Privacy Policy

Contactor is an independent digital marketplace for discovering, reviewing, contacting, and managing event-service contractors. The platform is currently operated by a private individual and is available through the mobile application, the web platform, and related web pages, administration tools, and support channels.

For privacy questions or data-protection requests, contact us at support@contactor.me.

The platform may be used by users of different ages, subject to applicable local laws and parental supervision where required.

Contactor offers a Guest Mode that lets you use the platform in limited, read-only fashion without creating an account.

As a guest you can browse categories, search, view contractor profiles, view reviews, view photos, view PDF files, and view announcements and banners.

As a guest you cannot add favorites, submit reviews, submit reports, create requests, contact contractors, create contractor listings, or access account-only functionality. Attempting an account-only action opens a login/access prompt.

As a guest, we do not create a user account for you and we do not write personal records to user-specific collections. We may still process limited, non-account technical and analytics data while you browse (for example, app language, session identifiers, and banner view/click analytics) to operate, secure, and improve the platform.

We collect only the data necessary to operate, protect, improve, and moderate the platform.

Account Data — when you create or use an account, we may collect: user ID (uid); email address and lowercase email; authentication provider (Email/Password, Google, or Apple); email verification status; display name; user name; profile photo; selected app language; user role (user, contractor, manager, admin); account creation and update timestamps; phone number, if you add it; whether you have a business profile; notification preferences; and optional profile information you choose to provide (such as bio, city, company, profession, and social handles).

Authentication Data — authentication is handled through Firebase Authentication and may include email/password, Google, and Apple login data; authentication tokens required to keep you signed in; and email verification status. We do not store your password in readable form.

Contractor Profile Data — if you create a contractor listing, we may collect and store: business or service name; short and full description; category and subcategory; city, service area, optional address, and maximum service distance; experience information; pricing and work-condition information; work schedule; spoken languages; cancellation policy; contract availability; contact phone number and lead email; social or messenger links (Instagram, Telegram, WhatsApp, LinkedIn); business or identity information (company type, company name, company NIP, company address, postal code, contact country, contact city, contact phone, and contact email); private-person identity fields (first name and last name) where applicable; profile status (draft, pending, approved, rejected, or archived); and moderation status, rejection reason, and moderation timestamps.

Media and Files — if you upload media or files, we may collect and store: profile and cover images; gallery and work photos; certificate images; PDF files (such as menus, portfolios, or pricing documents); related captions, tags, and type (work or certificate); and file URLs and metadata. Uploaded files are stored using Firebase Storage / Google Cloud infrastructure.

Reviews and Ratings — when users leave reviews, we may collect: review text; overall rating and detailed ratings (speed rating, quality rating, result rating); review photos; reviewer name, avatar, and user ID; contractor reference; verified and edited flags; creation and update timestamps; and moderation status.

Reports and Complaints — if you report a contractor profile, review, or other content, we may collect: your user reference; the reported profile, review, or content reference; the report reason and any details you provide; the report status; and the report timestamp. Reports are used for moderation, abuse prevention, and safety, and are not public.

Requests and Leads — when you contact a contractor through a request, we may process: the contractor reference and contractor owner ID; your user reference and user ID; the client contact details you submit (name, email, phone, WhatsApp, Telegram) and which contact channels you enabled; event type, city, optional event date, budget, and optional comment; and request status, source, and timestamps. Direct-contact actions (phone, email, WhatsApp, Telegram, Instagram, LinkedIn) and associated counters may also be recorded.

Favorites and Notes — when you add a contractor to favorites, we may store references to favorited contractor profiles and related metadata. You may also save personal notes about a contractor. Favorites and notes are linked to your account and are not public.

Recently Viewed Contractors — when you open a contractor profile, we may store a recent-view record linked to your account, including the contractor reference, a viewed timestamp, and cached display details used to show your recently viewed contractors and improve navigation.

Notifications Data — we may store in-app notification data, including: notification title and body; notification type; read/unread status and read timestamp; importance flag; creation time; target page or route; related document path; image URL; source ID; and language. We may also store unread notification counters.

Push Notification Data — push notifications are enabled in production. We may process the Firebase Cloud Messaging / device notification token, notification delivery data, and your notification preferences. You can control push notifications through your device settings and, where available, through the app's notification settings.

Referral and Bonus Data — if you use invite links or referral features, we may collect and store: your referral code and link; the referral code of the user who invited you; verification status used for referral validation; reward status; invite counters; bonus points; and invite tickets. Referral rewards are processed automatically and protected against duplicate rewards and self-referrals.

Announcement and Banner Analytics — when promotional or informational banners are shown, we may process limited analytics data, including banner views and unique views; CTA clicks and unique CTA clicks; session ID; user ID, if available; app language; date key; event and CTA type; internal route or external URL; and timestamps.

Contractor Performance Analytics — for contractor listings, we may store counters such as profile views, unique views, contact clicks by channel, and lead counts, shown to the listing owner and used to operate the marketplace.

Technical and Usage Data — we may collect technical information required to operate and secure the platform, including app usage events, app language, session identifiers, error or diagnostic data, timestamps, security logs, moderation logs, and basic performance data.

We use your data to: create and manage accounts; authenticate users and verify email; provide access to the app and web platform, including Guest Mode browsing; allow users to create, edit, publish, archive, and delete contractor listings; display approved contractor profiles; allow users to search, filter, and view contractors; allow users to contact contractors through requests and direct contact; show favorites, notes, and recently viewed contractors; collect and display reviews and ratings; process reports and complaints; moderate listings, reviews, reports, and other user-generated content; send in-app and push notifications; manage referral links, rewards, bonus points, and invite counters; show announcements and measure their performance; provide contractor analytics; protect the platform against abuse, spam, fraud, and unauthorized actions; maintain security; improve performance and user experience; and comply with legal obligations.

