Privacy Policy

1. Introduction

SERVPLZ is a service directory platform that connects users with local service providers for government documents, banking, tax filing, travel bookings, appliance repair, tuition, and other services. Users can browse the directory, register as service providers, suggest new services, and leave reviews. This Privacy Policy explains what personal information we collect, how we use it, how we protect it, and your rights regarding your data.

2. Information We Collect

We collect only the information you voluntarily provide or that is necessary for SERVPLZ to function. The categories of personal information we collect include:

2.1 Information You Provide Directly

• Account/Profile Information: Name, email address, phone number (when you register, sign in, or submit forms).
• Business/Service Listing Information: Business name, contact person, address, phone, description, latitude/longitude, and services offered (when you register as a provider).
• Service Suggestions: Service name, category, description, and your role (user or service provider) when you suggest a new service.
• Reviews: Rating (1–5 stars) and comment text when you write a review.
• Support Communications: Any information you include when you contact us via email or the contact form.

2.2 Information Collected Automatically

• Device and Browser Information: Browser type, operating system, device type, and IP address (collected through standard web server logs).
• Usage Information: Pages visited, time spent, clicks, search queries, and interaction with the directory (collected via standard web analytics).
• Location Data: Approximate location derived from IP address or explicit geolocation consent if you use the “Sort by nearest” feature.

2.3 Information from Third-Party Login

SERVPLZ supports Google Sign-In as an authentication method. When you sign in with Google, we receive only the following information from Google:

• Your name (as provided to Google)
• Your email address (as provided to Google)
• Google account identifier (unique, stable ID)

We do not receive or store your Google password, OAuth tokens beyond the session, or any other private Google data. You may also register and sign in using email/password if Google Sign-In is not preferred (where applicable).

2.4 Cookies and Similar Technologies

SERVPLZ uses the following technologies:

• Session Cookies / Local Storage: To maintain your authenticated session and remember your theme preference (light/dark mode).
• Analytics: We may use standard web analytics (e.g., Google Analytics) to understand usage patterns and improve the directory. This collects anonymized usage data such as page views, session duration, and referrer information.
• No Advertising Cookies: SERVPLZ does not serve personalized advertising and does not use third-party advertising cookies.

You can disable cookies in your browser settings, though this may affect your ability to stay signed in or use certain features.

3. How We Use Information

We use the information we collect for the following purposes:

• Creating and managing your account
• Providing the SERVPLZ service directory and its features
• Connecting users with service providers based on location, category, and search
• Managing service provider listings, reviews, and service suggestions
• Communicating with you about your account, submissions, reviews, or support requests
• Responding to your inquiries and support requests
• Improving the website, features, and user experience
• Security, fraud prevention, and abuse detection
• Maintaining and operating the service reliably
• Complying with applicable legal obligations

4. How We Share Information

We do not sell your personal information. We share information only in the following circumstances:

• With Service Providers: When you request a service, we connect you with the relevant provider (sharing your name, contact info, and request details as necessary to fulfill the request).
• With Service Providers Supporting Our Infrastructure: Hosting (Hostinger), database (Supabase), authentication (Google OAuth), map tiles (OpenStreetMap/Leaflet), analytics providers, and email delivery — only to the extent necessary to operate SERVPLZ.
• Authentication Providers: Google receives authentication data when you choose to sign in with Google (subject to Google’s Privacy Policy).
• Legal and Security: When required by law, court order, or governmental request; to protect the security, rights, or property of SERVPLZ, our users, or the public; or to prevent fraud and abuse.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, user information may be transferred as part of the business.

We do not sell your personal information to third parties for advertising or marketing purposes.

5. Third-Party Services

SERVPLZ integrates with the following third-party services:

• Supabase (PostgreSQL + Auth): Database, authentication, and storage backend. Subject to Supabase’s Privacy Policy.
• Google OAuth: Google Sign-In authentication. Subject to Google’s Privacy Policy.
• OpenStreetMap / Leaflet: Map tiles and geolocation. No personal data is sent to OpenStreetMap beyond standard tile requests (IP address, user agent).
• Hostinger (hCDN): Hosting and CDN. Subject to Hostinger’s Privacy Policy.
• Google Analytics (optional): If enabled, collects anonymized usage data. Subject to Google’s Privacy Policy. You may opt out via browser settings or the Google Analytics Opt-out Browser Add-on.
• Resend (Email): Transactional email for admin notifications (if configured). Subject to Resend’s Privacy Policy.

We do not integrate with Facebook/Meta Login. If Facebook Login is added in the future, this policy will be updated to reflect the data received through that integration.

6. Data Security

We implement reasonable technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• HTTPS/TLS encryption for all data in transit
• Row Level Security (RLS) policies in Supabase to restrict data access at the database level
• Secure authentication via Google OAuth and Supabase Auth
• Admin-only access to administrative functions and pending queues
• Regular security updates and dependency monitoring

No method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee absolute security.

7. Data Retention

We retain your personal information only as long as necessary for the purposes described in this policy, unless a longer retention period is required or permitted by law. Specifically:

• Account and profile data: Retained while your account is active, and for a reasonable period after account deletion for legal, security, and fraud-prevention purposes.
• Service listings and reviews: Retained while published, and archived after removal for audit and dispute-resolution purposes.
• Server logs and analytics data: Retained for up to 12 months, then aggregated or deleted.
• Support communications: Retained for the period necessary to resolve the inquiry and for legal compliance.

We do not define fixed retention periods for all data categories; retention is determined by the purpose for which the data was collected, applicable legal requirements, and legitimate business needs.

8. Account and Data Deletion

You have the right to request deletion of your SERVPLZ account and associated personal data. To submit a deletion request:

• Visit our dedicated Data Deletion page, or
• Email us at support@servplz.co.in

Please include your registered name, email address, phone number (if applicable), and a clear statement that you want your SERVPLZ account and data deleted. For your security, we may verify that the request was made by the account owner before processing. We will never ask for passwords, OTPs, or other authentication secrets through email.

Please note that certain information may be retained where required or permitted by applicable law, for security and fraud prevention, to resolve disputes, maintain required business records, or comply with other legitimate obligations. We will notify you when your request has been processed.

9. User Rights and Choices

Depending on your jurisdiction, you may have certain rights regarding your personal information. You may contact us at support@servplz.co.in to:

• Request access to the personal information we hold about you
• Request correction of inaccurate or incomplete information
• Request deletion of your personal data (see Section 8)
• Ask questions about our privacy practices

We will respond to your request within a reasonable timeframe, consistent with applicable law. We may need to verify your identity before fulfilling certain requests.

10. Children's Privacy

SERVPLZ is not directed at children under 13 years of age (or the applicable age in your jurisdiction). We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child without parental consent, we will take steps to delete that information. If you believe a child has provided us with personal information, please contact us at support@servplz.co.in.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or business operations. When we make material changes, we will update the Last Updated date at the top of this page and, where appropriate, provide a notice on the website.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us:

• Business: SERVPLZ
• Website: https://servplz.co.in
• Privacy Email: support@servplz.co.in