Last updated: July 28, 2026
The data controller for personal data processed through the XBS Platform (app and website at xbsell.com) is:
XBS SRL
*Societate cu răspundere limitată* under the laws of Romania
Email: support@xbsell.com
Registered office, Trade Registry number (J), and CUI/CIF will be published on the Platform’s legal pages once available and form part of this Policy by reference.
XBS SRL operates an online marketplace and escrow-style payment facilitation service. We do not sell the products, services, rentals, or gigs listed by users. We process personal data to run the Platform, safety tools, and payment flows described below.
Email address, display name, optional profile picture, language/currency preferences, phone number (if provided), and location/city (if provided).
Titles, descriptions, prices, images, categories, and related listing metadata for products, services, rentals, or gigs you create.
Order and booking details, escrow/payment status, refunds, disputes, shipping/delivery information. Card data is processed by Stripe; we do not store full card numbers.
In-app messages, support chats, and related metadata (e.g. timestamps, conversation type).
App interactions, searches, listing views, and similar signals used for recommendations, safety, and product improvement.
Device type, OS version, app version, push notification tokens, stable install identifiers, coarse network signals (e.g. hashed IP, network type), and device–account links used for fraud prevention and multi-account risk signals. Crash diagnostics may be collected for stability.
If you complete face/identity verification: selfie/video frames, face descriptors or scores, verification status, and related timestamps—used only for trust and fraud prevention.
| Purpose | Examples | |---------|----------| | **Provide the Platform** | Accounts, listings, chat, orders, escrow-style payment flows | | **Safety & trust** | AI listing moderation, trust scores, identity verification, device risk signals, abuse prevention | | **Communicate** | Order, message, and account notifications | | **Improve the product** | Recommendations, debugging, performance | | **Legal & finance** | Tax/accounting retention of transaction records, law enforcement requests, defending legal claims |
Legal bases under GDPR (as applicable): performance of a contract; legitimate interests (security, fraud prevention, product improvement); consent (e.g. biometrics where required); legal obligation.
Public marketplace profile data may include display name, profile picture, city/area, trust score and public trust history, and your listings. Email, phone, and full payment details are not sold or given to other users except where a feature intentionally unlocks contact (e.g. gig interest after fee), as shown in-product.
We may disclose data if required by law, court order, or competent authority, or to protect rights, safety, and integrity of the Platform.
We do not sell personal data.
Data is stored on infrastructure of our providers with encryption in transit and at rest where supported. Access is restricted; database policies (e.g. RLS) and authenticated APIs are used. No security measure is perfect.
We use AI (including models such as OpenAI GPT) for:
Listing approval/rejection and trust adjustments may be automated or semi-automated. You may contact Support to contest a decision that has legal or similarly significant effect.
| Data | Retention | |------|-----------| | Account data | Until account deletion (subject to legal holds) | | Listings | Until deleted or account deleted (anonymized if tied to active orders) | | Messages | Until deletion/anonymization under product rules | | Payment/transaction logs | Up to **7 years** (tax/legal) | | Verification media | As needed for verification/fraud, then deleted or minimized | | Usage analytics | Anonymized or deleted on a rolling basis (e.g. 12 months) |
You may have rights to access, rectify, erase, restrict, port, object, and withdraw consent.
Exercise: in-app Support Chat or support@xbsell.com.
You may lodge a complaint with the Romanian ANSPDCP or your local supervisory authority.
See our Cookie Policy. We primarily use local/device storage for session and preferences; Stripe may set cookies during web checkout.
The Platform is for users 18+. We do not knowingly collect data from children.
Providers may process data in the EU and/or other countries. Where required, we use appropriate safeguards (e.g. SCCs).
We may update this Policy. Material changes will be indicated by the “Last updated” date and, where appropriate, in-app or email notice.
XBS SRL (Romania)
Email: support@xbsell.com
In-app: Support Chat
*XBS SRL provides marketplace and escrow-facilitation technology. It is not the seller of user listings.*