Privacy Policy

1. Data Collection

The data controller is the operator of the Mavify platform. We collect the following categories of data:

• Identity data (first name, last name, profile picture)
• Contact data (email address, phone number)
• Transaction data (payment history; complete card data is processed only by the payment provider)
• Technical and usage data (IP address, browser type, booking history)

2. Purpose of Data Processing

We process your data to: provide services (bookings, payments), communicate about platform usage, ensure account security, improve our services, and, with your consent, for marketing purposes. Depending on the purpose, the legal basis is performance of a contract, compliance with a legal obligation, our legitimate interests in security, abuse prevention and aggregate measurement of site effectiveness, or your consent where required.

3. Data Sharing

The Mavify platform consists of two applications: mavify.io (for clients seeking specialists) and pro.mavify.io (panel for specialists). We may share your data with: specialists with whom you make bookings or purchases (applies to clients using mavify.io), clients who make bookings with you (applies to specialists using pro.mavify.io), payment providers (Stripe, Mollie), infrastructure providers (Vercel, Supabase), and, after the relevant consent, Google, Meta and browser-side Sentry features. Limited server/edge error diagnostics through Sentry is described separately below. We also disclose data to public authorities when required by law.

4. Cookies

We use cookies necessary for the service to function and, with your consent, analytical and marketing cookies. Independently of cookie consent, we store daily aggregate counters of visits and clicks. To limit duplicates and abuse, the IP address is processed briefly on the server solely to create a one-way HMAC; this metrics system does not store the raw IP address, user agent, referrer, UTM parameters, session ID, or user ID. Detailed information about cookies can be found in our Cookie Policy.

5. Product analytics and account lifecycle

For signed-in accounts, we record events related to feature activation, account lifecycle stages and subscriptions. They are used to analyze and optimize the product, are linked to the account and are retained for no more than 24 months. We delete all of these events earlier when the account is deleted. Accounting documents and payment history are a separate dataset and may be retained longer where required by law. This processing is separate from cookie consent and from consent to receive marketing communications.

6. Server-side advertising conversion measurement

If a specialist grants consent for marketing cookies, we store the version and time of that consent with their account. When the account is activated or a paid subscription starts, we may then send an event to the Google Data Manager API and Meta Conversions API. For matching, the account email is normalized and SHA-256 hashed immediately before delivery; neither the raw email nor its hash is stored in the queue. We send a stable event identifier, its timestamp and, for a confirmed payment, the net amount in PLN. A hash is pseudonymous rather than anonymous data. We check consent again immediately before delivery, and withdrawing it cancels events that have not been sent.

7. Server-side error diagnostics

When the integration is enabled, we use Sentry for limited server/edge error diagnostics based on our legitimate interest in maintaining service security and reliability. This is not a cookie-based mechanism. We disable default PII transmission and remove IP addresses, cookies and sensitive authentication headers before sending an event. Browser-side Sentry and Session Replay are enabled separately and only after analytics consent.

8. Data Security

We implement modern technical and organizational measures to protect your data: SSL/TLS encryption, secure password storage, two-factor authentication for specialists, and regular security audits.

Message reports and moderation

Before a report is submitted, we show a preview of the data shared with an authorized moderator: the reported message with up to 5 messages before and 5 after it, or the entire reported conversation. The copy contains messages present when the preview was created; later messages are not included. We also store the report reason and description and data identifying its participants, message senders and timestamps. We process this data to review the report and prevent abuse. Moderator access to evidence is restricted by permissions, and every read is logged. Messages and evidence are encrypted on the server; this is not end-to-end encryption. An authorized moderator can read the content included in a report.

9. Your Rights (GDPR)

Under the GDPR Regulation, you have the following rights:

• Right to access your data and obtain a copy
• Right to rectify inaccurate data
• Right to erasure (right to be forgotten)
• Right to transfer data to another controller
• Right to object to data processing

10. CCPA Rights (California)

California residents have the right to know what data is collected, request deletion, and opt-out of the sale of personal information. Mavify does not sell personal data.

11. Data Retention

We retain data for the duration of account usage and for the period required by law (e.g., financial data for 5 years). After account deletion, data is anonymized or deleted within 30 days. All account-linked activation, lifecycle and subscription events, together with technical conversion-delivery statuses, are retained for no more than 24 months and are deleted when the account is deleted. Unsent conversions expire earlier according to the provider window (up to 7 days for Meta and up to 63 days for Google matching based on user data). Separately stored accounting documents and payment history remain for the period required by law. Aggregate marketing counters are retained for 2 years. HMACs used for deduplication expire after 5 minutes and are removed by hourly cleanup, while technical anti-spam hashes are removed after 48 hours of inactivity. Report evidence and moderator read logs are an exception to deletion after account closure: we retain them until the report is closed and for 90 days after closure, including after the account or conversation is deleted. They are deleted after that period.

12. Policy Changes

We will notify you of significant changes to this privacy policy by email at least 14 days in advance.

13. GDPR Contact

For data protection matters and to exercise your rights, please contact: privacy@mavify.io