Privacy Policy

1. Scope of this policy

This Privacy Policy applies to the FiledFix platform, which is operated from Austria and serves clients and independent field workers (plumbers, electricians, handymen, transport providers and similar professionals) within Austria and the European Union. It explains how we collect, use, store, share and delete your personal data when you use our website, mobile application and related services.

2. Data controller

The data controller for FiledFix is the FiledFix operating company, based in Austria. For privacy requests, to exercise your rights, or to request deletion of your data, please contact:

privacy@filedfix.app

3. Compliance with Austrian and EU law

This Privacy Policy and our data processing practices are designed to comply with Regulation (EU) 2016/679 (the General Data Protection Regulation, “GDPR”), the Austrian Data Protection Act (Datenschutzgesetz – DSG), and all other applicable Austrian and EU data protection, consumer and e-commerce laws. Core data processing is carried out within the European Economic Area (EEA), primarily in Austria.

If you believe your data protection rights have not been respected, you have the right to lodge a complaint with the Austrian Data Protection Authority (Datenschutzbehörde) or with the supervisory authority of the EU member state where you live or work.

4. Personal data we collect

We collect only the personal data necessary to provide and improve the FiledFix service:

• Account data: full name, email address, phone number and password, which are processed by our authentication service provider.
• Profile data: profile picture or company logo, profession/category, skills, custom skills, bio, work city/address and service radius.
• Location data: address, city, postal code, GPS coordinates you provide or share for navigation, and approximate device location used for distance calculations and matching.
• Job data: job titles, descriptions, photos, status updates, messages, ratings, completion confirmations and related records.
• Payment data: commission records, payment status and transaction references. We do not store full card numbers, CVV codes or bank account details on our servers.
• Usage data: device type, browser, IP address, language preference, and essential cookies/session information.

5. Location data for emergency repairs in Austria

Because FiledFix is used to arrange urgent, on-site emergency repairs and services in Austria, we must process the client’s exact address, city and, where the user chooses to share it, real-time GPS coordinates. This is necessary to:

• show the job to nearby, available workers in the relevant service area;
• let workers calculate travel distance and estimated arrival time;
• provide navigation (for example, via Google Maps) from the worker’s current location to the client’s address; and
• verify that the job falls within the worker’s registered work radius.

Location data is processed on the basis of performance of the contract (to dispatch the requested service) and, where applicable, your explicit consent when you choose to share real-time GPS position. Users can update or remove their stored address at any time in their profile settings.

6. Legal basis for processing

We process your personal data on one of the following legal bases under the GDPR:

• Performance of a contract — to create your account, match you with jobs or workers, coordinate the service and process commission payments.
• Consent — where you explicitly agree, for example to share your precise location or to receive notifications.
• Legitimate interest — to prevent fraud, ensure platform security, enforce our terms and improve our service.
• Legal obligation — to comply with tax, accounting, regulatory or court requirements in Austria and the EU.

7. How we use your data

We use your data to operate, secure and improve the platform, specifically to: display job requests to nearby workers, enable direct contact between clients and workers, track job status from posting to completion, process the €3 platform commission, send service notifications and payment reminders, handle disputes and complaints, and meet our legal obligations.

8. Secure payment handling with Stripe

All platform commission payments are processed by Stripe, a PCI-DSS Level 1 certified payment service provider. When a worker pays a €3 commission, Stripe collects payment information directly on behalf of FiledFix. FiledFix does not store full card numbers, CVV codes, bank account credentials or other sensitive payment details on our own servers.

We only store the payment status, amount, transaction reference, timestamp and related commission debt information needed to manage the worker’s account and to enforce the platform’s post-job commission model. Stripe processes payment data in accordance with its own Privacy Policy, available at stripe.com/privacy.

9. Job completion tracking and commissions

To operate the commission model, we record every stage of a job: posted, accepted, started, completion requested, completed, and rated. When a job is confirmed as completed, we create a €3 commission record for the worker. If the commission is not paid within 24 hours, we temporarily restrict the worker’s ability to accept new jobs until the debt is settled. This processing is necessary to enforce our platform terms and prevent abuse.

10. Who we share data with

We only share your data when necessary to provide the service or to meet legal obligations:

• Between clients and workers: when a worker accepts a job, the client and worker can see each other’s name, phone number and address to coordinate the emergency repair or service.
• Payment processors: Stripe receives payment data required to process the €3 commission.
• Service providers: hosting, authentication, geocoding/mapping, translation and notification services that help run the platform under appropriate data processing agreements.
• Authorities: when required by Austrian or EU law, court order, or to protect our rights, users’ safety and platform integrity.

11. International transfers

Core data processing is carried out in Austria and the EEA. Some of our service providers (including Stripe) may process data outside the EEA. Where this happens, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses, Binding Corporate Rules, or processing in countries with an EU adequacy decision.

12. Cookies and tracking

We use only essential cookies and similar technologies to keep you signed in, remember your language preference, and to ensure the platform works securely. We do not use third-party advertising or behavioural tracking cookies.

13. Data retention

We keep your personal data for as long as your account is active, and for a reasonable period afterwards to resolve disputes, enforce our terms, and meet legal obligations (for example Austrian tax and accounting records). Job history and payment records may be kept for the legally required period even after account deletion, provided this is permitted by GDPR and the Austrian DSG.

14. Your rights under GDPR and Austrian law

You have the following rights regarding your personal data:

• Right of access — request a copy of the data we hold about you.
• Right to rectification — ask us to correct inaccurate or incomplete data.
• Right to erasure (“right to be forgotten”) — request deletion of your data, subject to legal retention obligations.
• Right to data portability — receive your data in a structured, commonly used, machine-readable format.
• Right to restrict processing — ask us to limit how we use your data in certain circumstances.
• Right to object — object to processing based on legitimate interests, including direct marketing.
• Right to withdraw consent — where processing is based on consent, you can withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

You may exercise these rights by contacting us at privacy@filedfix.app. We will respond within one month, in accordance with the GDPR.

15. How to request data deletion

To delete your account and personal data, send a request from your registered email address to privacy@filedfix.app. We will confirm receipt and, unless Austrian or EU law requires us to keep certain records, complete deletion within 30 days. We may need to retain anonymised job and payment records for tax and accounting purposes.

16. Security

We protect your data using encryption in transit (TLS), access controls, secure authentication, regular security reviews and written data processing agreements with our subprocessors. Payment information is handled by Stripe under PCI-DSS standards. No system is 100% secure, so we encourage you to use a strong password and keep your login details confidential.

17. Contact us

For any privacy-related questions, to exercise your rights, or to request deletion, please contact us at: privacy@filedfix.app.

18. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our service, the law or regulatory guidance. The current version will always be posted on this page with the “Last updated” date. We encourage you to review the policy periodically.