Privacy Policy

Last updated: August 2026

Komo (“we”, “us”) operates a marketplace for authenticated luxury second-hand items. This policy explains what we collect, why, and your choices. Questions: support@komo.ae.

Information we collect

  • Account: name, email, phone, and (if you sign in with Google/Facebook/WhatsApp) basic profile info from that provider.
  • Listings & content: items you post, photos you upload, and messages/offers you exchange with other users.
  • Payments: when you buy a listing pack, payment is processed by Stripe. We never see or store your full card details.
  • Usage: device/browser data and basic analytics to operate and secure the service.

How we use it

  • To provide the marketplace: accounts, listings, search, messaging, and offers.
  • To process listing-pack payments and prevent fraud/abuse.
  • To send verification codes (e.g. a one-time code over WhatsApp) and essential service messages.
  • To improve listings — including optional AI analysis of a photo you choose to upload, to suggest a title, category, and details.

Service providers

We share data only as needed with processors that run the service on our behalf:

  • Supabase — database, authentication, and file storage.
  • Vercel — application hosting.
  • Stripe — payment processing for listing packs.
  • BotSpace / WhatsApp — delivery of one-time verification codes.
  • Anthropic (Claude) — optional AI analysis of listing photos you upload.

We do not sell your personal data.

Sales happen between users

Komo earns only from listing packs. The purchase of an item is arranged directly between buyer and seller; we are not a party to that transaction. Meet safely and verify items before paying.

Your rights

You may access, correct, or delete your account and associated data at any time from your account settings, or by contacting us. Depending on your location (e.g. the EU/EEA under GDPR), you may have additional rights to portability, restriction, and objection.

Data retention & security

We keep your data for as long as your account is active or as needed to provide the service and meet legal obligations. Access is protected with row-level security and encrypted connections.

Changes

We may update this policy; material changes will be reflected by the “last updated” date above.