Privacy Policy
Effective date: August 22, 2026 · Status: beta service
Zafvio ("Zafvio", "we", "us") provides real-time coordination between home-service professionals and the customers who book them, through our mobile apps and website. This policy explains what we collect, why, and the choices you have. Zafvio is currently in beta; this policy applies to beta use.
Information we collect
- Account information. Name, email address, and/or phone number; password (stored by our identity provider, never readable by us); profile details you add. If you sign in with Google or Apple, we receive your name and email from that provider. We also record the date you agreed to our terms and whether you opted in to marketing email.
- Business information (professionals). Business name, trades, service address, hours, services and prices, sales tax settings, license number, and photos you upload.
- Booking information. Services requested, appointment times, service addresses, notes, photos of the issue you choose to attach, quotes and their line items, and your answers to them.
- Location. With your permission: customers share location to find nearby pros and time arrival alerts; professionals share location while en route so the customer can see a live arrival estimate. Location sharing stops with the trip it belongs to.
- Payment information. When in-app payments are used, card details go directly to Stripe and never touch our servers. We keep the record of what was paid, when, and for which booking.
- Usage and device data. Which screens you use and which actions you take in the app, device type and operating system version, app version, push notification tokens, and diagnostic logs. Crash reports include the state of the app at the moment it failed.
- Waitlist information. If you join the early-access waitlist we collect the contact you give us (email address and/or phone number) and, optionally, your first name, business name, trade, and crew size, plus how you found us. We use it to contact you about early access and the launch, nothing else, and you can ask us to remove it at any time.
How we use it
- Operate the service: match customers and professionals, manage bookings, compute live arrival estimates, price and deliver quotes, and send notifications you have enabled.
- Show each party what they need: a customer sees the professional's business profile, license number as entered, and live location while en route; a professional sees the customer's name, service address, notes, and issue photos for accepted jobs.
- Keep the app working: crash reports tell us when the app fails and why, so we can fix it.
- Understand how the product is used: which features are used, where people stop during sign-up, and how long things take. These events are tied to your account identifier, not to your name, email, or phone number.
- Safety, fraud prevention, and abuse handling (including reports submitted through our reporting form).
- Tell our team when a new account is created, so we can welcome you and watch for abuse.
- Send marketing email, only if you opted in. Every such email has an unsubscribe link, and you can opt out at any time without affecting your account.
We do not sell your personal information, and we do not use it for third-party advertising.
Service providers we rely on
- Amazon Web Services. Hosting, database, authentication (Amazon Cognito), storage, and the email we send you.
- Google Maps Platform. Geocoding addresses, address suggestions, and traffic-aware travel estimates.
- Expo / Apple Push Notification service. Delivering push notifications.
- Stripe. Payment processing and professional payouts; card and bank details go directly to Stripe and never touch our servers. Stripe verifies professionals' identity under its own terms.
- Sentry. Crash and error reporting for the apps and the service behind them.
- PostHog. Product analytics: the usage events described above. We do not record your screen or your keystrokes.
- MailerLite. Sending waitlist and early-access email. Waitlist signups with an email address are stored there; phone-only signups are not.
Retention, and what closing your account does
You can close your account from the app at any time (Profile or Settings → Close account). Closing it deactivates the account: you are signed out everywhere, you can no longer sign in, professionals disappear from search, and we stop sending you notifications and email.
Closing your account does not erase the records behind it. Bookings, quotes, invoices, payment records, and the audit trail of actions on them are kept, because they are financial and legal records: the other party to each job relies on them, and we may be required to produce them. We keep these for seven years after the activity they relate to, then delete them. Your name stays attached to those records so they remain meaningful; nothing else about you is used after closure.
- Location pings used for live tracking are operational data kept for the trip and deleted within 30 days.
- Issue photos and portfolio photos are kept with the booking or profile they belong to, under the same seven-year rule.
- Crash reports and analytics events are kept for 90 days and 12 months respectively, then deleted by the providers named above.
- Sign-in identity (including Google or Apple sign-in) is disabled at closure and deleted after 90 days.
If you want personal data removed that is not part of a financial or legal record, ask us (see Data Deletion) and we will do it within 30 days.
Security
Data is encrypted in transit, access is restricted per role (customers and professionals can only see their own records), staff access to the console requires a second factor, and our infrastructure runs on managed AWS security services, including a web application firewall.
Your rights
You may access, correct, or delete your personal information, withdraw marketing consent, and withdraw location or notification permissions in your device settings at any time. Send privacy requests to hello@zafvio.com and we will respond within 30 days. We will verify that the request comes from the account holder.
United States. Depending on your state (for example Texas), you may have additional statutory rights, which we honor. We do not sell personal information and do not engage in targeted advertising.
Canada. We handle personal information in line with PIPEDA. You may ask what we hold about you and how it has been used, and you may withdraw consent subject to legal and contractual restrictions. Zafvio is currently offered in English and is not yet available in Quebec; we will update this policy when it is.
Children
Zafvio is not directed to children and requires users to be at least 18 years old.
Changes
We will post updates to this page and, for material changes, notify you in the app before they take effect.
Contact
Zafvio · privacy requests: hello@zafvio.com · support: support@zafvio.com