Privacy Policy

1. Data Collection

We collect information necessary to facilitate the cleaning marketplace and ensure the safety of our users.

1.1 Personal Identification Data

• Profiles: We collect names, phone numbers (WhatsApp-ready), and email addresses.
• Verification Docs: For Companies, we store Trade Licenses and ID copies in private storage buckets.

1.2 Geolocation Data

• Client Addresses: We store physical addresses and geography (PostGIS) points to calculate matching priorities.
• Worker Tracking: We may track the location of Workers during active "In Progress" orders to provide real-time updates to Clients.

1.3 Media and Files

• Avatars: User profile photos.
• Order Photos: Images of the service area "Before" and "After" uploaded by Workers.
• Dispute Attachments: Proof uploaded by either party during a conflict.

2. How We Use Your Data

• Matching Algorithm: Using location and schedule data to find the best Company for a Client.
• Notifications: Sending OTPs, order updates, and marketing via WhatsApp, Push (FCM), and Email.
• Financial Processing: Sharing necessary data with Stripe to facilitate AED transactions and tips.
• Analytics: Using Materialized Views (like mv_platform_dashboard) to monitor platform health.

3. Data Storage and Security

3.1 Infrastructure

Data is stored using Supabase (PostgreSQL 17) with Row Level Security (RLS). RLS ensures that:

• Companies only see their own orders and teams.
• Clients only access their personal addresses and booking history.
• Workers only see orders they are assigned to.

3.2 Storage Buckets

Files are segregated into buckets with specific access policies:

• verification-docs and order-photos are private and only accessible by Admins and the involved parties.
• avatars and company-logos are public for UI display within the apps.

4. Third-Party Disclosure

We do not sell your data. We share information only with:

• Stripe: For payment processing and Connect onboarding.
• WhatsApp/Twilio/Firebase: For critical communication and OTP delivery.
• Google Maps: For address validation and navigation.

5. User Rights and Data Deletion

• Access and Correction: Users can update their profile, phone number, and email via a secure OTP process.
• Deactivation: An account deactivated by an Admin will have its access revoked, and data will be handled according to our company_deactivation_policy.
• Deletion: Users may request data deletion; however, financial records (transactions/invoices) will be retained as required by UAE law.

6. Changes to This Policy

We reserve the right to update these policies. Significant changes, such as adjustments to the platform_settings (commission rates or timeouts), will be updated in the system and reflected in our digital terms.