Privacy Policy (POPIA)

Cirvo is the “responsible party” for personal information processed on the Platform (unless stated otherwise).

Depending on how you use the Platform, we may collect:

• Account information: email, phone number, password (stored securely by our authentication provider), and profile details.
• Provider information: business name, category selection, service areas, optional verification details, and portfolio images if enabled.
• Client job information: job descriptions, location/suburb, images, budgets, and messages.
• Platform activity: quotes submitted, lead purchases, job status changes, dispute reports.
• Device and usage data: IP address, device identifiers, log data, analytics (where enabled).
• Payment-related metadata: wallet top-ups, transaction references, timestamps (we do not store full bank card details when handled by processors).

• To create and manage accounts and profiles.
• To operate the marketplace: job posts, quotes, direct quotes, messaging, and notifications.
• To process wallet credits/top-ups and lead purchases.
• To prevent fraud, spam, abuse, and unsafe behavior.
• To improve Platform performance, features, and reliability.
• To communicate service messages (verification, security notices, updates).
• To comply with legal obligations and respond to lawful requests.

We process personal information where it is necessary to perform our contract with you (operating the Platform), to pursue legitimate interests (fraud prevention, safety), to comply with legal obligations, and/or with your consent where required (for example, marketing communications where applicable).

We share information only when needed to run the marketplace:

• Between clients and providers: to enable quotes, messaging, contact flow (where unlocked), and job fulfilment.
• With vendors/processors: hosting, analytics (if enabled), messaging/email services, and payment processors.
• For compliance and safety: where required by law or to protect users and the Platform.

We do not sell personal information to advertisers.

Some service providers (cloud hosting, email delivery, analytics) may process data outside South Africa. Where this happens, we take reasonable steps to ensure appropriate safeguards consistent with POPIA requirements.

We use reasonable technical and organisational measures designed to protect personal information from loss, misuse, unauthorised access, disclosure, alteration, and destruction. No system is perfectly secure, so you use the Platform at your own risk.

We keep personal information only for as long as necessary for the purposes described in this Policy, including: operating the Platform, dispute handling, fraud prevention, legal compliance, and record keeping.

You may request:

• Access to your personal information we hold.
• Correction of inaccurate, incomplete, or outdated information.
• Deletion of information (where we are not required to retain it for legal or legitimate purposes).
• Objection to processing in certain circumstances.
• Restriction of processing where applicable.
• Unsubscribe from marketing communications (where used).

To exercise rights, contact info@cirvo.co.za. We may need to verify your identity before fulfilling requests. To request account deletion, use Delete account and data.

The Platform may use cookies/local storage and similar technologies for login sessions, security, preferences, and performance. Where analytics is enabled, it may collect usage metrics to help improve the Platform.

You can manage cookies via your browser settings. Blocking some cookies may affect functionality.

We may send service/transactional messages (required to operate your account). Marketing messages (if any) will include an unsubscribe method.

The Platform is intended for users who can lawfully enter contracts. If you believe a minor has provided personal information without appropriate permission, contact info@cirvo.co.za so we can review and take appropriate steps.

If you have a complaint about how we process personal information, contact info@cirvo.co.za first so we can try to resolve it. You may also have the right to lodge a complaint with the Information Regulator (South Africa), depending on the issue.

We may update this Policy from time to time. The updated version becomes effective when posted, unless a later date is stated.