Privacy Policy

Account information. When you create an account, we collect your name, email address, and a securely hashed password, or basic profile information (name, email, profile image) if you sign in through a third-party provider such as Google or Apple.

Business and listing information. If you post a business profile or a listing, we collect what you submit: business name, description, address, phone number, email, website, social media handles, photos, and similar contact/marketing details you choose to make public.

Usage and preference data. We store your language preference and basic session information needed to keep you signed in and to serve the site correctly.

Communications. If you contact us, we collect what you send us (e.g. your email address and message) in order to respond.

We use the information above to: operate and maintain the Service; create and secure your account; display business and listing content you choose to publish; communicate with you about your account or submissions; detect and prevent fraud, abuse, and violations of our Terms of Service; and improve the Service.

We do not sell your personal information.

We use a small number of first-party cookies that are strictly necessary for the Service to function: an authentication/session cookie that keeps you signed in, and preference cookies that remember your chosen language.

We do not currently use analytics, advertising, or third-party tracking cookies or pixels of any kind. If we add any in the future, they will only load after you have given explicit consent through an on-site cookie banner — never before.

Business and listing details you choose to publish are public by design — that is the purpose of a marketplace listing. We do not share your private account information (e.g. your email or password) with other users or third parties, except: with service providers who help us run the Service (e.g. hosting, and Google/Apple if you use their sign-in) under obligations to protect it; when required by law, legal process, or to protect the rights, property, or safety of FOSSA, our users, or the public; or with your consent.

We retain account and listing information for as long as your account is active, plus a reasonable period afterward for legal, security, and record-keeping purposes. You may request deletion of your account and associated personal data at any time (see “Your Rights” below).

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing. If you are in the European Economic Area or United Kingdom, these rights are provided under the General Data Protection Regulation (GDPR); we act as the data controller for the personal information described above, and our legal bases for processing are performance of our contract with you (providing the Service), our legitimate interests (operating and securing the Service), and consent (for optional cookies, once introduced).

To exercise any of these rights, contact us at privacy@fossa.cc. You also have the right to lodge a complaint with your local data protection authority.

The Service is not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, please contact us and we will delete it.

We use reasonable technical and organizational measures to protect your information, including password hashing and access controls on administrative functions. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

FOSSA operates from and primarily serves users in Madagascar; your information may be processed there or in the country where our hosting providers operate, which may have different data protection laws than your own country.

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the “Last updated” date above; continued use of the Service after a change constitutes acceptance of the revised policy.

This Privacy Policy is governed by the laws of Madagascar, without regard to its conflict-of-laws principles, except where mandatory local law (such as GDPR, for EEA/UK residents) grants you additional protections that cannot be waived.

Questions about this Privacy Policy or your data can be sent to privacy@fossa.cc.