This Privacy Policy explains how Cluborado OÜ (“SerbPlanet”, “we”, “us”) collects, uses and protects personal data when you use serbplanet.com (the “Service”). It is written to comply with the EU General Data Protection Regulation (GDPR).
1. Who we are
The data controller is Cluborado OÜ, a Private limited company (Osaühing) registered in Estonia under registry code 17445114, registered address Sepapaja tn 6, Lasnamäe linnaosa, Tallinn, Harju maakond, 15551, Estonia. You can reach us at serbplanet@outlook.com for any privacy question.
2. What data we collect
- Account data: email address and password (stored securely, hashed, by our authentication provider — we never see your plain-text password).
- Profile data: username, bio, avatar, and any other details you choose to add.
- Content you submit: job listings, business listings, events, ride offers and requests, community posts, comments, and replies you publish through the Service.
- Listings are visible to other members. When you post a listing — including a Prevoz ride — the details you include (such as the route, dates, and any contact details you add, like a phone number or WhatsApp) are published on the Service and visible to other members. Only add contact details you’re comfortable making visible to other users.
- Live room messages: messages you send in the live chat are transient. We keep only the most recent few messages in a small rolling buffer that is constantly overwritten, so that people joining land mid-conversation; older messages are discarded. If a message is reported, we may additionally keep that message, and who sent it, so we can review and act on the report.
- Pozz profile (optional): if you join Pozz, we collect the profile you build for it — your profile photo, age, gender, country and city, a short description, interests, languages, and the social-media links you choose to add — plus your Pozz activity (which profiles you pass or “Pozz”), which we use to run discovery and create connections. Your gender is a special category of personal data; we process it only with your explicit consent, which you give by creating a Pozz profile, and you can withdraw it at any time by leaving Pozz. Your social-media links stay private until you and another member mutually Pozz, at which point you become a connection: your links are shared with that member, and the two of you can message each other directly in the in-app Pozz chat.
- Pozz messages: once you and another member are a connection, the messages you exchange in the in-app Pozz chat. Their content is stored so the conversation is available to both of you, and a message can be reported to us for review. We keep Pozz messages only while your match exists — see “How long we keep your data” below.
- Push notification token: if you turn on notifications, we store a device token issued by Apple’s or Google’s push service so we can send you notifications (for example, a new Pozz message). You can turn notifications off at any time in your device or in Settings.
- Pozz photo safety check: when you join Pozz, we send the URL of your profile photo to OpenAI’s automated moderation service, which checks it for unsafe or inappropriate content (for example sexual or violent imagery) to help keep Pozz safe. Only the image URL is sent for this purpose. This is an assistive check, not a guarantee — it can miss content or occasionally flag a legitimate photo, and if the check is unavailable your photo is not automatically blocked. Member reports and human review are the backstop.
- Reports and moderation records: when you report a profile, message, or listing — or when our systems flag something automatically — we keep a record of it: who filed the report (or that it was system-generated), the profile or content reported, the reason and any details, and the status or outcome. We use these records to review reports, enforce our Terms, and keep the Service safe.
- Preferences: country and topic preferences used to personalize your feed, and your display language.
- Payment and donation data: if you subscribe to Premium or Business, or make a donation, Stripe processes your card details directly — we never store your full card number. We keep a record of your subscription status and billing history, and, for a donation, the amount, currency, and the email you provide for the receipt (donations may also be made without giving your name).
- Technical data: IP address, browser type and basic usage logs, collected automatically by our hosting provider for security and reliability.
3. Why we process your data
- To create and operate your account (performance of a contract).
- To provide the Service you signed up for — jobs, business directory, ride-sharing, community, events, and the magazine (performance of a contract).
- To process Premium/Business payments and any donations you make (performance of a contract; and to keep required accounting records — a legal obligation).
- To run Pozz — showing your profile to other adult members, recording your Pozz decisions, creating connections, and carrying the messages you exchange with a connection in the in-app Pozz chat (performance of a contract; and, for your gender as a special category, your explicit consent).
- To screen Pozz profile photos for unsafe content when you join Pozz (legitimate interest in keeping the feature safe).
- To handle reports and moderate profiles, content, and accounts, and to enforce these Terms (legitimate interest; and, where applicable, compliance with a legal obligation).
