Privacy Policy
Effective date: July 2026 • Data Controller: Alberto Solazzo
1.0 Data Controller and Contact Details
The Data Controller responsible for personal data processing is Alberto Solazzo. For any inquiries concerning data privacy, account deletion, or exercising your rights under GDPR, contact our designated data protection officer at:
2.0 Categories of Processed Personal Data
Jobbab collects personal data required for platform intermediation and service fulfillment:
- Registration & Identification Data: Full name, email address, phone number, location, and authentication credentials.
- Service Request Specifications: Category selection, detailed job description, uploaded images, and request address.
- Professional & Financial Metadata: PostGIS service area geometry, Tax Code/VAT Number, Stripe Connect identifiers, and performance metrics.
- Technical Navigation Data: Essential technical session cookies, referral attribution tokens (jobbab_referral), anonymous usage statistics or, only with consent, a statistical browser identifier, and anonymous connection metadata.
3.0 Purposes of Processing and Legal Bases
| Processing Purpose | Legal Basis (GDPR) |
|---|---|
| Client-Worker intermediation and matching operations | Contractual Performance (Art. 6.1.b) |
| In-platform payments & statutory tax reporting (DAC7) | Legal Obligation (Art. 6.1.c) |
| Platform security, content moderation, and fraud prevention | Legitimate Interest (Art. 6.1.f) |
| Platform usage statistics to improve how it works | Legitimate Interest (Art. 6.1.f) for anonymous measurements; Consent (Art. 6.1.a) for the browser identifier |
4.0 Data Recipients and Third-Party Sub-Processors
Data is disclosed exclusively to designated sub-processors for technical and payment operations:
- Supabase Inc. (Database & Authentication infrastructure, EU region)
- Stripe Payments Europe Ltd. (Payment processing and Connect payout services)
- Resend Inc. (Transactional email notifications)
- Vercel Inc. (Cloud hosting infrastructure and cookieless analytics)
- Google Cloud Platform (Google Places & Maps API for address verification)
- PostHog Inc. (Platform usage statistics, servers in the European Union)
5.0 Retention Schedule
Account records are maintained for the active account lifetime. Accounting and financial records are retained for ten (10) years in accordance with applicable tax statutory periods.
6.0 Data Subject Rights and Supervisory Authorities
Users maintain the right to access, rectify, erase, or restrict processing of their personal data, or to lodge a complaint with the competent supervisory authority: