Privacy Policy
Introduction
Welcome to Ovdix. This Privacy Policy is designed to help you understand how we collect, use, disclose, and protect your personal information when using our mobile application, our website ovdix.com, and related services.
Ovdix is an application for posting and searching ads related to buying, selling, and exchanging various goods and services. It allows users to post ads, find relevant offers nearby, connect with sellers, and make secure transactions using user ratings and verification tools. Our key feature is the automatic translation of ads and chats into the user's language using artificial intelligence technology. The app supports 10 languages.
By using Ovdix, you agree to this Privacy Policy. If you do not agree with any part of this policy, please do not use our application.
Who we are
Address: 21102, Novi Sad, Miše Dimitrijevića 38, Floor 3, Apartment 10
Contact email: egorozh.dev@gmail.com
Information we collect
We collect several types of information from users of our application:
Personal information
When registering and using Ovdix, we collect:
- First name (required)
- Last name (optional)
- Email address (for account registration)
- Authentication information when using Google OAuth2
- User-generated content such as ads, messages, and reviews
- Sellers and business storefronts you follow
Listing information
When creating a listing, we collect:
- Category
- Title
- Description
- Photos
- Price
- Attributes related to the listing
- Location data (coordinates and reverse geocoded address)
Note: We do not collect sensitive housing data such as apartment numbers or floor information.
Automatically collected information
When using our application, we automatically collect:
- Device information (model, operating system, unique device identifiers)
- Log information (interactions with the app, crash reports, system activity)
- Location information (with your consent)
- Usage patterns and preferences
- Approximate location from your IP address (country and city), so we can show listings from your country without asking for geolocation. The IP address is used only for this lookup and is not stored; the legal basis is our legitimate interest in showing a relevant feed.
How we use your information
We use the collected information for:
- Providing, supporting, and improving our application
- Processing and displaying your listings
- Ensuring communication between buyers and sellers
- Translating ads and chat messages into your preferred language
- Authenticating users and preventing fraud
- Personalizing your experience
- Processing transactions and subscriptions
- Sending notifications about your account or listings
- Monitoring and analyzing trends and usage
- Showing relevant ads (for free-tier users)
- Promoting selected public listings on Ovdix's official channels on social networks and messaging platforms (e.g., Telegram, Instagram)
- Operating the AI assistant: finding listings from your description and preparing messages to sellers
- Sending notifications about new listings from sellers you follow
Public listings and promotion
Listings you publish on Ovdix (including photos, title, description, price, and the approximate location you choose to provide) are public and can be viewed by anyone, including through search engines.
To promote your listings and the Ovdix platform, we may share selected public listings on Ovdix's official channels on social networks and messaging platforms (such as Telegram and Instagram), together with a link to the listing. We rely on our legitimate interest (Article 6(1)(f) GDPR) for this. Such posts contain only information you have already made public in the listing and never include your private contact details. You may object at any time by contacting us at egorozh.dev@gmail.com — we will stop featuring your listings and remove existing posts from our channels.
AI assistant
Ovdix offers an assistant powered by artificial intelligence. It finds listings based on your description, answers questions about listings and storefronts, and drafts the first message to a seller — you send that message yourself. For sellers, it helps prepare a listing and set up or change a business storefront — changes are saved only after you confirm them.
What data is processed. The texts of your messages to the assistant, your interface language and, if you share it, your approximate location. If you are not signed in, we use your device identifier and IP address for the daily limit and to prevent abuse.
Transfer to OpenAI. To generate an answer, the texts of your messages are sent to OpenAI and processed on servers in the United States, subject to the safeguards described in the “International data transfers” section. Under our API agreement, OpenAI does not use this data to train its models.
Consent. Before you use the assistant for the first time, it asks for your consent to this transfer; without consent it does not work. You can withdraw your consent by writing to egorozh.dev@gmail.com; withdrawal does not affect processing carried out before it.
Retention. Conversations with the assistant are kept for 90 days after the last message and then deleted automatically; daily usage counters are kept for up to 31 days. If you delete your account, your conversations are deleted immediately.
Access. We do not use conversations for advertising. Authorized staff may review a conversation only when handling a complaint or abuse.
What not to share. Do not send the assistant passwords, bank card details or other sensitive information.
Legal basis for processing
We process your personal information based on the following legal grounds:
- Contractual necessity: Processing necessary to fulfill our obligations in the Terms of Use that you agree to when using Ovdix.
- Legitimate interests: Processing necessary for our legitimate interests, such as improving our application, preventing fraud, promoting publicly posted listings on our official channels, and marketing our services.
- Consent: When we request and you provide explicit consent for certain processing actions, such as accessing your location, sending marketing messages, or sharing what you write to the AI assistant with a third-party AI provider (OpenAI).