- To keep the Service secure and prevent abuse (legitimate interest).
- To send you service emails, such as billing receipts or, if you opt in, the weekly digest (legitimate interest / consent).
- To send you push notifications you’ve enabled — such as a new Pozz message or match — to your device (consent, via the notification permission you grant; you can turn them off at any time).
4. Who we share data with
We use a small number of trusted service providers (“processors”) to run SerbPlanet. We do not sell your data.
- Supabase — database hosting and authentication.
- Stripe — payment processing for Premium/Business subscriptions and donations made on the website.
- Apple App Store / Google Play — if you subscribe inside our mobile app, Apple or Google processes the payment as the seller of record. We receive only your subscription status (active/expired), never your card or payment details.
- RevenueCat — manages your in-app (Apple/Google) subscription status and entitlements on our behalf; it stores an app-specific identifier linked to your account so your Premium/Business access stays in sync.
- Firebase Cloud Messaging (Google) — delivery of the push notifications you enable to your device.
- Resend — delivery of transactional and digest emails.
- Vercel — application hosting.
- Anthropic — used internally to help our team draft news and magazine content suggestions; it does not process your personal account data.
- OpenAI — automated moderation of Pozz profile photos to help detect unsafe or inappropriate images; it receives only the image URL for this check and does not process your other account data.
Some of these providers may process data outside the EU/EEA (e.g. in the United States). Where that happens, transfers are covered by Standard Contractual Clauses or an equivalent safeguard.
5. How long we keep your data
We keep your account and content for as long as your account is active. If you delete your account, we remove your personal profile data within a reasonable period, except where we’re required to keep billing records for longer to meet accounting and tax obligations (up to 7 years under Estonian law).
We store your Pozz messages only while the match exists. If you or the other member unmatch, the conversation and its messages are deleted for both of you. If you leave Pozz, we delete your Pozz profile, your Pozz activity, and all of your Pozz connections and their messages; deleting your account removes all of it as well. A message that has been reported may be retained separately for as long as needed to review and act on the report.
We keep moderation and safety records — such as reports and their outcomes — for as long as your account is active and for a limited period afterwards, so we can handle disputes, prevent repeat abuse by the same person, and meet legal obligations. We keep them no longer than necessary for those purposes.
6. Your rights
Under the GDPR, you have the right to:
- Access the personal data we hold about you.
- Correct inaccurate data.
- Request deletion of your data (“right to be forgotten”).
- Restrict or object to certain processing.
- Receive your data in a portable format.
- Withdraw consent at any time, where processing is based on consent.
- Lodge a complaint with a supervisory authority — in Estonia, the Estonian Data Protection Inspectorate, or your own country’s data protection authority.
To exercise any of these rights, email us at serbplanet@outlook.com. Most account and profile data can also be updated or deleted directly from your Settings page.
7. Automated checks and decisions
Some parts of the Service work automatically:
- Pozz discovery. Which profiles you see in Pozz, and in what order, is generated automatically from factors like country, shared interests, and activity. It only decides the order in which profiles are shown — the decision to pass or “Pozz” someone is always yours, and it does not produce legal or similarly significant effects.
- Photo screening. When you join Pozz, an automated, AI-assisted check (OpenAI) screens your profile photo for unsafe content and may block a photo it flags. This is a technical safety check, not a final judgment about you; it can make mistakes, and a person can review the outcome.
We do not make decisions that produce legal or similarly significant effects about you based solely on automated processing. If an automated check affects you — for example a flagged photo — you can contact us at serbplanet@outlook.com to have it reviewed by a person, share your point of view, and contest the outcome.
8. Cookies
We use a small number of cookies necessary to run the Service (login sessions, language preference). See our Cookie Policy for the full list.
9. Children
SerbPlanet is not directed at children and is not intended for use by anyone under 16 years old. The Pozz feature is restricted to adults aged 18 or over.
10. Changes to this policy
We may update this policy from time to time. If we make material changes, we’ll let you know by email or via a notice on the Service.
11. Contact
Cluborado OÜ, Sepapaja tn 6, Lasnamäe linnaosa, Tallinn, Harju maakond, 15551, Estonia — serbplanet@outlook.com
