Privacy Policy

This policy applies to service-business users, technicians, property owners, public-report visitors and people who contact Oikivo or submit a service request.

Oikivo provides the platform. A service business may decide which customer and service data it enters, while Oikivo also processes account, security and operational data for its own service administration.

Legal review: Controller and processor allocation must be confirmed for each processing context.

We limit collection to information needed to operate, secure and support the product.

• Account and identity data, including names, email addresses, authentication method and account role.
• Contractor organization data, including business identity, team members, services and public-profile settings.
• Customer and service-contact data entered by a service business.
• Service-report data, including outcome, work performed, materials, warranty and next-service recommendations.
• Photos and evidence attached to service reports or property events.
• Documented job value. Documented job value is not displayed publicly by default.
• Owner property data, including property identity, rooms, warranties and saved service history.
• Owner-created events and their optional photos or recorded costs.
• Reviews linked to a documented service interaction.
• Service requests and the contact details intentionally submitted with them.
• Authentication and security data, including session, CSRF, audit and abuse-prevention records.
• Technical and usage data, including request IDs, device/browser details and product events.
• Transactional communication data needed to send sign-in, reset, invitation and service messages.

We use data to provide accounts, authenticate users, document and share service work, preserve property history, route requested follow-up, deliver transactional messages, secure the service and meet legal obligations.

Legal review: Contract, legitimate-interest, consent and legal-obligation bases must be mapped and approved by counsel.

Data comes from account holders, their organization administrators, service businesses documenting work, property owners, public-report visitors, Google authentication where selected, and technical operation of the service.

Authorized members of the relevant service business or owner account receive data according to their role. Infrastructure, private-object-storage, email, monitoring and support providers may process limited data under appropriate terms.

Published contractor profiles, consented reviews and information intentionally included in shared report links may be visible to recipients or the public. Shared links should be treated as sensitive. Oikivo does not certify workmanship or professional quality.

Some providers may process data outside the country where a user is located.

Legal review: Provider locations, transfer mechanisms and supplementary safeguards must be confirmed.

We keep data only for an approved operational, contractual, security or legal purpose. Account, report, audit, message and backup periods may differ.

Legal review: The retention schedule and deletion exceptions must be approved before production publication.

Depending on applicable law, people may request access, correction, deletion, restriction or portability, and may object to certain processing or withdraw consent where consent applies. Identity and authority may need verification.

When a service business entered the relevant customer or job information, Oikivo may need to direct the request to that business or coordinate with it.

Oikivo uses server-side revocable sessions, HttpOnly production cookies, CSRF and origin controls, private file authorization, request IDs and restricted operational diagnostics. No system can guarantee absolute security.

Essential session and CSRF cookies support secure account access. Locale storage preserves language choice. Google may use its own technologies only when Google sign-in is selected. See the Cookie Policy for details.

Oikivo is a business and property-record service and is not directed to children.

We may update this policy as the pilot, providers or legal obligations change. Material changes will be identified through an updated publication or other appropriate notice.

Use the configured privacy contact on this page. You may also have the right to complain to the competent data-protection authority.

Legal review: The competent authority and required complaint wording must be configured for the approved jurisdiction.