Privacy policy

Effective from 05.11.2026

Controller

[FIRMA NIMI OÜ, registrikood, aadress], [email protected]

What we collect

Your email, name, password (encrypted) and what you add yourself: region, phone, profile text, tasks, offers and reviews. If you log in with Google, we receive your name and email from Google. For security, server logs store IP addresses and browser data.

Why and on what basis

  • Running your account, showing tasks and offers, sharing contacts after a helper is chosen and emailing you about your tasks — performance of a contract (GDPR Art. 6(1)(b)).
  • Security, preventing fraud and spam, handling reports, server logs — legitimate interest (point f).
  • Legal obligations, such as responding to authorities — legal obligation (point c).

Who sees what

Your name, region, profile text, tasks and reviews are public and may appear in search engines. Your email and phone are shown only to the person you agree to work with, after a helper is chosen. Our processors: hosting [provider, country], email delivery [email service] and Google (only if you log in with Google). Google may process data outside the EU under the EU–US Data Privacy Framework or standard contractual clauses.

How long we keep data

Account data for as long as the account exists. When you delete your account, your name, email, phone and profile text are deleted immediately; finished tasks and reviews stay anonymised. Server logs up to 90 days, reports up to 1 year after the decision. [Check retention periods with a lawyer.]

Your rights

You can access, correct and delete your data, restrict or object to processing, and get your data in a machine-readable format. You can download your data and delete your account in Settings; for anything else write to [email protected]. You have the right to complain to the Estonian Data Protection Inspectorate (aki.ee).

Cookies

We only use strictly necessary cookies: login (sessionid), security (csrftoken), language (django_language) and messages. No advertising or analytics cookies, so no consent banner is needed.