Privacy Policy
Effective date: July 2026 • Data Controller: Alberto Solazzo
1.0 Data Controller and Contact Details
The Data Controller responsible for personal data processing is Alberto Solazzo. For any inquiries concerning data privacy, account deletion, or exercising your rights under GDPR, contact our designated data protection officer at:
2.0 Categories of Processed Personal Data
Jobbab collects personal data required for platform intermediation and service fulfillment:
- Registration & Identification Data: Full name, email address, phone number, location, and authentication credentials.
- Service Request Specifications: Category selection, detailed job description, uploaded images, and request address.
- Professional & Financial Metadata: PostGIS service area geometry, Tax Code/VAT Number, Stripe Connect identifiers, and performance metrics.
- Technical Navigation Data: Essential authentication cookies, referral attribution tokens (jobbab_referral), and country-level IP metrics.
3.0 Purposes of Processing and Legal Bases
| Processing Purpose | Legal Basis (GDPR) |
|---|---|
| Client-Worker intermediation and matching operations | Contractual Performance (Art. 6.1.b) |
| In-platform payments & statutory tax reporting (DAC7) | Legal Obligation (Art. 6.1.c) |
| Platform security, content moderation, and fraud prevention | Legitimate Interest (Art. 6.1.f) |
4.0 Data Recipients and Third-Party Sub-Processors
Data is disclosed exclusively to designated sub-processors for technical and payment operations:
- Supabase Inc. (Database & Authentication infrastructure, EU region)
- Stripe Payments Europe Ltd. (Payment processing and Connect payout services)
- Resend Inc. (Transactional email notifications)
- Vercel Inc. (Cloud hosting infrastructure and cookieless analytics)
- Google Cloud Platform (Google Places & Maps API for address verification)
5.0 Retention Schedule
Account records are maintained for the active account lifetime. Accounting and financial records are retained for ten (10) years in accordance with applicable tax statutory periods.
6.0 Data Subject Rights and Supervisory Authorities
Users maintain the right to access, rectify, erase, or restrict processing of their personal data, or to lodge a complaint with the competent supervisory authority: