Privacy Policy
Last updated: 8 September 2026
This policy explains what personal data Tezly collects, why we collect it, how long we keep it and what rights you have. It covers the Tezly app and the tezly.app website.
1. Who we are
The controller of your personal data is:
Tezly OÜ Registry code: 17571405 Pärnu mnt 139b, Kesklinna linnaosa 11317 Tallinn, Harju maakond, Estonia Email: [email protected]
We have not appointed a data protection officer. Privacy questions can be sent to [email protected].
2. What Tezly does
Tezly is a platform that connects people who want to send an item with travellers willing to carry it. We do not transport items, handle payments between users, or take part in the agreements users make with each other. This shapes what data we hold: we hold what is needed to run the platform, and little beyond it.
3. What data we collect
You give us:
| Data | When |
|---|---|
| Name, email address, phone number | Registration |
| Profile photo | If you choose to add one |
| Identity document and a selfie | Identity verification |
| Listings: routes, dates, item descriptions, prices | When you post |
| Messages you send to other users | In-app chat |
| Pickup photos and delivery records | At handover and delivery |
| Ratings and reviews | After a delivery |
| Reports and support requests | When you contact us |
Collected automatically:
| Data | Purpose |
|---|---|
| Device type, operating system, app version | Making the app work, fixing errors |
| IP address | Security and fraud prevention |
| Push notification token | Sending you notifications |
Locations you enter. Routes and handover points are the addresses and cities you type in. The app does not track your location in the background.
We do not collect: your payment card details. Credits are sold through Apple and Google, and card data goes to them, not to us.
4. Why we use it, and our legal basis
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Creating and running your account | Performance of a contract, Art. 6(1)(b) |
| Matching Senders and Carriers, showing listings | Performance of a contract, Art. 6(1)(b) |
| Identity verification | Legitimate interest in platform safety, Art. 6(1)(f) |
| Selling Credits and keeping transaction records | Contract, Art. 6(1)(b); legal obligation, Art. 6(1)(c) |
| Fraud prevention and platform security | Legitimate interest, Art. 6(1)(f) |
| Reviewing reports and moderating content | Legal obligation, Art. 6(1)(c) |
| Responding to your questions | Contract, Art. 6(1)(b) |
| Accounting and tax records | Legal obligation, Art. 6(1)(c) |
| Push notifications | Consent, Art. 6(1)(a) |
| Establishing or defending legal claims | Legitimate interest, Art. 6(1)(f) |
You can withdraw consent for notifications at any time in your device settings. This does not affect anything done before you withdrew it.
5. What other users see
Other users can see your first name, your profile photo, your verification status, your ratings and reviews, and the details of any listing you post.
They cannot see your email address, your phone number, your identity document, or your full address unless you share it with them yourself in a message.
Verification status only shows that a check was carried out. It does not reveal the document you used.
6. Messages and content moderation
We do not generally monitor user communications and are under no obligation to do so. We may use automated tools, and may review content that is reported to us, for safety, fraud prevention, legal compliance and enforcement of our Terms.
Where content is reported or a dispute arises, we may read the messages relating to it.
8. Where your data is stored
Your data is stored on servers located in Frankfurt, Germany, within the European Union.
Some of our providers are part of international groups. Where personal data is transferred outside the European Economic Area, that transfer is made under the European Commission's Standard Contractual Clauses or another lawful transfer mechanism.
Users in Azerbaijan and Türkiye should note that their data is processed in the European Union.
9. How long we keep it
| What | How long |
|---|---|
| Account and profile data | Until you delete your account, then 30 days |
| Listings, messages, delivery records | Until you delete your account, then 30 days |
| Backups | Overwritten within 90 days of deletion |
| Transaction and accounting records | 7 years, as required by Estonian law |
| Records relating to an open dispute or legal claim | Until the matter is closed |
| Limited record of accounts terminated for breach | 3 years, to prevent re-registration |
| Reports about content or conduct | 3 years |
| Identity verification data | Held by Didit under its own retention policy |
Ratings and reviews you gave to others remain visible after deletion but are anonymised.
See our Account Deletion page for the full process.
10. Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you;
- correct data that is wrong or incomplete;
- delete your data, where we are not required to keep it;
- restrict how we use your data while a question about it is resolved;
- object to processing based on legitimate interest;
- portability — receive your data in a machine-readable format;
- withdraw consent at any time, where processing is based on consent.
To exercise any of these rights, write to [email protected] from the address linked to your account. We respond within one month. If a request is complex we may extend this by two months and will tell you if we do.
There is no charge, unless a request is manifestly unfounded or excessive.
Complaints. If you are not satisfied with how we handle your data, you may complain to:
Andmekaitse Inspektsioon (Estonian Data Protection Inspectorate) Tatari 39, 10134 Tallinn, Estonia aki.ee
You may also complain to the data protection authority in the country where you live.
12. Security
We protect your data with encryption in transit, access controls limiting who on our side can see what, and the security measures provided by our infrastructure provider.
No system is completely secure. If a data breach occurs that is likely to put your rights at risk, we will tell you and notify the Estonian Data Protection Inspectorate as the law requires.
13. Children
Tezly is not for anyone under 18. We do not knowingly collect data from children. If we learn that a user is under 18, we close the account and delete the data.
14. Automated decisions
We do not make decisions about you by automated means alone that produce legal effects or similarly significant effects. Automated tools may flag content or activity for review, but a person decides what happens next.
15. Changes to this policy
We may update this policy. If a change is material, we will tell you in the app or by email before it takes effect. The date at the top shows when it was last updated.
16. Contact
Tezly OÜ Registry code: 17571405 Pärnu mnt 139b, Kesklinna linnaosa 11317 Tallinn, Harju maakond, Estonia
Email: [email protected]