Privacy Policy (GDPR)
Last updated: July 19, 2026
Data controller
NeedCard is in field testing and does not yet have a formally registered legal entity at this stage — see the legal notice. For any question about your data, contact management@needcard.net.
Data we collect
Depending on how you use NeedCard, we process: your email address (sign-in); the content of your NeedCards (title, description, photos, budget, town, timeline); the content of your responses and thread messages; ratings you give or receive; reports you file. Location is never collected beyond the town/city level: NeedCard never asks for an exact address.
Purposes
This data is used to operate NeedCard: publishing and displaying NeedCards, connecting Needers and Providers, enabling discussions and offer selection, building trust through ratings, and moderating and securing the platform.
Legal basis
Processing relies on performance of the service you use (matching, account creation) and, for moderation and security, on our legitimate interest in keeping the platform safe to use.
Recipients and processors
Your data is hosted and processed by: Supabase (database, authentication, photo storage), Vercel (application hosting), Resend (email delivery), and Anthropic (automatic translation and the creation assistant — only the text you submit to those features). No data is sold or used for advertising purposes.
Retention period
Precise retention periods are still being defined and will be specified before public launch. At this field-testing stage, you can request deletion of your data at any time (see "Your rights").
Your rights
Under GDPR, you have the right to access, rectify, erase, restrict, and port your data, as well as the right to object to its processing. To exercise these rights, write to management@needcard.net. You may also lodge a complaint with the Belgian Data Protection Authority (APD), or the competent authority in your country of residence.