ServiceMarket

Privacy policy

Last updated: 28 October 2026.

This policy explains what personal data we process when you use ServiceMarket, why we do it and what you can ask of us. It is written in line with Regulation (EU) 2016/679 (GDPR).

1. Who processes the data

The controller is [to be completed: full company name], registered office at [to be completed: registered address], tax ID [to be completed: CUI/CIF].

For anything concerning your data, write to [to be completed: address for data requests].

2. What data we process

  • Account — e-mail address, name, password (kept only as a cryptographic hash, never in the clear), preferred language, role (client or specialist), last activity.
  • Profile — the description you write, your photograph, your town and travel radius, the phone and e-mail you choose to publish, your website and social profiles, skills and working hours.
  • Addresses — the addresses you save for orders, with their approximate coordinates.
  • Published content — listings, briefs, proposals, portfolio, photographs, reviews and replies to reviews.
  • Communication — messages between you and other users, attachments, comments on briefs, and messages sent to us.
  • Orders and bookings — what you ordered, from whom, when, the status, and the answers to the intake questions.
  • Payments to the platform — amount, currency, purpose, status and the processor's reference. If you save a card for payouts, we keep only the card type, the last four digits, the holder's name and the expiry date. We never hold or store your full card number.
  • Notifications — your device token, if you installed the app and allowed notifications.
  • App keys — the app passwords you generate for an AI assistant (also kept as a hash), their permissions and last use.
  • Usage statistics — how many views a listing had, how often the phone button was tapped, which category was searched. These are tied to a random visitor identifier, not to your name.
  • Technical data — IP address, device and browser type, time of access, kept in server logs.

3. Where the data comes from

Mostly from you: you enter it in your account, your listings or your messages.

If you sign in with Google or Facebook, we receive your e-mail address and display name from them, in order to create or recognise your account.

Some of the accounts and listings on the platform come from our previous website, servicemarket.ro, built on WordPress, and were transferred into this system in October 2026 together with the texts, photographs and e-mail addresses held there.

4. Why we process it, and on what basis

  • To provide the service — account, listings, messages, orders, bookings, payments. Basis: performance of the contract between you and us (art. 6(1)(b) GDPR).
  • To keep the platform clean and safe — moderating listings, preventing abuse and fraud, technical logs. Basis: our legitimate interest (point (f)) in a catalogue people can trust.
  • To tell you what is happening in your account — a new order, a message, a review. Basis: performance of the contract.
  • To tell specialists about new briefs in their trade — a single e-mail gathering the briefs that appeared, not one per brief. Basis: our legitimate interest in matching demand with supply. You can unsubscribe from any such e-mail in one click, and your address goes on a suppression list.
  • To meet legal obligations — invoicing, accounting, responding to authorities. Basis: legal obligation (point (c)).
  • To understand how the site is used — aggregated, pseudonymous statistics. Basis: legitimate interest; for cookies that are not strictly necessary, your consent.

We do not take automated decisions with legal effects on you. Moderation decisions are made by a person.

5. Who else sees the data

Other users. Your public profile, listings, portfolio and reviews are visible to anyone visiting the site. Your phone number is shown only when the corresponding button is tapped. Messages are visible only to their recipient.

Suppliers who help us run the service, each only for their part and under a processing agreement:

  • server hosting and photo storage — a cloud infrastructure provider, with storage in the European Union (Stockholm region, Sweden);
  • sending e-mail — our e-mail provider;
  • maps and address completion — Google Maps Platform, which receives the visitor's IP address when a map loads;
  • in-app notifications — the Expo push notification service;
  • card payment processing, when that method is enabled — an authorised payment processor, which receives the card details directly from you.

Assistants you connect yourself. If you generate an app password for an AI assistant, your account data reaches that assistant's provider, at your own responsibility. You can revoke the key at any time.

Authorities, where the law requires it.

We do not sell your data to anyone and we do not hand it over for other companies' advertising.

6. Transfers outside the European Economic Area

Data is stored in the European Union. Some of the suppliers above are United States companies; where data reaches them, the transfer is made under the standard contractual clauses approved by the European Commission or under an adequacy decision. You may request a copy of these safeguards by writing to us.

7. How long we keep it

  • Account and profile — for as long as the account is active.
  • After an account is closed — we delete or anonymise the data within a reasonable period, keeping only what the law requires.
  • Financial records — 10 years, under accounting law.
  • Messages — as long as the conversation exists in your account.
  • Technical logs — normally up to 12 months.
  • The unsubscribe list — kept indefinitely, because its whole purpose is to stop us writing to you.

8. Your rights

You have the right to ask for access to your data (art. 15), its rectification (art. 16), erasure (art. 17), restriction of processing (art. 18), portability in a readable format (art. 20), as well as to object to processing based on legitimate interest (art. 21) and to withdraw consent at any time, without affecting processing already carried out.

For any of these, write to [to be completed: address for data requests]. We answer within 30 days at most.

The "Privacy" section in your account lets you manage your cookie preferences and clear the data the platform saved in your browser. Those buttons act on your browser only — for the data in our systems, use the address above.

If you are not satisfied with our answer, you may complain to the Romanian data protection authority (dataprotection.ro).

9. Cookies

We use a small number of cookies:

  • Strictly necessary — they keep you signed in (including the session refresh token, held in a cookie that scripts cannot read) and remember your chosen language. These cannot be switched off, because the site does not work without them.
  • Optional — for preferences, statistics and marketing. We ask for these through a banner on your first visit and load none of them without your agreement. At present we run no third-party analytics or advertising tool on the site.

You can change your choice at any time through the "Cookie settings" link in the site footer.

10. Security

Traffic is encrypted (HTTPS), passwords are stored only as cryptographic hashes, access to the database is restricted, and sessions can be ended remotely. No system is perfectly secure; if a breach occurs that puts your rights at risk, we will notify you and the authority as the law requires.

11. Children

The platform is not aimed at people under 16. If we learn that we created an account for someone below that age without a parent's consent, we delete it.

12. Changes to this policy

If we change it, we publish the new version here and update the date at the top. Significant changes are also announced by e-mail.

13. Contact

Questions about your data: [to be completed: address for data requests].