ServixoServixo (“we”, “us”) operates a marketplace that connects customers with local home-service providers in Malta. This policy explains what personal data we collect, why, and your rights under the EU GDPR.
1. Data we collect
- Account data: name, email, role (customer/provider), and (for providers) business name, city, service listings.
- Authentication: handled by Firebase Authentication (email/password and Google Sign-In). We never store your password.
- Bookings & content: appointment details (date, address, notes), messages you send, reviews and ratings you write.
- Device/push: a Firebase Cloud Messaging token to deliver notifications (only if you grant permission).
- Technical data: basic diagnostics/usage needed to run the app.
We do not collect payment card data in the app; real payments (when enabled) are processed by Stripe under their own privacy policy.
2. How we use your data
- To create and manage your account and provider profile.
- To create bookings and let customers and providers communicate.
- To display service listings, ratings and reviews.
- To send booking-related notifications.
- To keep the service secure and comply with legal obligations.
Legal bases (GDPR): performance of a contract (bookings/account), your consent (push notifications), and our legitimate interests (security, service improvement).
3. Sharing
- Between users: a customer’s name and booking details are shared with the relevant provider (and vice-versa) to fulfil the booking.
- Processors: Google Firebase (auth, database, storage, messaging) and, for payments, Stripe. Data may be processed on their infrastructure.
- We do not sell your personal data.
4. International transfers
Firestore is hosted in the eur3 (Europe) region. Where a processor transfers data outside the EEA, it is protected by appropriate safeguards (e.g. Standard Contractual Clauses).
5. Retention
We keep account and booking data while your account is active and as long as needed for legal/accounting purposes, then delete or anonymise it.
6. Your rights (GDPR)
You may request access, correction, deletion, restriction, portability, or object to processing, and withdraw consent at any time. Contact bilaladiyaman68@gmail.com. You can also lodge a complaint with the Maltese supervisory authority (IDPC, idpc.org.mt).
7. Children
Servixo is not intended for anyone under 18.
8. Security
We use Firebase Security Rules and platform safeguards. No method is 100% secure, but we take reasonable measures to protect your data.
9. Changes
We may update this policy; material changes will be notified in-app.