Privacy notice

Who processes your data

Helper DOO, Beograd, Serbia.

Use the contact below for privacy questions and rights requests. The controller determines the purposes and means of processing needed for this service.

Data used by the service

Registration and sign-in use your email address, authentication details, name, account type and technical sign-in/session data. Google sign-in also uses the identity and profile Google supplies under the authorized sign-in. Do not send passwords or sign-in codes to support.

A profile may include phone, location, services, price/currency, description, experience, service areas and availability. A listing includes title, description, location, category, stated budget/currency, owner, status and timestamps. You manage optional fields through profile and listing editing.

A support request includes category, message, optional name and listing/profile context. Email is requested when you want a reply. Private records support durable intake and abuse prevention, including pseudonymous rate-limit identifiers. The request is stored before a support notification is attempted; storage does not prove delivery or review.

Why we process data

Account, profile and listing data provide the functions you request: sign-in, editing/publication, discovery and direct contact. Processing necessary for those functions is based on performance of the relationship with the user and steps taken at their request. Account protection, abuse prevention, reliability and ordinary support use the necessary data on the basis of legitimate interests, with limits on scope and access. Statutory data requests are handled under the applicable legal obligation. Anonymous usage statistics rely on our legitimate interest in understanding how the service is used and where it needs fixing; they are on by default and you can switch them off at any time.

An account cannot be created or used without required authentication data. Publishing an open listing and marking a helper as accepting enquiries require a usable phone number. Public pages can be browsed without an account. Anonymous statistics are not required to use the service; if you switch them off, the service works the same.

What other people can see

Your name, account type, location and supplied services, price and currency may be public. A helper profile may show a short description, experience, service areas and availability for new enquiries. Open listings show the title, description, location, category, stated budget and public information about the homeowner.

Visitors who are not signed in cannot access the dedicated profile phone field. Signed-in users can access that number. Signing in does not verify a person’s identity or reliability. Your account email and password are not public profile fields.

Contact details or an exact address you enter in a public name, description or listing can also become public. Do not enter passwords, sign-in codes, identity documents or unnecessary information about other people there.

Providers and recipients

Supabase provides authentication and the database; the current project region is eu-central-1 in Frankfurt, Germany (EU). Vercel hosts the website and the app at helper.rs and, through Vercel Web Analytics, counts aggregate visits to selected pages; Cloudflare provides DNS. Google participates if you choose its sign-in. Fonts are delivered from helper.rs.

Cloudflare Turnstile processes technical signals, including IP address and browser information, to protect the form. Cloudflare acts as a processor to provide that protection and as a separate controller to improve its bot detection, as explained in its privacy addendum. Resend support notifications send request content and the requested reply address to the Zoho support@helper.rs mailbox. Open and click tracking on that Resend domain are disabled. These messages are not public.

Data is also processed outside Serbia. The Supabase project’s database and authentication are hosted in the EU (Frankfurt, Germany). Resend stores data in the United States even when messages are sent through its eu-west-1 region. Vercel and Cloudflare may process technical data through their international infrastructure. Providers publish data-processing agreements and international-transfer provisions, including standard contractual clauses where applicable. Their scope and application depend on the service, data and applicable law; using a provider does not mean all data stays in the EU. Contact support@helper.rs for information about recipients and safeguards for a particular transfer.

Anonymous usage statistics

We count anonymous usage statistics. They are on by default, with no consent prompt, and you switch them off in the line “Anonymous statistics: on · Turn off” at the bottom of the page. The choice applies to helper.rs and app.helper.rs. While statistics are on, they write no cookie, localStorage or sessionStorage entry to your device. If you turn them off, your browser stores only a cookie named helper_measurement with the value v1.no, for up to 180 days, so that the choice is respected; turning statistics back on deletes it. Nothing is counted either when your browser sends a Global Privacy Control or Do Not Track signal. If your browser cannot save the choice, the line says so, and statistics are off while the page stays open.

We count daily aggregate events such as opening a page, choosing signup, successfully publishing a listing or clicking a contact link. Those counters do not store account, listing or individual journey identifiers, names, phones, emails, form contents or full URLs, and they do not record where you came from. Reports cover the last 90 days; older counters are removed on a new write or report read and may remain longer without that activity.

For aggregate visit statistics on selected pages of helper.rs, we use Vercel Web Analytics, with Vercel acting as our processor. Vercel receives a page view with a generalized path, in which a route template replaces dynamic identifiers, without query parameters, URL fragments, account, profile or listing identifiers, contact details or form contents. Vercel processes the time of the page view and technical request data, including browser, operating system, device type and approximate location, with a request-derived hash that is discarded after 24 hours, without a persistent cookie for tracking across different websites. The reporting window is 30 days; this is not a guaranteed deletion deadline at that provider.

This line controls the Helper counters and Vercel Web Analytics. Necessary sign-in cookies and language preferences serve a different purpose.

Retention and removal

The account, profile and owned listings are retained while the account exists in the service or until an applicable removal request is carried out. Inactive accounts are not deleted automatically. Closing a listing removes it from open-job discovery but keeps it with the account.

Support requests, rate-limit records and mailbox copies have no automatic deletion deadline in the Helper application. They can remain after a request is handled or an account is removed. Removal of these records is considered separately, taking account of the purpose for which they are still needed: answering an open request, investigating a report or abuse, resolving a dispute or meeting a legal obligation. A removal-request response distinguishes deleted data from remaining records and explains the reason for retention; deleting an account does not promise simultaneous erasure of every copy.

Infrastructure providers maintain separate records and retention processes. Under Resend’s published standard-plan rules, message content and delivery logs are kept for 30 days and backups for 7 days; earlier removal of a message requires separate handling with that provider. A copy received in the Zoho mailbox does not disappear when Resend’s period ends. Zoho provides an additional recovery period of up to 30 days after removal from Trash; time in Trash depends on mailbox settings. Infrastructure-log visibility windows are not promises to erase all data, backups or records in the active database. Copies outside the active account are considered separately when handling a removal request.

Removing the active account does not automatically erase previous support requests or copies other users saved. A request outcome distinguishes erased categories from any retained data and the reason for retention.

Other requests about your data

Use the same channel to request access, correction, erasure or restriction of processing, object to processing or ask about data portability. Explain your request and the information concerned without including unnecessary data about others.

Under Serbia’s Personal Data Protection Law, information about action taken on a request is provided without delay and within 30 days. Complex cases may require up to 60 additional days, with notice during the first 30 days. This does not promise that every copy is erased within 30 days. You can also contact the Commissioner.

Changes to this notice

This page identifies its version. We update the notice when functions or processing change; a past choice for one optional purpose is not used to introduce another optional purpose. Contact support if a change needs clarification.

Sources and further information