Privacy Policy

What we collect

• Customers: name, email, mobile number, survey answers, city and district, the exact address if you give it, the notes and photos you upload, and your reviews.
• Professionals: business name and type, your name, email, business mobile, service areas, verification documents, portfolio photos, and wallet transactions, top-up requests and their receipts.
• Technical data needed to run the service: your sign-in session in your browser, and a notification token if you allow notifications.

Who sees your data

• Before buying, professionals see only the service, approximate area, request details and budget. They never see your name, phone or address.
• Your photos stay private until a purchase, unless you choose in your request to let matching companies preview them: they then see reduced copies with a CoreUnit mark and without location or camera data, after our team checks them, through links that expire within minutes. Our team can hide any photo that shows personal details.
• Once a professional buys your request (up to 4 per request), they see your name, phone, address, notes and photos so they can contact you.
• The CoreUnit team can see data when needed to run the platform and handle reports; revealing contact details is recorded with a reason.
• Professionals’ profiles, portfolio photos and published reviews are public. A professional’s phone is shown only to customers whose request they bought.

Service providers we use

We use providers that process data on our behalf, only to run CoreUnit:

• Supabase: database.
• Google Firebase: sign-in, SMS verification codes and notifications.
• Cloudinary: images and files.
• Vercel: website hosting, and anonymous, cookie-free visit statistics.
• Meta (WhatsApp): verification codes and updates over WhatsApp when enabled.

What we do not do

• We do not sell your data to anyone. The only parties who receive your contact details are the professionals who bought your request, as described above.
• We do not log or keep verification codes: we store only a keyed hash, never the code itself.

How long we keep data

We keep your data while your account is active. Wallet and payment records are kept for as long as the law requires, even after an account is closed.

Your rights

• See and correct your data from your account page.
• Delete your account yourself in Account settings: your open requests are cancelled, and requests nobody took lose your contact details and photos. Companies that already took a request keep the contact details they received, and we keep what the law requires.
• Withdraw consent to notifications in your browser or device settings.

Security

Data is encrypted in transit, access is limited to those who need it, and verification documents and receipts are stored privately and shown only through short-lived links.