Privacy
Draft. TODO: Cacaduu's final (legally checked) text replaces this draft – the texts are in privacy.* in the three message files.
Who processes the data
Cacaduu PPI runs the website on which local shops publish their stock, opening hours and news. TODO: the operator's name, address, company ID, contact.
Visitors
The pages use no advertising or tracking scripts and never ask for your location. Search sends only the words you type. Details about a shop's AI assistant are on the assistant privacy page. A YouTube video loads only after a tap on ▶ (via youtube-nocookie.com); until then nothing loads from YouTube. Page speed and visit counts are measured with Vercel Speed Insights and Web Analytics: no cookies, no ads, no location and nothing that could identify a visitor.
Shop owners
We keep the account's e-mail and password (the password only as a hash), the shop's details and the files the owner uploads. TODO: retention, rights.
Data from Facebook
When a shop owner connects their Facebook Page, Cacaduu gets access to that Page (permissions pages_show_list, pages_read_engagement, pages_manage_posts). From the Page we download only its own posts: text, time, link, photos (stored as WebP), shared links and the pictures of videos with a link. We never download comments, reactions or other people's names. The Page's access token is stored only encrypted and is deleted with "Disconnect". We publish on Facebook only an article the owner explicitly publishes with "Web + Facebook". The public pages have no Facebook scripts, pixels or embedded elements.
Contact
TODO: e-mail for questions about personal data.