Privacy Policy

What we collect

• Account data: email, password (hashed), and OAuth identifiers if you sign in with Google.
• Provider profile: business or legal name, phone, city, service categories, pricing, description, logo, and approximate location (latitude/longitude) for the live map.
• Identity verification: a government-issued ID document you upload, stored privately and viewable only by our verification team.
• Usage data: call-click events (which Pro a visitor tapped), session and device metadata for security and analytics.
• Payment data: we never see or store your card. All payment info is handled by Stripe, our payment processor.

How we use it

• To operate the directory and connect customers with Pros.
• To verify Pro identity and prevent fraud.
• To process subscription payments and send transactional emails (receipts, payment failures, ID review outcomes).
• To provide pros with analytics about how their listing performs.

What we share

We share data only with: (a) Stripe for payment processing, (b) Supabase for hosting and storage, (c) Google for OAuth sign-in, and (d) law enforcement when legally required. We do not sell your data.

Public information

If you are an active Pro with a paid subscription, the following appears publicly: business or trade name, primary city, service categories, base price, operating hours, logo, and phone number for direct calls. ID documents and email addresses are never public.

Retention

We retain account and listing data for as long as your account is active. After deletion, we may retain transaction records and required tax documentation for up to 7 years, in line with US tax and accounting law.

Your rights

You can access, correct, export, or delete your data anytime by contacting privacy@servesprint.app. California, EU, and UK residents have additional rights under CCPA, GDPR, and UK GDPR — these requests are honored within 30 days.

Security

Data is encrypted in transit (TLS) and at rest. ID documents are stored in a private bucket accessible only via short-lived signed URLs. Passwords are hashed using industry-standard algorithms.

Cookies

We use only essential cookies (authentication session, CSRF protection). We do not run third-party advertising or cross-site tracking.

Contact

Questions or requests? Email privacy@servesprint.app.