Privacy Policy

Updated September 8, 2026

The data controller is SIA "Coffee Room" (Latvia, reg. No 40103835510, VAT No LV40103835510, address Marijas iela 1-17, Riga, LV-1050). This policy explains which personal data we collect, why, and for how long we keep it.

1. Data we collect

Account: e-mail, name, phone, city and district, language.

Profile and listings: everything you publish yourself — description, photo, hourly rate, skills, availability.

Verifications: photos of an identity document and a selfie, certificates — only if you submit them. They are never published.

Usage: messages, bookings, reviews, profile views, technical logs.

2. Why we use data

To provide the service (performance of a contract): account, search, messaging, bookings.

For safety and fraud prevention (legitimate interest): identity checks, cancellation records, handling reports.

For e-mail notifications (contract performance and legitimate interest). Marketing e-mails only with consent.

For payment processing (contract performance and legal obligations).

3. Who we share data with

Processors: Supabase (database and files, European Union, Frankfurt), Vercel (hosting), Stripe (payments), Resend (e-mail). Data processing agreements are in place with all of them.

Other users: your public profile or listing; your phone number opens to a chat partner only after you reply.

Authorities where required by law.

4. Retention

Account data is kept while the account is active and up to 1 year after deletion to the extent required for accounting and disputes.

Verification documents are deleted within 30 days after the decision; only the badge remains on the profile.

Messages and bookings are kept while the account is active.

5. Your rights

You have the right to access, rectify and erase your data, restrict processing, object, and port your data. To delete your account, write to the address shown in your account. The controller is established in Latvia, so complaints may be lodged with the Latvian Data State Inspectorate (Datu valsts inspekcija); a user living in Estonia may also turn to the Estonian Data Protection Inspectorate.

6. Cookies

We use only cookies necessary for the service (sign-in, language). Visit statistics are collected without cookies and without identifying you. If we add marketing cookies, we will ask for separate consent.