Privacy Policy

1. Information We Collect

We collect only the information necessary to provide and improve the Service. The categories of information we collect are described below.

1.1 Information You Provide Directly

• Account information: Your name, email address, and password when you register for an account.
• Business information: The business name, listing URL, and related details you provide when submitting a review dispute order.
• Order details: The review URLs, review content excerpts, and any notes or supporting materials you submit with an order.
• Communications: The content of any messages, emails, or support requests you send to us.

1.2 Information Collected Automatically

• Usage data: Information about how you interact with the Service, such as pages visited, features used, and time spent on the platform.
• Device and technical data: IP address, browser type and version, operating system, and referring page URLs.
• Cookies and similar technologies: See Section 4 below for details on how we use cookies.

1.3 Information From Payment Processing

When you fund your wallet, we receive confirmation of the transaction from our payment processor. This may include the transaction hash, the amount, the currency, and the wallet address used. We do not store your private wallet keys, and we never request them.

2. How We Use Your Data

We use the information we collect for the following purposes:

• Providing the Service: Creating and managing your account, processing your wallet funding, and preparing and submitting your review dispute orders.
• Communication: Sending you order status updates, responding to your support requests, and notifying you of important changes to the Service or these policies.
• Account security: Verifying your identity, detecting and preventing fraud, and protecting your account from unauthorized access.
• Service improvement: Analyzing usage patterns to improve our features, fix bugs, and enhance the user experience. We use aggregated and de-identified data for this purpose wherever possible.
• Legal compliance: Meeting our legal obligations and responding to lawful requests from authorities where required.

We do not sell your personal information to third parties. We do not use your data to train third-party artificial intelligence models.

3. Data Storage and Security

Your data is stored using Supabase, a secure, cloud-based database platform that provides encrypted data storage at rest and in transit. All data transmitted between your browser and our servers is protected using TLS (Transport Layer Security) encryption.

We implement industry-standard security measures to protect your information, including:

• Encrypted password storage using one-way hashing algorithms.
• Row-level security policies that restrict data access to authorized users only.
• Regular security reviews of our database configuration and access controls.
• Principle of least privilege for all internal access to user data.
• Secure session management for authenticated users.

While we take reasonable measures to protect your data, no method of transmission or storage is completely secure. We cannot guarantee absolute security, and you acknowledge that you provide your information at your own risk.

4. Cookie Usage

Cookies are small text files placed on your device by the websites you visit. We use cookies and similar technologies to operate the Service and to understand how you use it.

4.1 Essential Cookies

These cookies are necessary for the Service to function. They enable you to log in, maintain your session, and access secure areas of the platform. Essential cookies cannot be disabled, as doing so would prevent the Service from working.

4.2 Functional Cookies

These cookies remember your preferences, such as your selected language or display settings, so that we can provide a more personalized experience.

4.3 Analytics Cookies

These cookies help us understand how visitors interact with the Service by collecting and reporting information anonymously. We use this data to identify trends and improve the user experience.

4.4 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to refuse cookies or alert you when cookies are being sent. Disabling cookies may affect the functionality of the Service. Please refer to your browser's help documentation for instructions on managing cookies.

5. Third-Party Services

We rely on certain third-party services to operate the Service. These providers may collect, store, and process data on our behalf in accordance with their own privacy policies. We share only the minimum data necessary to use their services.

5.1 Supabase (Authentication & Database)

We use Supabase for user authentication and as our primary database provider. Supabase stores your account credentials, profile information, order data, and wallet balance. Supabase processes data in accordance with its own privacy policy and complies with industry-standard security practices. Your authentication data is protected by Supabase's built-in security features, including encrypted password hashing and row-level security policies.

5.2 Cryptocurrency Payment Processor

We use an integrated cryptocurrency payment processor to handle wallet funding transactions. When you fund your wallet, the processor receives your transaction details, including the wallet address and transaction amount. The processor operates under its own privacy and security policies. We do not store your private wallet keys or seed phrases, and we never request them.