- Legal obligations: Processing necessary to comply with legal requirements that we are subject to.
Third-party services
Our application integrates with several third-party services:
Google AdMob
We use Google AdMob to display ads in the free version of our application. AdMob may collect and process your personal information to show relevant ads. This information is subject to Google's Privacy Policy, which you can find at https://policies.google.com/privacy.
Google Maps Services
We use Google Maps Services for location services, including reverse geocoding addresses from coordinates. When you provide location information, it may be sent to Google in accordance with their privacy policy at https://policies.google.com/privacy.
Google OAuth2
If you choose to register using Google OAuth2, we will obtain certain information from your Google account based on the permissions you grant. This information is used solely for authentication purposes.
App Store and Google Play
All payments are processed through the Apple App Store or Google Play Store using their in-app purchase mechanisms. We do not collect or store your payment information, which is governed by their respective privacy policies.
AI services (OpenAI)
We use OpenAI models to translate listings and chat messages and detect their language, to draft a listing from photos you send, and to run the AI assistant. For this, listing texts, chat messages, photos for the draft and messages to the assistant are sent to OpenAI and processed on servers located in the United States, subject to appropriate safeguards. Under our API agreement, OpenAI does not use this data to train its models. For more details, see the OpenAI Privacy Policy.
Google Firebase
Our mobile application uses Google Firebase services: Firebase Cloud Messaging for push notifications, Firebase Crashlytics for crash reporting, and Firebase Analytics for aggregated usage statistics. Firebase may collect device identifiers and diagnostic information. This data is subject to the Google Privacy Policy.
Yandex AppMetrica
We use Yandex AppMetrica to analyze app usage, diagnose crashes, and improve user experience. AppMetrica may collect data about the device, session information, events, as well as the approximate location of the user. This data is used in an aggregated and anonymized form. Details on how Yandex processes data are available in the Yandex Privacy Policy.
AppsFlyer Analytics
We use AppsFlyer to collect analytical data on how users interact with our mobile application. This data helps us improve our services and marketing. AppsFlyer may collect information about the device, usage patterns, and interactions with the application. For more details, see the AppsFlyer Privacy Policy at https://www.appsflyer.com/legal/services-privacy-policy/.
Meta Pixel
With your consent, our website uses Meta Pixel, a tool provided by Meta Platforms Ireland Ltd., to measure the effectiveness of our advertising on Facebook and Instagram. The pixel is activated only after you accept cookies in the consent banner. The collected information is processed by Meta in accordance with its Privacy Policy: https://www.facebook.com/privacy/policy.
Google Ads
With your consent, our website uses the Google Ads tag, a tool provided by Google Ireland Limited, to measure the effectiveness of our advertising in Google Search. The tag links a click on an ad to actions on the website (such as starting a chat with a seller or placing an order) and uses advertising cookies for this purpose. It is activated only after you accept cookies in the consent banner; the data may be processed outside the EEA. The information is processed by Google in accordance with the Google Privacy Policy; you can manage ad personalization in Google Ads Settings.
Yandex Metrica
With your consent, our website uses Yandex Metrica to analyze site traffic and improve the interface. The counter collects data about visits, pages viewed, referral sources, device and approximate location, and also makes anonymized session recordings (Webvisor); private areas such as chats are excluded from recording. The counter is activated only after you accept cookies in the consent banner. The data is processed by Yandex in accordance with the Yandex Privacy Policy. You can opt out of tracking at any time on the Yandex Metrica opt-out page.
Amplitude
With your consent, our website and mobile application use Amplitude (Amplitude, Inc., USA) for product analytics: which screens and features are used, how listings, chats and orders are created, and where users abandon a flow. Amplitude receives events with a random device identifier, your account identifier once you are signed in, and data about the device, language and approximate location; on the website it also makes anonymized session recordings, in which private areas such as chats and the text of input fields are masked. On the website Amplitude is activated only after you accept cookies in the consent banner. The data is stored on Amplitude servers in the United States under the Amplitude Privacy Notice and Standard Contractual Clauses.
YouTube
The About page embeds our product video from YouTube (Google Ireland Ltd.). The player is loaded only after you click Play, and it uses the youtube-nocookie.com domain: until then no request is sent to YouTube and no cookies are set. Once the player starts, Google may process your IP address and playback data in accordance with its Privacy Policy: https://policies.google.com/privacy.
MaxMind GeoLite
To determine the country and city from an IP address we use the GeoLite database of MaxMind, Inc. (USA). The database is kept on our own servers and updated weekly, so your IP address is not sent to MaxMind. This product includes GeoLite Data created by MaxMind, available from https://www.maxmind.com.
Data storage and security
We implement appropriate technical and organizational measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. Your data is stored on our own servers located in the European Union (Germany), operated by the hosting provider IONOS SE. We have chosen a European location to ensure compliance with GDPR requirements and similar data protection regulations. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.
