Privacy Policy — Synth Market Observatory

1. Who we are

The European Synthesizer Market Observatory (intellisynthprices.com) is an independent, non-commercial open data project. The data controller is:

Albert Jimenez · contact@intellisynthprices.com

2. What data we process and why

2a. Market observations (public marketplace data)

We collect the following fields from public second-hand marketplaces (Hispasonic, Soundsmarket, Audiofanzine, Noiz):

Listing title, asking price, city, country
Date of publication and date of scraping
Canonical product name (assigned by our normalisation pipeline)
Instrument condition (where displayed publicly on the source page)

We do not collect seller usernames, real names, profile URLs, or any other seller identifiers. Listing URLs are stored for deduplication but are not published in the open dataset.

Legal basis: legitimate interest (GDPR Art. 6(1)(f)) — production of aggregate market statistics from publicly available price data. Listings undergo a 72-hour embargo before they can appear in any public output.

2b. Telegram bot users

If you use the @SynthObservatoryBot, we store:

Your Telegram numeric chat_id
The date you first interacted with the bot
The date of your last command
The price alerts you have configured (model, price range, country filters)

Operation logs store only a one-way SHA-256 hash of your chat_id, never the ID itself.

Legal basis: performance of a contract (GDPR Art. 6(1)(b)) — providing the alert service you requested.

2c. Email subscribers (legacy)

Users who registered under the previous freemium model have an email address and optional display name stored. This data is used only to send observatory updates you consented to and to fulfil our GDPR obligations towards existing users.

Legal basis: consent (GDPR Art. 6(1)(a)) and legitimate interest for GDPR compliance.

3. How long we keep data

Data	Retention
Market observations	Indefinite (public dataset)
Bot alerts	90 days after last price match; extended by 90 days on each new match
Bot user records	Deleted 6 months after your last command, or immediately on `/forgetme`
Operation logs (hashed)	Anonymised after 12 months
Email subscriber data	Until you unsubscribe or request deletion

4. Your rights

Under GDPR you have the right to access, rectify, erase, restrict, and port your data, and to object to processing.

Bot users: use /export (Art. 20 portability) and /forgetme (immediate erasure) directly in the bot.
Email subscribers: use the unsubscribe link in any email, or contact us at contact@intellisynthprices.com.

We respond to all requests within 30 days. You also have the right to lodge a complaint with your national supervisory authority (e.g. AEPD in Spain).

5. Third parties and transfers

We do not sell or share personal data with third parties. No data is transferred outside the EU/EEA. Our infrastructure runs on Hetzner (Germany). The bot communicates via the Telegram Bot API (Telegram Messenger Inc.).

6. Cookies and tracking

We do not use analytics trackers, advertising cookies, or fingerprinting. The only session cookie is a signed server-side cookie required for login functionality. If you are not logged in, no cookies are set.

7. Changes to this policy

Material changes will be announced on the site and, where applicable, by email. The "last updated" date at the top of this page always reflects the most recent revision.