Privacy Policy

1. Data Collection

The data controller is the operator of the Mavify platform. We collect the following categories of data:

• Identity data (first name, last name, profile picture)
• Contact data (email address, phone number)
• Transaction data (payment history - complete card data is processed only by the payment provider)
• Technical and usage data (IP address, browser type, booking history)

2. Purpose of Data Processing

We process your data to: provide services (bookings, payments), communicate about platform usage, ensure account security, improve our services, and - with your consent - for marketing purposes.

3. Data Sharing

The Mavify platform consists of two applications: mavify.io (for clients seeking specialists) and pro.mavify.io (panel for specialists). We may share your data with: specialists with whom you make bookings or purchases (applies to clients using mavify.io), clients who make bookings with you (applies to specialists using pro.mavify.io), payment providers (Stripe, Mollie), hosting service providers (Vercel, Supabase), and government authorities when required by law.

4. Cookies

We use cookies necessary for the service to function and - with your consent - analytical and marketing cookies. Detailed information can be found in our Cookie Policy.

5. Data Security

We implement modern technical and organizational measures to protect your data: SSL/TLS encryption, secure password storage, two-factor authentication for specialists, and regular security audits.

6. Your Rights (GDPR)

Under the GDPR Regulation, you have the following rights:

• Right to access your data and obtain a copy
• Right to rectify inaccurate data
• Right to erasure (right to be forgotten)
• Right to transfer data to another controller
• Right to object to data processing

7. CCPA Rights (California)

California residents have the right to know what data is collected, request deletion, and opt-out of the sale of personal information. Mavify does not sell personal data.

8. Data Retention

We retain data for the duration of account usage and for the period required by law (e.g., financial data for 5 years). After account deletion, data is anonymized or deleted within 30 days.

9. Policy Changes

We will notify you of significant changes to this privacy policy by email at least 14 days in advance.

10. GDPR Contact

For data protection matters and to exercise your rights, please contact: privacy@mavify.io