: security (legitimate interest).
- Campaign information: the campaign or referring site of your first visit, stored with a new account. Purpose: marketing measurement (legitimate interest).
- Location: approximate location from the country you choose. Your precise location is used only when you tap "use my location" and is not stored.
- Notifications: push device tokens, to send notifications you enable.
- Personalized recommendations: when you are signed in, the listings you view, your favourites and your saved searches in each country. Purpose: personalize your experience (legitimate interest). See section 4.
- Saved searches and alerts: the searches you save (filters, place and label) and when we checked them. Purpose: notify you of new matching listings by push, in-app or email, as you choose (contract).
- Analytics and diagnostics: our analytics are anonymous and do not use cookies. Performance and error diagnostics contain no account identifiers.
- Imported listings (Anuto Partners): when a business connects a listing source, the listing data and photos needed to publish its listings and the business contact details used to forward buyer messages. We do not copy the private data the business keeps in the source for its internal use. Purpose: to provide the service to that business (contract, legitimate interest).
For cookies and advertising, see the Cookies policy.
3. AI-assisted listing creation and automated review
When you use AI-assisted listing creation, the text you enter is processed by an AI service provider to suggest listing details. Suggestions are only suggestions: you review them and remain responsible for your listing. Purpose: to provide the service (contract).
Published listings, including their photos and text, may be analysed with automated tools, including AI, to enforce the community rules, prevent fraud and improve search. Automated results do not decide on their own whether a listing is published, rejected or removed; those decisions involve human review. Purpose: safety of the marketplace and search quality (legitimate interest).
4. Personalized recommendations
When you are signed in, we use the listings you view, your favourites and your saved searches in each country to show you listings you may like (for example in "Continue viewing" and "For you") and to order recommendations.
The legal basis is our legitimate interest in personalizing your experience on Anuto (Art. 6(1)(f) GDPR). We limit it as follows: recommendations are only shown on Anuto, never used for advertising or shared with third parties, we do not infer special categories of data, and we keep the data for a short time.
You can turn off "Personalized recommendations" in Settings at any time, and "Clear history" deletes the stored history. You can also object to this processing (section 7).
5. Who receives data
We share data only as needed with: cloud hosting and infrastructure providers, the payment provider and app stores, shipping providers and carriers, our email delivery provider, the AI service provider, sign-in providers you choose, and authorities where the law requires it. Other users see what you publish and send them.
Some providers may process data outside the EEA under appropriate safeguards such as Standard Contractual Clauses.
6. How long we keep data
- Account data: until you delete your account. Your account is deactivated immediately and permanently deleted after 30 days. Signing in again within 30 days cancels the deletion.
- Invoices: for the statutory period (10 years), also after account deletion.
- Support requests: 24 months after the last activity, then anonymized; anonymized immediately when you delete your account.
- Listing-view history for recommendations: up to 90 days.
- Interest profile for recommendations: recalculated and kept while your account is active and personalized recommendations are on; deleted when you turn them off or delete your account.
- Saved searches: until you delete the saved search or your account.
7. Your rights
You can request access, correction, deletion, restriction, portability and object to processing based on legitimate interest by writing to [email protected]. You can also complain to a supervisory authority: the Estonian Data Protection Inspectorate (lead authority) or the authority in your country.