Privacy Policy

TOVO PRO operates a marketplace that connects people who need a job doing with local companies who can do it. When you use the site or the app, we act as the controller of the personal data described below.

Companies listed on the platform are independent businesses. Once you share your contact details with one of them, that company is a controller of your data in its own right and its own privacy practices apply to what it does with them.

We collect three kinds of data, and nothing else:

• What you give us. Your name, email address and, if you choose to provide one, a phone number. For a service request: the description, the city, an optional address, an optional budget and any photos you attach. For a company: business details, service areas and the verification documents described below.
• What the service produces. Requests, quotes, jobs, messages, reviews and the notifications generated from them.
• Technical data. Sign-in timestamps, the device that registered for push notifications, and aggregated page and profile view counts. Profile views are counted once per visitor per day and are not tied to a browsing history.

We do not collect payment card details. Subscription payments are handled by Stripe, and card numbers never reach our servers.

• To perform the contract with you — matching a request to companies, delivering quotes, carrying messages, and running a company subscription.
• Because we have a legitimate interest — keeping the marketplace safe, detecting duplicate or fraudulent requests, verifying that a company is who it says it is, and understanding which parts of the product are used.
• Because you consented — marketing emails and push notifications. You can withdraw either at any time from your notification settings without losing access to anything else.
• Because the law requires it — retaining invoices and tax records for the statutory period.

Access is enforced by the database itself, on every query, rather than by the screens in front of it. In practice that means:

• When your request is matched to a company, that company first sees it masked — the job, the area and your first name, but not your surname, phone number, email or exact address.
• Your contact details are revealed to a company only when that company chooses to act on your request, and only to that company. Every reveal is recorded.
• Messages are visible to the two parties in the conversation. Reviews are public and are attributed to your first name and last initial.
• Company verification documents are stored in a private area, are never public, and are readable only by the company that uploaded them and by the reviewers who assess them.

We do not sell personal data. We share it with:

• The company you chose to contact, so they can quote and do the work.
• Processors who run the service on our behalf — hosting and database, transactional email, push notification delivery, and Stripe for subscription billing. Each is bound to use the data only for the service it provides.
• Authorities, where we are legally obliged to.

• Your account data, for as long as the account exists.
• Requests, quotes, jobs and messages, for as long as they are needed for the job and any dispute that follows it.
• Invoices and payment records, for the retention period tax law requires, which we cannot shorten at request.
• Verification documents, until the verification is withdrawn or the account is deleted.

You can ask for a copy of your data, correct it, object to a use of it, or have it deleted. Two of those are built into the product rather than handled by email:

• Export. Your account settings will produce a machine-readable copy of everything associated with your account.
• Deletion. Request account deletion and we will remove your personal details.

Deleting your account removes your name, email, phone number, address and avatar, and revokes your sessions. It is not reversible.

What it does not do is erase the record that a job happened. A review you left stays published, detached from you and shown as anonymous, because the company it describes earned it and other customers rely on it. A completed job stays on the company's record for the same reason. Neither carries anything that identifies you afterwards.

Where the law requires us to keep a document — an invoice, for instance — that document survives deletion for its statutory retention period and is then removed.

Passwords are hashed by our authentication provider and are never stored or visible to us. Every table that holds user data is protected by row-level security, so a query can only ever return the rows the person making it is entitled to — the restriction does not depend on the application asking correctly.

Private files, including verification documents and request photos, are stored in non-public buckets and served through short-lived links rather than guessable URLs.

The service is not intended for anyone under 18, and we do not knowingly collect data from children. If you believe a child has created an account, contact us and we will remove it.

If we change how we use your data in a way that affects you, we will update the date at the top of this page and tell you before the change takes effect. Continuing to use the service after that point means the updated policy applies.