Privacy notice

Updated on 10/9/2026 · v2026-10-09

The business below is the data controller. Send privacy requests to its email. We process names, email, phone, account details, card photos and descriptions, offers, history, carrier, tracking, account holder and IBAN, and technical access data.

We use data for accounts, valuations, support, delivery, inspection, bank transfers and service emails under precontractual measures and contract (GDPR Article 6.1.b). Legal obligations rely on Article 6.1.c; security and abuse prevention on legitimate interests (6.1.f). Required information is necessary for each relevant function. Valuations are human; Valora does not enable profiling or marketing.

Data is accessible to Valora and necessary providers: OpenAI Sites/Cloudflare for hosting and storage, Supabase for authentication, Resend for emails, banks and, where needed, carriers, advisers and authorities. Providers may process data outside the EEA, including the USA. Linked documents describe safeguards, including standard contractual clauses; ask the controller for information and copies.

Accounts are retained for account management; cases for their duration and the time needed to resolve disputes. Accounting and legally required records follow applicable retention periods. You can request erasure; we assess what can be deleted and explain any required retention.

You may request access, correction, erasure, restriction, portability and object to legitimate-interest processing where applicable. You may withdraw any consent and complain to the Italian Garante or your competent authority. IBANs are excluded from service emails. WhatsApp opens only when you choose its link and applies its own privacy notice.

Sender name · Street and number · Postal code · City · Country

• OpenAI · Privacy
• Cloudflare · DPA
• Supabase · DPA
• Resend · DPA
• Garante Privacy

Cookies and preferences