Privacy Policy

This English version is a courtesy translation. In case of any discrepancy, the Spanish version prevails.

1. Introduction
   Limbo processes personal data in accordance with Law No. 18.331, its regulations and other applicable Uruguayan legislation.
2. Controller and contact
   Data controller: the natural or legal person who owns and operates Limbo Uruguay. Contact email: [email protected] .
3. Data we collect
   3.1. Visitors: we do not use identifying personal data of visitors. We use technical and privacy-oriented analytics cookies to measure usage in aggregate or pseudonymized form.
   3.2. Registered users and advertisers: name or stage name, email address, phone number, encrypted password, photographs, identity verification and any other data they upload when creating or managing listings.
   3.3. Contact or report forms: name, email address, reported URL and the message sent.
4. Purposes of processing
   • verify identity, age and eligibility to use the service;
   • create accounts, publish and manage listings;
   • handle inquiries, reports and support;
   • prevent fraud, abuse, impersonation, trafficking and other unlawful acts;
   • measure site usage, performance and security;
   • send operational communications and, where applicable, promotional ones with an opt-out option;
   • comply with legal obligations and requests from competent authorities.
5. Identity verification with Didit
   Limbo uses Didit as a platform specialized in KYC (Know Your Customer), the process used to verify a person's identity. Didit acts as a technology provider and data processor during the verification process.
   Depending on the checks enabled, Didit may process identity and contact data, documents, facial images or video, liveness checks, biometric data, technical device data and risk signals. It uses this data to verify identity and age of majority, validate documents and prevent fraud or impersonation. Limbo receives the result and the data needed to assess the verification.
   Didit protects data with encryption and controls audited under SOC 2 Type II. It also holds ISO/IEC 27001, 27017 and 27018 certifications. These are international security and privacy standards used as a benchmark by large banks and financial institutions.
   You can consult Didit's security and compliance information , its Verification Privacy Notice and its End User Terms for Identity Verification .
6. Legal basis, mandatory data and consequences of not providing it
   We process data on the basis of the data subject's consent, performance of the relationship with the user, compliance with legal obligations and our legitimate interest in security, abuse prevention and operation of the site. Mandatory data in forms is necessary to register, post listings or process requests. If it is not provided, it may not be possible to provide the service. The data subject must provide accurate and up-to-date data.
7. Disclosure of data and processors
   We do not sell personal data. We may share data with providers that supply us with hosting, analytics, email, support, fraud prevention, infrastructure and backup services, solely to operate Limbo and under our instructions. These providers include Didit, which processes the information needed to provide the identity verification service described in this Policy. We may also disclose data to administrative or judicial authorities where there is a legal obligation, a valid request or well-founded suspicion of a crime.
8. Public content, indexing and residual persistence
   Public listings and profiles are visible to third parties and search engines. Information an advertiser posts in public areas of the site ceases to be confidential and may be accessed, indexed, copied or stored by third parties. Even if a listing is deleted or unpublished, copies may remain in caches, backups or search engine results outside our control.
9. Cookies and analytics
   We use cookies and similar technologies for authentication, security, preferences and usage measurement. We use Rybbit, a privacy-oriented analytics platform hosted on our own infrastructure. It lets us understand in aggregate how Limbo is used and keep control over the data. This way we can improve the Platform while protecting the privacy of the data of those who visit us. Users can configure their browser to block or delete cookies, although this may affect how the site works.
10. Retention
    We keep data for as long as it is necessary to operate the service, for as long as a relationship with the user exists and for the applicable legal periods. We may also keep it for the time necessary to handle claims, investigations, audits or the defense of rights. Backups and technical copies are deleted according to their normal rotation cycles.
11. Security and incidents
    We apply access controls, encryption, event logging and manual review of new sign-ups. No system is completely invulnerable. If we detect a security incident that must be notified under the law, we will notify the data subject and/or the URCDP as applicable.
12. Rights of data subjects
    Data subjects may request information about the processing of their data, access it, rectify it, update it, include it, delete it or object to it where applicable. Requests must be sent to [email protected] .
13. Changes to the Policy
    Changes will be published on this same page with their update date.

Date of last update: 1 Sep 2026