Privacy Policy

What data do we process and why?

• Account and security. We use the email address you enter, profile and membership details, passkey verification records, sessions, and security events to set up your account, verify your identity, enforce access permissions, and prevent abuse. Security checks may process network and connection information.
• Service and business records. Your business and its authorized staff use the customer names, contact details, service addresses, equipment, jobs, visits, staff assignments, quotes, and payment records they enter to manage service work. Photos and documents added through enabled modules are attached to the relevant record. Files may contain embedded details such as capture dates or locations.
• Customer tracking and support. The relevant service business can see the appointment preferences, notes, and quote decisions you submit through a tracking link. We use the messages and account requests you submit through our support forms to review your request.

Who receives the data?

Access to business records depends on role and branch permissions. If a service business creates a customer tracking link, the person using that link can open the customer view of the relevant record. Share tracking links only with the intended people.

Cloudflare processes web and app traffic and hosts the database and uploaded files. Turnstile on the sign-up page uses signals such as IP addresses and browser information to block bots. Cloudflare also uses these signals to improve bot detection. Resend processes the recipient address and message to deliver sign-in codes and account deletion notices. These providers may process data on infrastructure outside Türkiye.

When you open directions, Google Maps receives the selected address. The map provider’s terms govern how it handles data after you open it.

Retention and device data

We use a session cookie to keep you signed in on the web and browser storage for language and display preferences. Trial records you create without an account are stored on your device. The trial records you select are uploaded to the business workspace when you start an import.

A sign-in code is valid for 10 minutes. A mobile session is valid for up to 8 hours. Retention of account, service, and support records depends on the purpose of the record, the business’s recordkeeping needs, and any applicable legal retention requirements.

Data and account requests

You can request access to, correction of, or deletion of your personal data through Help and support. You can also use that channel to withdraw consent for a consent-based choice. Contact your service business for requests about a customer record it created.

To delete your account, sign in and choose Security and account → Delete account. Your request and the 7-day target date appear on that screen. We send confirmation to your verified email address when deletion is complete.

If you are the sole owner of a business with active team members, we email you about transferring ownership. Your team keeps its existing access. Owner settings require a verified successor. If you are the only active member, we archive the workspace. We remove the deleted account's credentials and personal account records. Required business and audit records may be kept for the applicable purpose and period. Restricted recovery copies expire under the backup retention period.

For questions about personal data or account requests, email info@servirota.com.