1. Who we are (Data Controller)
Esfrega ("we") is an online platform that allows visitors and users to find cleaning professionals and reveal their contact details for direct contact.
Contact for privacy inquiries: privacy@esfrega.com
2. Our role: intermediary platform
Esfrega acts as a contact intermediary between visitors/users and cleaning professionals (independent contractors).
As a rule, Esfrega does not collect or store messages exchanged between users and professionals. Contact is facilitated through the reveal contact feature upon active user action.
Esfrega does not provide cleaning services and does not control the execution, quality, final prices, availability, conduct, safety, legal compliance, or contractual fulfillment of services provided by professionals.
Any agreement regarding the service is established directly between the user and the professional.
3. What data we collect
3.1. Account data
- Email (for authentication and essential communications).
- Language/locale preference (for experience personalization).
3.2. Professional profile data
Depending on the features used, professionals may provide and/or update data such as name, phone, postal code, city/country, and (when applicable) approximate coordinates derived from the postal code for search/map purposes, services offered, availability, hourly rate, years of experience, and profile photo.
Some of this data may be displayed publicly on the professional's profile. Contact details are revealed upon active user action ("reveal contact").
3.3. Usage and metrics data
We may collect technical and usage data (e.g., profile views and contact reveal clicks) for metrics and service improvement purposes. For unique visitor counting, a pseudonymous identifier generated in the browser may be used.
3.4. Payment and subscription data
If you subscribe to paid features, payments are processed by third parties (Stripe). Esfrega maintains technical subscription records (e.g., IDs and status) for plan access management.
4. Purposes and legal basis
- Account management and authentication: contract performance/pre-contractual measures.
- Professional profile management: contract performance and/or legitimate interest in operating the platform.
- Contact reveal and abuse prevention: contract performance/legitimate interest; anti-bot verification (Google reCAPTCHA v3) may be used.
- Metrics and product improvement: legitimate interest, with data minimization.
- Payments and subscription management: contract performance and, when applicable, legal obligation compliance.
5. With whom we share data
We may share data with subcontractors necessary for platform operation, such as:
- Supabase (authentication and database).
- Vercel (hosting/infrastructure).
- Resend (email sending).
- Stripe (payments and subscription management).
- Google reCAPTCHA (abuse and fraud prevention).
Esfrega does not sell personal data. When a user reveals contact details, they can directly contact the professional outside the platform.
6. Retention periods
- Account and profile: while the account is active and for the time necessary to manage the relationship with the user/professional.
- Granular metrics: limited retention (e.g., technical events with 90-day retention).
- Subscriptions and billing: for the period necessary for subscription management and legal obligations when applicable.
7. Data subject rights
Under GDPR, you may exercise rights of access, rectification, erasure, restriction, objection, and portability, as applicable.
To exercise rights, contact privacy@esfrega.com. You may also file a complaint with the CNPD.
8. Security
We implement reasonable technical and organizational measures to protect personal data. However, no system is 100% secure and we cannot guarantee absolute security.
10. International transfers
Some of our providers may process data outside the European Economic Area. When applicable, we seek to ensure adequate safeguards (e.g., standard contractual clauses) and appropriate additional measures.
11. Account deletion
You may request account deletion. As a rule, upon account deletion, associated data will no longer be available, without prejudice to necessary retention for legal obligations (e.g., billing data when applicable).
12. Limitation of liability (professional services)
Esfrega facilitates contact but is not party to cleaning service contracts, nor guarantees quality, safety, results, licenses, insurance, or professional behavior. Issues and disputes related to services should be handled directly between user and professional, without prejudice to applicable legal rights.
13. Changes to this Policy
We may update this Policy to reflect legal, technical, or operational changes. We will publish the updated version on this page.
This document is informational and does not substitute professional legal advice.