Privacy Policy

Sosuisse is a marketplace that connects people looking for home and local services (“customers”) with independent service providers (“providers”) in Switzerland. For the purposes of the EU General Data Protection Regulation (GDPR) and the Swiss Federal Act on Data Protection (FADP), the controller responsible for your personal data is Sosuisse, Switzerland.

You can contact us about privacy matters at privacy@sosuisse.com. If you need our registered postal address for a legal request, contact us at the same address and we will provide it.

This policy covers the Service and the data we process through it. It does not cover third-party websites or services that we link to; those services have their own privacy policies.

The Service is not intended for children under 16. We do not knowingly collect personal data from children. If you believe that a child has provided us with personal data, contact us and we will delete it.

Depending on how you use the Service, we collect the following categories:

• Account and profile data: your name, email address, phone number (optional), password (stored only as a secure hash), account type (customer or provider), preferred language, profile photo (optional), email-verification status, last login, notification preferences and account status.
• Provider profile and verification data: company name, description, the services you offer, service areas or cantons, spoken languages, hourly rate, and the documents you submit for verification (for example an identity document, trade licence or insurance certificate) with the resulting verification status. Verification documents are used for identity, safety and legal checks and are not shown to customers.
• Marketplace content: job posts (title, description, category, address or location, photos, schedule and budget), offers (price, message and offered languages), messages and attachments, reviews, ratings and replies.
• Payment and transaction data: payment status, amount, currency and payment-provider identifiers. Payments are processed by Stripe; we do not store full payment-card numbers.

• Technical and security data: IP address, device and browser type, operating system, app version, language, timestamps, request and error logs, and session or cookie identifiers.
• Notifications: a push token or device identifier if you enable push notifications, plus the notifications shown in your in-app inbox.
• Photos and camera: photos you choose to attach to a job or profile. We access your camera or photo library only when you choose to take or select a photo; we do not access them in the background.
• Location: the job address or location you enter. We do not collect continuous or background device GPS location.
• Communications with us: messages you send to support or privacy contacts and the records needed to answer them.

We do not collect your contacts, SMS messages, call logs, health data or advertising identifiers, and we do not use your data for advertising.

• Providing the Service: creating and managing accounts, provider profiles, job posts, offers, chat, reviews and notifications (performance of a contract).
• Verification and trust: reviewing provider verification documents, preventing fraud and keeping the marketplace safe (contract, legitimate interests and legal obligations).
• Payments: processing and reconciling payments and complying with tax and accounting obligations (contract and legal obligation).
• Communication: sending transactional emails (for example email verification, password resets and account notices) and, if you opt in, push notifications (contract, consent or legitimate interests). You can turn push notifications off in your device settings.
• Safety and moderation: investigating reports, enforcing our terms and preventing misuse (legitimate interests and legal obligations).
• Support: answering your questions and resolving problems (contract and legitimate interests).
• Operating and securing the Service: debugging, monitoring availability, preventing abuse and maintaining backups (legitimate interests).
• Legal compliance: responding to lawful requests and establishing, exercising or defending legal claims (legal obligation and legitimate interests).

We do not use your personal data for automated decision-making that produces legal or similarly significant effects. Provider verification involves human review. We do not send marketing emails unless you have opted in, and you can withdraw that consent at any time.

• With other users of the Service: customers and providers see the information needed to run a job — for example a provider’s public profile, the job details, offers, messages and reviews. Reviews and provider profiles may be visible to other signed-in users. We do not share your password, payment-card details or private verification documents with other users.
• With service providers and processors: hosting, database, cache and object-storage providers; our email provider (Resend); our push notification provider (Expo); our payment processor (Stripe); and IT, security and support providers. They process data on our instructions and under appropriate contractual safeguards.
• For legal reasons: courts, regulators, law-enforcement authorities or other parties when required by law or necessary to protect rights, safety or the integrity of the Service.
• Business transfers: a buyer or successor in connection with a merger, acquisition, financing or sale of assets, subject to this policy.

We do not sell personal data and we do not share it with advertising networks or data brokers.

We are based in Switzerland. Some of our service providers process data in Switzerland, the European Economic Area (EEA) or the United States. Where data is transferred outside Switzerland or the EEA, we use appropriate safeguards required by applicable law, such as standard contractual clauses and contractual, organizational and technical measures.

• Account and profile data: while your account is active. When you request deletion, deletion is scheduled after a 30-day grace period; signing in during that period cancels it.
• Jobs, offers, messages and reviews: while your account is active and as needed to provide the Service, resolve disputes and enforce agreements. After account deletion they are deleted or anonymized, unless retention is required by law.
• Verification records: for as long as needed to verify the provider, prevent fraud and meet legal or regulatory obligations.
• Payment and tax records: for as long as required by applicable accounting and tax law, which can be up to 10 years in Switzerland.
• Technical and security logs: for a short period, normally up to 90 days, unless a longer period is needed for security investigations.
• Data-export archives: for 7 days after they are generated; download links then expire.
• Support requests: as long as needed to resolve the request and maintain a record of the interaction.

Backups may contain copies for a limited period. We may retain data where required by law, to resolve disputes, to prevent fraud or to enforce our agreements.

We use technical and organizational measures designed to protect personal data, including encrypted connections (HTTPS/WSS), bcrypt password hashing, HTTP-only session cookies, access controls, least-privilege access, monitoring and backups. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If you become aware of a security issue, contact us at privacy@sosuisse.com.

Depending on your location and applicable law, you may have the right to access your personal data, correct inaccurate data, delete it, restrict or object to processing, receive a portable copy, and withdraw consent at any time. Withdrawing consent does not affect processing that happened before the withdrawal.

You can exercise these rights in the app under Profile → Privacy and my data: request a JSON export of your data (available for 7 days) or schedule account deletion (confirmed after a 30-day grace period). You can also email privacy@sosuisse.com; we may ask you to verify your identity before acting on a request.

If you are in Switzerland, you can lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC), Feldeggweg 1, 3003 Bern, Switzerland, edoeb.admin.ch. If you are in the EEA, you can contact your local data-protection authority.

California residents: we do not sell personal information or share it for cross-context behavioral advertising. You may request access or deletion as described above.

The website uses only the cookies needed to operate the Service: sosuisse_token and sosuisse_refresh for the session (HTTP-only), sosuisse_audience to remember whether you are using the customer or provider side, and sosuisse_lang to remember your language. We do not use advertising or analytics cookies and we do not embed third-party tracking pixels.

The mobile apps store the session token in the device's secure storage and keep your language, audience and notification preferences on the device. If you enable push notifications, we store the push token needed to deliver them. You can clear cookies or app data at any time, but you may then need to sign in again.

We may update this policy to reflect changes to the Service or the law. The “Last updated” date at the top shows the current version. If a change is material, we will notify you in the app or by email before it takes effect. Continued use of the Service after the effective date means you accept the updated policy.

For questions, requests or complaints about privacy, contact:

Sosuisse
Switzerland
Email: privacy@sosuisse.com

This policy is provided in English. If you need help understanding it in German, French or Italian, contact us at the email above and we will assist you.