Privacy Policy

ServedByAI ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and share your personal data when you use our marketplace platform at servedbyai.com (the "Platform").

We are based in Eindhoven, the Netherlands, and comply with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

ServedByAI is the data controller for the personal data processed through the Platform. If you have questions about how your data is handled, you can contact us at: support@servedbyai.com

We collect the following categories of personal data:

Account information: your name, email address, password (encrypted), country, and role (buyer or provider) when you register.

Profile information: for providers, this includes your professional headline, bio, skills, tools, languages, location (city and country), hourly rate, and portfolio items.

Service and task data: information you provide when creating service listings, posting tasks, or submitting proposals, including descriptions, pricing, and delivery terms.

Messages: the content of messages sent through the Platform's messaging system between buyers and providers.

Payment data: payment information is processed by Stripe, our third-party payment provider. We do not store your credit card details. We receive transaction confirmations and payout records from Stripe.

Usage data: we collect information about how you interact with the Platform, including pages visited, features used, and timestamps. This is collected through cookies and similar technologies.

Device information: your IP address, browser type, operating system, and device identifiers for security and analytics purposes.

We use your personal data for the following purposes:

To create and manage your account. To display your public profile and service listings to other users. To facilitate communication between buyers and providers. To process payments and payouts through Stripe. To send transactional emails (order confirmations, proposal notifications, password resets). To detect and prevent fraud, abuse, and violations of our Terms of Service. To improve the Platform through analytics and user feedback. To comply with legal obligations.

We process your personal data based on the following legal grounds under the GDPR:

Contract performance: processing necessary to provide our services to you, including account management, messaging, and payment processing.

Legitimate interests: processing for fraud prevention, platform security, analytics, and improving our services.

Consent: for optional marketing communications, which you can opt out of at any time.

Legal obligation: processing required to comply with applicable laws and regulations.

We share your data with the following third parties:

Stripe: for payment processing. Stripe's privacy policy governs their handling of your payment data.

Supabase: our database and authentication provider, which stores your account and platform data in secure EU-based data centers.

Netlify: our hosting provider, which serves the Platform.

Resend: our email service provider, used to send transactional emails.

We do not sell your personal data to third parties. We do not share your data with advertisers.

Certain information you provide is publicly visible on the Platform:

For providers: your display name (first name and last initial), headline, bio, skills, tools, languages, location, portfolio, service listings, and reviews received.

For buyers: your display name (first name and last initial) is visible to providers on tasks you post and on reviews you write.

Your email address, full last name, and other sensitive data are never displayed publicly.

We retain your personal data for as long as your account is active and for a reasonable period afterward to comply with legal obligations, resolve disputes, and enforce our agreements.

If you delete your account, we will remove your personal data within 30 days, except for data we are required to retain for legal or compliance purposes.

Messages and transaction records may be retained for up to 5 years after account deletion for legal and dispute resolution purposes.

Under the GDPR, you have the following rights regarding your personal data:

Right of access: you can request a copy of the personal data we hold about you.

Right to rectification: you can update or correct your personal data through your account settings or by contacting us.

Right to erasure: you can request deletion of your personal data, subject to legal retention requirements.

Right to restrict processing: you can request that we limit how we process your data in certain circumstances.

Right to data portability: you can request your data in a structured, commonly used format.

Right to object: you can object to processing based on legitimate interests.

Right to withdraw consent: where processing is based on consent, you can withdraw it at any time.

To exercise any of these rights, contact us at support@servedbyai.com. We will respond within 30 days.

We use essential cookies to keep you logged in and maintain your session. These cookies are necessary for the Platform to function and cannot be disabled.

We may use analytics cookies to understand how users interact with the Platform. You can manage cookie preferences through your browser settings.

We implement appropriate technical and organizational measures to protect your personal data, including encryption in transit (HTTPS/TLS), encrypted password storage, row-level security on our database, and regular security reviews.

While we take reasonable precautions, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security of your data.

Your data may be processed in countries outside the European Economic Area (EEA) by our service providers. When this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

The Platform is not intended for users under the age of 18. We do not knowingly collect personal data from children. If we become aware that a child under 18 has provided us with personal data, we will take steps to delete that data.

We may update this Privacy Policy from time to time. When we make material changes, we will notify registered users by email and update the "Last updated" date at the top of this page.

If you have questions or concerns about this Privacy Policy or how we handle your data, contact us at:

ServedByAI, Eindhoven, the Netherlands, Email: support@servedbyai.com

If you are not satisfied with our response, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.