Privacy Policy

We only collect what the Service needs to work. Depending on how you use it, that includes:

• Account details. Your first and last name, email address, a profile photo if you add one, and a password, which we store only as a salted hash. If you sign in with Google or Apple we receive your name and email from them instead, and we record which provider you used.
• Tasks you post. The category and type of task, the listing link, the seller’s contact details if you give them, the address and map location of the visit, the date and time, your checklist, your fee and any photos you attach.
• Offers and reports. Offers you send as a freelancer, including your price and message, and reports you submit, including checklist answers, notes and the photos you take during the visit.
• Messages. Chat messages between posters and freelancers, including image and PDF attachments.
• Payment and wallet data. Card payments are processed by Stripe. We never see or store your full card number. We keep a Stripe customer reference, the card brand, last four digits and expiry date so you can reuse a saved card, plus a ledger of your wallet top-ups, holds, payouts and withdrawal requests.
• Activity and reputation. Your rating, the number of jobs you have completed and the time of your last sign-in.
• Technical data. Your IP address, browser or device type and request logs, which our hosting provider records for security and to run the Service. We also use a lightweight, cookie-free analytics script that records page views in aggregate.

• To create and secure your account and keep you signed in.
• To publish your task to nearby freelancers, let them make offers, and let you pick one.
• To show freelancers the address, time and checklist of a task they have been chosen for.
• To deliver reports, photos and messages between you and the other party.
• To take payment, hold the fee in your wallet and release it when a report is submitted.
• To send you transactional emails such as sign-in codes, new offers, chosen offers, submitted reports and new messages.
• To detect abuse, enforce rate limits and keep the Service secure.
• To understand how the Service is used, in aggregate, so we can improve it.

Our legal bases under UK and EU data protection law are performance of our contract with you, our legitimate interests in running, securing and improving the Service, and compliance with legal obligations such as accounting and fraud prevention. Where we rely on consent, for example for optional marketing, you can withdraw it at any time.

Checkout is a marketplace, so some of your data is necessarily visible to the people you deal with:

• Freelancers browsing tasks see the task details you post, including the area, time, category and fee, together with your first name and profile photo.
• When you choose a freelancer, they see the full address, your checklist, the listing link and any seller contact details you included.
• Posters see the name, photo, rating, jobs completed, offer and message of every freelancer who makes an offer.
• Both parties see everything shared in their chat thread and in the report.

Please only include details in a task, message or report that you are comfortable sharing with the other party.

We do not sell your personal data. We share it only with providers who help us run the Service, under contracts that restrict how they use it:

• Stripe processes card payments and stores your card details. Stripe’s own privacy policy applies to the data they collect.
• Cloudflare hosts the Service, stores our database, uploaded photos and files, session data and email queues, and provides network security.
• Google and Apple when you choose to sign in with them.
• Email delivery providers that send our transactional emails.

We may also disclose data where the law requires it, to protect the rights or safety of users, or as part of a sale or reorganisation of our business, in which case this policy continues to apply.

Our providers may process data outside the United Kingdom and the European Economic Area. Where they do, we rely on adequacy decisions or standard contractual clauses so that your data receives an equivalent level of protection.

• Account data is kept while your account is open and for up to 30 days after you close it, unless we must keep it longer.
• Tasks, offers, reports, messages and photos are kept while the account that created them is open, so both parties can refer back to them.
• Wallet and payment records are kept for six years after the transaction to meet accounting and tax obligations.
• Security logs and rate-limit counters are kept for a short, rolling period and then deleted.

We use a single strictly necessary cookie that keeps you signed in, plus a short-lived cookie during Google or Apple sign-in to protect against forged requests. We do not use advertising or cross-site tracking cookies. Our analytics script does not set cookies.

Under UK GDPR and the EU GDPR you can ask us to:

• Give you a copy of the personal data we hold about you.
• Correct data that is wrong or incomplete. You can edit most of it yourself from your account page.
• Delete your data, subject to records we must keep by law.
• Restrict or object to certain processing, or receive your data in a portable format.

To exercise any of these rights, email support@pre-loved.app from the address on your account. We will respond within one month. You also have the right to complain to the Information Commissioner’s Office or your local supervisory authority.

All traffic to the Service is encrypted in transit. Passwords are hashed, sessions expire, sign-in endpoints are rate limited, and uploaded files are stored in private storage and served through the Service. No system is perfectly secure, so please use a strong, unique password and tell us at support@pre-loved.app if you think your account has been compromised.

The Service is for adults. We do not knowingly collect data from anyone under 18. If you believe a child has created an account, contact us and we will remove it.

We will post any changes on this page and update the date at the top. If a change materially affects how we use your data we will also notify you by email or in the app before it takes effect.

Questions about privacy: support@pre-loved.app. For how the Service itself works, see our Terms and Conditions.