Privacy Policy

ABC uses account and contact information to authenticate users and connect marketplace activity to the correct account. Requests and jobs can include trade, service, work type, descriptions, vehicle details when applicable, location, scheduling preferences, messages, quotes, approvals, reviews, and related records.

ABC also maintains payment, tax, earnings, refund, dispute, security, fraud-prevention, audit, and provider identifiers needed to operate and reconcile supported marketplace activity. Payment credentials are handled through supported payment-provider interfaces rather than being displayed to other marketplace users.

Information supports account access, request matching, professional eligibility, quotes, job communication, payment and payout infrastructure, safety controls, dispute handling, platform support, legal obligations, and the integrity of historical transactions.

ABC uses Supabase Auth to manage account sessions and optional authenticator-app and phone multi-factor authentication. Authenticator apps are the recommended primary method. Phone verification is an optional backup when enabled for the applicable environment. Supabase and its configured messaging provider process the security phone number and deliver the one-time message; ABC does not use that number for advertising.

ABC does not store authenticator secrets, QR enrollment contents, SMS or WhatsApp one-time codes, or factor credentials in marketplace tables. Security events such as enabling or removing MFA may create a minimized in-app notification and immutable account-security record. Once a customer or professional verifies any MFA factor, each new login must complete a verified factor before normal application access. Professionals must also complete additional verification before sensitive payout, tax, credential, insurance, or private-document actions.

ABC currently uses strictly necessary authentication cookies and limited browser storage for session continuity, security, and short-lived interface preferences. The current application does not include advertising cookies or third-party behavioral analytics. A separate advertising-cookie consent banner is therefore not part of the present product; this must be reassessed before adding analytics or tracking technology.

Notification permission is requested only after a user chooses to enable notifications. Location permission is requested only after a user chooses a location convenience feature and is used while the application is in use to help populate marketplace location fields. Manual entry remains available. File access occurs only when a user selects evidence or another supported upload; ABC does not request background location or continuous camera access.

Tax-exemption evidence, professional credentials, insurance evidence, and other supported private documents use private storage and role- and ownership-based access controls. Valid file format does not establish legal authenticity or approval. Customers cannot approve their own exemption evidence, and professionals cannot approve their own credentials or insurance evidence.

Professionals receive the request, service context, location, scheduling, job, and reputation information authorized for the relevant workflow. Customers can review marketplace information about professionals. ABC also shares necessary information with infrastructure and payment providers that support the requested feature.

ABC does not make a customer account profile a public professional profile. Access controls limit marketplace records according to account role, ownership, job participation, and administrative authorization.

Updating current profile information does not rewrite immutable payment, ledger, tax, settlement, refund, dispute, security, or audit records. Some records may need to remain after an account-access or deletion request to support transactions, reconciliation, legal obligations, security, and dispute resolution.

ABC has not yet adopted a final production retention schedule for every record category. Account deletion, anonymization, document retention, message retention, and legal-hold periods require a reviewed operating policy before production launch.

Signed-in customers can review current privacy and account information from their account area. ABC does not yet provide a self-service account-deletion control. Available account and support paths are listed on the Contact & support page.