Last updated: September 2026
Introduction
Olibeli is a Portugal-first maternity and family services marketplace. This privacy policy explains how we collect, use, share, and protect personal data when you use olibeli.com (the "Service").
We wrote this policy to be specific and readable. If anything is unclear, email us and we will explain it in plain language.
Who is responsible for your data
The data controller for personal data described in this policy is Olibeli, operating in Portugal.
For privacy questions or requests relating to your personal data, contact us at info@olibeli.com.
When a registered legal entity name and company number are published for Olibeli, this section will be updated to include those details.
What personal data we collect
We collect personal data that is needed to run the marketplace and support your account. Depending on how you use Olibeli, this may include:
- Account data: name, email address, password (stored securely in hashed form by our authentication provider), and sign-in method (for example email/password or Google).
- Profile data: display name and avatar information you choose to provide.
- Provider data: business name, public profile details, location information, categories, and other listing information you submit when registering as a business.
- Role and account-setup choices: whether you use Olibeli as a parent/planner or as a business/provider, and related setup progress.
- Communications: messages you send to us by email, and content needed to respond to support or safety reports.
- Technical data: standard server and security logs generated when you visit the Service, such as IP address, browser type, device information, referring page, and request timestamps, processed by our hosting and infrastructure providers.
- Theme preference: if you use the light or dark mode toggle, your choice is stored in your browser under the key olibeli-theme. This stays on your device and is not sent to our servers as account data.
Cookies and similar technologies
We use cookies and similar technologies that are necessary to operate Olibeli, and optional analytics cookies only if you choose to accept them.
- Essential authentication cookies: set by our authentication provider (Supabase) to keep you signed in securely and manage your session.
- Essential locale cookie (NEXT_LOCALE): stores your language preference. SameSite=Lax.
- Essential account-setup cookies (olibeli_onboarding_role, olibeli_onboarding_complete): remember your role choice and whether account setup is complete so we can guide you through setup.
- Essential password-reset cookie (olibeli_password_recovery): a short-lived marker that keeps you on the reset-password flow after you open a reset link. SameSite=Lax.
- Consent cookie (olibeli_consent): stores whether you accept or reject optional analytics cookies, for up to one year. SameSite=Lax.
- Functional storage (olibeli-theme): stores your theme preference in your browser on your device.
- Analytics: we do not load analytics tools unless you accept analytics cookies. When analytics are enabled, they respect the choice stored in your consent cookie.
- You can change your cookie choice at any time using Cookie settings in the site footer.
What we do not collect
We do not sell personal data. We do not use advertising cookies or marketing pixels on Olibeli unless we introduce them later and obtain any consent required by law. We do not ask for payment card details on Olibeli today; if payments are added later, this policy will be updated before those features become available.
How we use your data
We use personal data only for clear, limited purposes:
- To create and manage your account, authenticate you, and keep the Service secure.
- To provide marketplace features for parents/planners and providers, including profiles, listings, and account setup.
- To communicate with you about your account, security notices, and service updates.
- To respond to support requests, trust and safety reports, and other messages you send us.
- To operate, maintain, troubleshoot, and protect the Service, including detecting abuse and preventing fraud.
- To understand how the Service is used in aggregate when you consent to analytics cookies.
- To comply with legal obligations where they apply.
Legal bases for processing
Under the General Data Protection Regulation (GDPR), we rely on the following legal bases:
- Contract: to provide the Service you request when you create an account and use Olibeli features.
- Legitimate interests: to secure the Service, prevent abuse, improve reliability, and maintain ordinary business records, where those interests are not overridden by your rights.
- Legal obligation: where we must retain or disclose information to comply with applicable law.
- Consent: when you accept analytics cookies, we process associated usage data based on your consent. You may withdraw consent at any time through Cookie settings.
Who we share data with
We share personal data only with service providers that help us run Olibeli, and only to the extent needed for those services:
- Supabase - authentication, database, and file storage for the Service. Privacy policy: https://supabase.com/privacy
- Vercel - hosts the application and processes technical logs required to deliver pages securely. Privacy policy: https://vercel.com/legal/privacy-policy
- Brevo - transactional email delivery when we send account or service emails. Privacy policy: https://www.brevo.com/legal/privacypolicy/
We require these providers to handle personal data only on our instructions and in line with applicable data protection law. We may also disclose information if required by law or to protect the rights, safety, or security of users, Olibeli, or others.
International transfers
Some of our service providers may process personal data outside Portugal or the European Economic Area. Where that happens, we rely on appropriate safeguards recognised under GDPR, such as standard contractual clauses approved by the European Commission, or equivalent protections offered by the provider.
How long we keep your data
We keep account and profile data for as long as your account remains active and for a reasonable period afterward if needed for security, dispute resolution, backups, or legal obligations.
Support and safety correspondence is retained as long as needed to handle the matter and keep proportionate records.
Server logs are retained according to our hosting provider's standard retention periods, kept as short as practicable for security and operations.
Locale and consent cookies (NEXT_LOCALE, olibeli_consent) are stored for up to one year unless you clear them sooner. Account-setup cookies remain while they are needed for setup guidance, subject to their configured lifetime.
Theme preferences stored in your browser remain on your device until you clear browser storage or change the setting.
Your rights
If GDPR applies to our processing of your personal data, you have the right to:
- Request access to the personal data we hold about you.
- Ask us to correct inaccurate or incomplete data.
- Ask us to delete your data in certain circumstances.
- Request restriction of processing in certain circumstances.
- Request a copy of your data in a portable format where applicable.
- Object to processing based on legitimate interests.
- Withdraw consent at any time where processing is based on consent.
To exercise any of these rights, email info@olibeli.com. We may need to verify your identity before responding.
You also have the right to lodge a complaint with the Portuguese data protection authority, Comissão Nacional de Proteção de Dados (CNPD), at https://www.cnpd.pt/
Security
We apply proportionate technical and organisational measures to protect personal data, including encrypted connections (HTTPS), access controls, and careful selection of infrastructure providers.
No method of transmission or storage is completely secure. If you believe your account or interaction with us has been compromised, contact us promptly at info@olibeli.com.
Children and family context
Olibeli is designed for adults arranging maternity and family services. The Service is not directed at children under 16, and we do not knowingly collect personal data from them for account registration.
Providers and users must not upload or share content that unlawfully identifies or exposes children. If you believe a child has provided us with personal data, or that child-related content has been posted improperly, contact us and we will take appropriate action.
Changes to this policy
We may update this privacy policy when our services, legal requirements, or data practices change. When we do, we will revise the last updated date at the top of this page.
If a change significantly affects how we use personal data, we will take appropriate steps to inform you, which may include a notice on the site or an email where suitable.
Contact us
Questions about this policy or how we handle personal data? Email info@olibeli.com and we will get back to you.