Privacy Policy

1. Information We Collect

We collect information you provide when creating an account, including your name, email address, phone number, and profile photo. For service providers, we also collect business information such as business name, address, service areas, certifications, and reference job photos.

We may also collect usage data such as page views, feature usage patterns, and interaction data to improve the platform. This analytics data is only collected when you have given your explicit consent via our cookie banner.

2. Legal Basis for Processing

We process your personal data under the following legal bases as defined by the General Data Protection Regulation (GDPR):

• Contract performance: Processing necessary to provide the Bobofix platform services you have signed up for, including managing your account, connecting customers with service providers, and processing service requests.
• Legitimate interest: Processing necessary for our legitimate interests, such as improving the platform, preventing fraud, and ensuring security, where these interests are not overridden by your data protection rights.
• Consent: Processing based on your explicit consent, such as analytics cookies for tracking impressions and usage patterns. You can withdraw your consent at any time via the cookie banner or your profile settings.

3. How We Use Your Information

We use your information to operate and improve the Bobofix platform, connect customers with service providers, display provider profiles in our directory, process service requests, facilitate reviews and ratings, and send relevant notifications about your account activity.

4. Information Sharing

Provider business information (name, description, contact details, service areas, certifications, reviews) is displayed publicly in the directory. Customer personal information is only shared with providers when a service request is submitted. We do not sell your personal information to third parties.

5. Cookies and Tracking

We use the following types of cookies:

• Essential cookies: These are required for the platform to function and cannot be disabled. They include:
  • auth-token — Used to keep you logged into your account.
  • cookie-consent — Stores your cookie preferences.
• Analytics cookies: These are used to track impressions (such as provider profile views, contact clicks, and website clicks) to help providers understand how their profiles are performing. Analytics cookies are only set when you have given your explicit consent.

You can manage your cookie preferences at any time using the cookie banner that appears on your first visit, or by clicking "Manage Cookie Preferences" in the Data & Privacy section of your profile settings.

6. Location Data

When you use the "closest to me" feature, your browser location is used temporarily to calculate distances to providers. This location data is not stored on our servers. Provider addresses are stored to enable location-based search and distance calculations.

7. Data Security

We implement industry-standard security measures to protect your data, including encrypted passwords, secure HTTP-only authentication tokens, HTTPS encryption for all data in transit, and role-based access controls to limit data access.

8. Your Rights Under GDPR

Under the General Data Protection Regulation, you have the following rights regarding your personal data:

• Right of access:You have the right to request a copy of the personal data we hold about you. You can do this by using the "Download My Data" feature in your profile settings.
• Right to rectification: You have the right to request correction of inaccurate personal data. You can update your information directly through your profile settings at any time.
• Right to erasure:You have the right to request deletion of your personal data. You can delete your account and all associated data using the "Delete My Account" option in your profile settings.
• Right to data portability:You have the right to receive your personal data in a structured, commonly used, and machine-readable format. Use the "Download My Data" feature in your profile settings to export your data as JSON.
• Right to restrict processing: You have the right to request restriction of processing of your personal data. You can manage analytics tracking via the cookie banner or your profile settings.
• Right to object: You have the right to object to processing of your personal data based on legitimate interests. Contact us at privacy@bobofix.com to exercise this right.

9. Data Retention

We retain your data according to the following schedule:

• Account data: Retained while your account is active. When you delete your account, all personal data is removed immediately.
• Analytics data: Impression and usage data is retained for 12 months and then automatically purged.
• Deleted data: When you request account deletion, all associated data (profile, reviews, service requests, and uploaded files) is permanently removed immediately.

10. Third-Party Processors

We use the following third-party processors to operate the platform:

• Supabase: Database hosting and file storage. Data is stored in EU regions.
• Vercel: Application hosting and deployment.
• Google Places API: Used only for providers who enable Google review syncing. Provider place IDs are sent to Google to fetch publicly available review data.

11. International Data Transfers

Your data may be processed in regions where our third-party processors operate. Supabase stores data in EU regions. Vercel may process requests in multiple regions globally depending on edge network routing. Where data is transferred outside the EU/EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) or adequacy decisions.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, regulatory, or operational reasons. We will notify you of any material changes by posting a notice on the platform or sending you an email. We encourage you to review this page periodically.

13. Contact & Data Protection Officer

For questions about this privacy policy, your personal data, or to exercise any of your rights, contact our Data Protection Officer at:

Email: privacy@bobofix.com

If you believe that your data protection rights have not been adequately addressed, you have the right to lodge a complaint with your local supervisory authority.