5.3 Review Platforms

When we submit a dispute request on your behalf, the relevant review platform (such as Google) may receive information you provided to us, including business listing details and the content of the flagged review. These platforms process such information under their own terms and privacy policies.

We are not responsible for the privacy practices of third-party services. We encourage you to review the privacy policies of any third-party service that you interact with.

6. Data Retention Policy

We retain your personal information only for as long as necessary to fulfill the purposes described in this policy, comply with our legal obligations, and resolve disputes.

• Active accounts: Your account data is retained for as long as your account is active. If you close your account, we will delete or anonymize your personal data within thirty (30) days, except where retention is required by law.
• Order records: Records of completed orders, including dispute submissions and outcomes, are retained for two (2) years after the order is completed, after which they are deleted or anonymized.
• Transaction data: Payment transaction records are retained for seven (7) years as required for tax and financial compliance purposes.
• Support communications: Emails and support messages are retained for one (1) year after the conversation is closed.
• Server logs: Technical server logs are retained for ninety (90) days for security and troubleshooting purposes.

When data is no longer needed, we securely delete it or anonymize it so that it can no longer be associated with you.

7. Your Rights

Depending on your jurisdiction, you may have certain rights regarding your personal data. We are committed to helping you exercise these rights.

7.1 Right of Access

You have the right to request a copy of the personal data we hold about you. You can access much of this information directly through your account dashboard. For a complete export, contact us using the details in Section 9.

7.2 Right to Deletion

You have the right to request that we delete your personal data. You may initiate this process by closing your account or by contacting us directly. We will delete your data within thirty (30) days, except where we are legally required to retain certain records, such as transaction data for tax compliance.

7.3 Right to Correction

You have the right to request that we correct any inaccurate or incomplete personal data we hold about you. You can update most profile information directly through your account settings. For information you cannot edit yourself, contact us and we will make the correction promptly.

7.4 Additional Rights

• Right to object: You may object to our processing of your data for certain purposes, such as direct marketing.
• Right to restrict processing: You may request that we limit our processing of your data in certain circumstances.
• Right to data portability: You may request that we provide your personal data in a structured, machine-readable format so that you can transfer it to another service.
• Right to withdraw consent: Where we rely on your consent to process data, you may withdraw that consent at any time.

To exercise any of these rights, contact us using the details in Section 9. We will respond to your request within thirty (30) days. We may need to verify your identity before processing your request.

8. GDPR Compliance Statement

GMBCLEANER is committed to complying with the European Union's General Data Protection Regulation (GDPR) and the UK Data Protection Act with respect to the personal data of individuals located in the European Economic Area (EEA) and the United Kingdom.

Our lawful basis for processing your personal data is:

• Contractual necessity: We process your account and order data to provide the Service you have requested.
• Legal obligation: We retain certain records, such as transaction data, to comply with tax and financial regulations.
• Legitimate interests: We process usage and analytics data to improve the Service and maintain security, where our interests do not override your rights and freedoms.
• Consent: We rely on your consent for non-essential cookies and optional marketing communications. You may withdraw consent at any time.

If you are located in the EEA or the UK, you have the rights described in Section 7. If you believe we have not complied with our obligations under the GDPR, you have the right to lodge a complaint with your local data protection authority. You may also contact our data protection contact at privacy@gmbcleaner.com.

We do not transfer your personal data outside the EEA or UK without appropriate safeguards in place, such as Standard Contractual Clauses approved by the European Commission.

9. Contact for Privacy Concerns

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

We aim to respond to all privacy-related inquiries within five (5) business days. For requests to exercise your data rights, we will respond within thirty (30) days as required by applicable law.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we do, we will revise the "Last updated" date at the top of this page.

For material changes that affect your rights, we will provide a more prominent notice, such as a notification in your account dashboard or an email to the address on file. We encourage you to review this policy periodically to stay informed about how we collect, use, and protect your data.