We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. In determining the retention period, we consider the amount, nature, and sensitivity of the data, the potential risk of harm from unauthorized use or disclosure, and applicable legal requirements.
Access to your account by our team. Ovdix staff may sign in to your account on your behalf — only at your request (for example, to set up your business profile, publish listings for you, or help with a problem) or when it is necessary to investigate a security incident or a violation of the Terms of Use. Only authorized team members have such access; it is time-limited, and every sign-in is recorded. Actions taken during such access are performed in your account as if you had taken them yourself, and we use it only for the purpose for which it was granted. The legal basis is the performance of our contract at your request or our legitimate interest in keeping the platform secure. You can ask what was done in your account by writing to egorozh.dev@gmail.com, and you can change your password at any time.
Deleted listings. You can permanently delete a listing from your archive. If it had no chats, deals, orders or reports, we erase it together with its photos. If it did, the listing disappears from your account and from the catalogue and its photos, except the cover, are deleted, but its title and cover remain visible to the other party in their chat with you, in the deal and in the review, and the record itself is kept by us for as long as the related chat, deal, order or report exists, or until you delete your account. The legal basis is our legitimate interest in keeping chats and reviews, which belong to both parties, intact, and in preventing listing deletion from being used to hide traces of fraud. You may object to this retention by writing to egorozh.dev@gmail.com.
Moderation of chat messages. To protect users from spam and fraud, authorized members of our team may read a chat message after a chat participant reports it or our safety checks flag it (for example, a new account, an external link, or the same text sent to many users), and mark it as acceptable, spam or inappropriate. A message marked as spam or inappropriate is shown to its recipients collapsed behind a warning; the sender is not notified. We store the decision together with its time and the team member who made it, without copying the text of the message; the decision is deleted together with the message. We use these decisions to handle reports and to improve our safety checks. The legal basis is our legitimate interest in keeping the platform safe and preventing fraud. You can object to this processing or ask about decisions concerning your messages by writing to egorozh.dev@gmail.com.
Following sellers. If you follow a seller or their business storefront, we store whom you follow and since when, so that we can notify you about that seller's new listings. The seller sees only the number of followers, not who follows them. A follow is deleted when you unfollow, when either of you blocks the other, and when your account, the seller's account or their storefront is deleted. The legal basis is the performance of our contract with you: you choose to follow a seller yourself.
Your rights
Depending on your location, you may have certain rights regarding your personal information, including:
- Access: You may request a copy of the personal information we hold about you.
- Rectification: You may request correction of inaccurate or incomplete information.
- Deletion: You may request deletion of your personal information under certain circumstances.
- Restriction: You may request restriction of processing your personal information.
- Data portability: You may request a copy of your data in a structured, commonly used, machine-readable format.
- Objection: You may object to the processing of your personal information under certain circumstances.
- Withdrawal of consent: If we rely on your consent to process your personal information, you may withdraw that consent at any time.
- Complaint: You have the right to lodge a complaint with a data protection supervisory authority — in Serbia, the Commissioner for Information of Public Importance and Personal Data Protection; in the EU/EEA, the data protection authority of your country.
To exercise any of these rights, please contact us at egorozh.dev@gmail.com. We will respond to your request within the timeframes required by applicable law.
Cookies and tracking technologies
Our mobile application may use device identifiers and similar technologies to enhance your experience, collect statistics, and improve our services. Our website uses cookies: essential ones required for the site to function (such as authentication and language preferences), and — only with your consent — analytics and advertising cookies (Meta Pixel, Google Ads). On your first visit you can accept or decline them in the cookie banner; your choice is stored in your browser. You can withdraw your consent at any time by clearing the site data in your browser, after which the banner will appear again.
Visit statistics. To understand how many people use Ovdix, including those who browse without an account, our website and mobile application send a random device identifier with each request to our servers (on the website it is generated in your browser and kept in its local storage; in the application it is the identifier the operating system assigns to the app). We use it only to count unique devices per day together with their platform and interface language, to see how many visitors later create an account, and to count each view of a listing once. The identifier is not shared with third parties, is not used for advertising and does not follow you across other websites; we process it on the basis of our legitimate interest in measuring the use of our service. If you sign in, the identifier is linked to your account; when the account is deleted this link is removed. On the website you can reset the identifier at any time by clearing the site data in your browser. Daily records are retained for up to 25 months.
Children's privacy
International data transfers
Changes to our Privacy Policy
Contact Us
If you have any questions about this Privacy Policy, please contact us at:
EGOR ZHELUDKOV PR NOVI SAD
21102, Novi Sad, Miše Dimitrijevića 38, Floor 3, Apartment 10
Email: egorozh.dev@gmail.com