Terms of Service, Privacy Policy (GDPR), Cookie Policy & DSA
Compliant with EU General Data Protection Regulation (GDPR 2016/679) & CCPA/CPRA | September 17, 2026
Core use of Woobsy (searching 42 markets, comparing models, pricing evaluation) is 100% anonymous and requires zero personal identification or mandatory account registration.
To guarantee operational performance, real-time SSE stream responsiveness, and error elimination, Woobsy integrates verified technological partners:
Anonymized behavioral telemetry, real-time stream crash diagnosis, and UI event monitoring without personal identity correlation.
Aggregated web traffic measurement with strict IP-masking enabled. Activated only upon user opt-in via cookie consent.
Core Web Vitals telemetry (LCP, FID, CLS) and hosting runtime stability monitoring without invasive tracking cookies.
Global Edge CDN, Web Application Firewall (WAF), and DDoS traffic mitigation.
Encrypted PostgreSQL database infrastructure enforced with Row Level Security (RLS) policies.
4.1. Retrieved Data Scope: When authenticating via Google Sign-In, Woobsy accesses strictly fundamental profile attributes: user Google ID, email address, full name, and avatar image URL (OAuth scopes: openid, email, profile). Woobsy never accesses Google passwords, contacts, or drive files.
4.2. Purpose & Retention: Google profile data is processed solely to establish and maintain your secure user session on Woobsy (contract performance under Art. 6(1)(b) GDPR). Data is stored within encrypted Supabase databases (AES-256) protected by Row Level Security (RLS) until account deletion.
4.3. No Sale & No Advertising Use: Woobsy does not sell, lease, or distribute information obtained via Google OAuth to third parties. Google user data is strictly never utilized for personalized advertising or AI model training.
4.4. Limited Use Disclosure: Woobsy's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
You maintain full rights to access, rectification, JSON data portability (Art. 20 GDPR), and irreversible account deletion (Right to be Forgotten - Art. 17 GDPR). Executing account deletion performs immediate tombstone data purging.
Arian Fazel, Bydgoszcz, Polska
Kontakt dedykowany ds. prywatności: legal@woobsy.com