Where GDPR applies, we process personal data based on one or more of the following:

Performance of a contract — account creation, login and authentication, contractor listings, reviews, favorites, notifications, contact and request flows, and account deletion.

Legitimate interests — platform security, fraud and abuse prevention, moderation, service improvement, analytics, referral-abuse prevention, and maintaining accurate ratings and statistics.

Consent — optional profile or contractor content, push notifications where required by the device or platform, and optional promotional communication.

Legal obligations — where required by law, regulation, legal claims, accounting, or compliance.

Public contractor profiles — approved, active listings may be visible to users and guests, including business or service name; category and subcategory; city and service area; description; photos; certificates; PDF files; ratings and reviews; work conditions; price-related information; languages; and public contact methods depending on app logic and user actions. Draft, pending, rejected, archived, or inactive listings are not intended to be publicly shown.

Reviews — approved reviews may be visible to others and may include review text, rating, review photos, reviewer display name and avatar, and the date of review. After account deletion, reviews are anonymized (see Account Deletion).

Reports — reports and complaints are never public; they are used only for moderation and safety.

Favorites, notes, and recently viewed — these are linked to your account and are not public.

Contractor profiles, edits, reviews, reports, images, certificates, PDFs, and other user-generated content may be reviewed by administrators or moderators. Contractor listings are manually reviewed before publication. Contractor and company information is collected from users and is not independently verified. Any verification status shown on a profile may be assigned by moderators only after manual review.

We may approve, reject, hide, archive, delete, or restrict content that violates platform rules, legal requirements, quality standards, or safety requirements. If a listing is rejected, we may store the rejection reason and moderation metadata so you can correct the issue and resubmit.

We may send in-app notifications and push notifications related to account activity, listing status, moderation results, review updates, client requests and leads, referral or bonus activity, announcements, and safety or system updates. Email and SMS notifications are not supported. Notifications may include links or routes to relevant parts of the app. You may mark notifications as read or unread, delete them, or adjust your preferences.

We use limited internal analytics to understand how the platform is used and to improve it, including banner views and CTA clicks, daily announcement statistics, session-based counters, contractor profile views, contact counters, favorites and review counters, referral statistics, and notification read status. We do not sell this data.

We do not sell or rent your personal data. We may share or process data with trusted providers necessary to operate the platform: Firebase / Google Cloud for authentication, database, file storage, backend functions, push notifications, and infrastructure; Google and Apple authentication services if you use those sign-in methods; app stores or platform providers where required for distribution, security, or compliance; and legal, regulatory, or law-enforcement authorities where required by applicable law.

Contactor uses Firebase Authentication, Cloud Firestore, Firebase / Cloud Storage, Cloud Functions, and Firebase Cloud Messaging for authentication, data and media storage, backend logic, and notifications.

Your data may be processed and stored outside your country, including outside the European Economic Area. Where required, we rely on appropriate safeguards and provider commitments to protect transferred data.

You can delete your account directly in the app. When account deletion is confirmed, a secure backend function:

• deletes your Firebase Authentication account;

• deletes your user account data and personal user information;

• deletes your contractor profile, if found;

• removes contractor photos and contractor PDF files from storage;

• clears local app state and returns you to the sign-in screen.

Reviews remain on the platform and are anonymized so that user identifiers are removed while the rating and review content remain for platform integrity. After anonymization, a review no longer contains your user ID, user reference, avatar, or original display name, and your name may be replaced with a generic label such as “Deleted User”.

The handling of existing request and lead records after account deletion may differ depending on platform logic.

We keep personal data only for as long as necessary to provide the service, maintain your account, display contractor profiles, maintain reviews and ratings, process reports and moderation, maintain security logs, comply with legal obligations, resolve disputes, and enforce platform rules. Some data has feature-specific retention logic. When data is no longer needed, we delete, anonymize, or aggregate it where appropriate.

Depending on your location and applicable law, including GDPR, you may have the right to be informed, access your data, correct inaccurate or incomplete data, request deletion, restrict processing, object to processing, request data portability, withdraw consent where processing is based on consent, and lodge a complaint with a data-protection authority. To exercise your rights, contact support@contactor.me. We may need to verify your identity before processing your request.

We use reasonable technical and organizational measures, including Firebase Authentication, Firestore security rules, role-based access controls, backend-controlled sensitive operations through Cloud Functions, restricted moderation flows, storage cleanup logic, and separation of public, draft, and moderation data layers. No system is completely secure, but we continuously work to improve security.

Some platform actions are automated, including notification creation, referral reward calculation, duplicate-report prevention, unread counters, rating aggregation, contractor count aggregation, expired-content cleanup, announcement statistics, and account-deletion cleanup. These operate the platform, prevent abuse, and keep data consistent. We do not use automated processing to make legal or similarly significant decisions about you without human review where such review is required.

We may show promotional or informational banners inside the app and measure views and CTA clicks to understand whether announcements are useful and relevant. We do not sell your personal data to advertisers.

We may update this Privacy Policy from time to time. When we make material changes, we may notify users through the app, website, or other appropriate means. Continued use of the platform after an update means you accept the updated Privacy Policy.

For questions, requests, or complaints related to this Privacy Policy or your personal data, contact support@contactor.me.