Who is responsible
Telio Ltd (Телио ООД), company number 206677744, Burgas, Slaveykov district, block 161, entrance A, Bulgaria, is the controller of the personal data described here. Contact office@spotlessgig.com for privacy questions and requests.
Information you provide
We process your name, email address, phone number, selected city and its place identifier, account credentials, and verification information. Marketplace features process property details and addresses, cleaning requests, descriptions, photos you choose to upload, offers and decisions. Avoid uploading access codes, identity documents, or information about other people that is not needed for the service.
Activity, devices and local storage
We process card preferences, delivery and completion history, activity statistics, selected time and timezone, device installation identifiers, push registration tokens and notification language. Security information can include IP addresses, session dates and device/browser metadata. The phone stores your display-language preference and protected session material. The app does not require GPS access for city selection; you choose a city.
Why we process data and our legal bases
We use account, property, request and card data to provide the services you request and perform our contract with you (GDPR Article 6(1)(b)). Preventing fraud and unauthorized access, maintaining service reliability and handling support are our legitimate interests (Article 6(1)(f)); we balance these against your rights. We process data to meet applicable legal duties where required (Article 6(1)(c)). Optional promotional communications require separate consent (Article 6(1)(a)); device notification permission is not marketing consent.
Who receives information
Authorized personnel and service providers receive data needed for their functions: Hetzner for server hosting, Google Firebase Cloud Messaging for push delivery, Brevo for account email, and the configured storage and location providers for uploads and city lookup. Our first-party mobile service exchanges linked account and marketplace information with the SpotlessGiG marketplace service. Cleaner-facing request details and information needed for agreed work are disclosed through the marketplace workflow. Cleaners handle information they receive for their own service responsibilities. We do not sell personal data.
Notifications and provider processing
Google processes installation identifiers, notification tokens, message-routing information and technical service data for Firebase delivery. You can refuse notification permission or turn it off in device settings. Permission withdrawal stops displayed notifications but does not delete your account. This app does not include the Google Analytics SDK or advertising SDKs. Provider services can process technical information under their own applicable terms.
International processing
Our backend is hosted with Hetzner. Some providers, including Google, operate internationally and may process information outside the European Economic Area. Where a restricted transfer occurs, we use an applicable adequacy decision or appropriate safeguards, such as European Commission standard contractual clauses. Contact us for information about the safeguards relevant to your data.
How long we keep data
We keep account and service records while needed to provide your account and requested features. After a verified deletion request, we remove associated personal data from live services without undue delay, including linked marketplace data and uploaded content within our control. Restricted disaster-recovery backups are created weekly and expire no later than 30 days after creation. Deletions are reapplied before a restored system returns to service. Minimal request-verification or legal records are retained only when needed to handle the request, meet a specific legal duty or resolve a claim; we explain any applicable exception when responding.
Security and your choices
We use HTTPS, access controls, password hashing and protected device storage. No system can guarantee absolute security. Required account information is needed for registration and service access; optional photos and notifications are your choice. We do not use the app to make solely automated decisions with legal or similarly significant effects.
Your rights and requests
Subject to applicable law, you may request access, correction, erasure, restriction, portability, or object to processing based on legitimate interests. You can withdraw consent without affecting earlier lawful processing. Email office@spotlessgig.com; we may verify your identity using proportionate information and will not ask for your password by email. We respond within the GDPR time limits, normally one month; if a permitted extension is needed, we explain it within that first month. You may complain to Bulgaria’s Commission for Personal Data Protection or your competent supervisory authority.
Deletion and policy changes
You can delete your account in Profile → Delete account, or request deletion by email without installing the app. The linked account and its service records may also become unavailable in the marketplace. The deletion page explains the process and backup period. We update this policy when practices change and communicate material changes through appropriate service channels.
How to complain to Bulgaria’s Commission for Personal Data Protection
Telio Ltd (Телио ООД) · Company number (ЕИК): 206677744Burgas, Slaveykov district, block 161, entrance A, Bulgaria
office@spotlessgig.com