Privacy Policy

Information we collect

Mitora and Mitora Pro collect the information you provide to create an account and use home services: your name, email address, login identifiers, contact details, profile information, saved service addresses, and account preferences.

We process service requests, job descriptions, quotes, booking times and locations, customer-provider messages, reviews, support communications, and transaction records. Providers may also submit business details, service areas, availability, work photos, credentials, and other onboarding documents.

Stripe processes payment methods, provider payout and bank details, and, when used, identity-verification information such as a government ID and selfie. Mitora receives identifiers, verification results, and payment or payout status needed to operate these features; payment-card and bank information entered into Stripe's hosted or payment interfaces is handled by Stripe.

Location, photos and device information

When you allow location access, we use your approximate or precise location for features such as nearby service discovery, maps, service-area matching, or job arrival/check-in. Service addresses and coordinates you enter or select are also processed to arrange and perform work.

When you choose to take or upload a photo or document, we process the selected file for its stated purpose, such as a profile, work gallery, credential, or job record. You can manage device permissions in your device settings; denying a permission may limit the feature that needs it.

We process device registration and notification tokens, session information, service-usage events, and technical logs to deliver service communications, maintain sessions, diagnose problems, measure feature use, and protect the service.

How we use information

We use information to manage accounts and provider onboarding, connect customers with providers, handle quotes and bookings, support payments and payouts, deliver messages and service updates, provide support, improve reliability, and detect misuse. We also use records to resolve disputes and meet applicable legal, accounting, and security obligations.

If you use an AI-assisted intake, drafting, or transcription feature, the text or audio you submit may be processed by an AI service provider to produce a response. Include only information relevant to the service request.

When information is shared

Customers and providers receive the information needed for their service interaction, such as a request, quote, booking details, relevant service location, and messages. Provider profile details, service listings, work-gallery images, and reviews may be visible to other users. Consider what you include in public content.

We use service providers to run Mitora: AWS for hosting, storage, and technical logs; Cloudflare for website delivery and security; Clerk for authentication; Stripe for payments, payouts, and identity verification; Google Maps for maps and address services; Google Firebase and Expo for mobile delivery and notifications; and Resend for transactional email.

When no profile image is available, the apps may request an initials image from UI Avatars using a display name in the image request.

PostHog processes product-usage analytics. OpenAI processes requests when you use an enabled AI or transcription feature. If error monitoring is enabled, Sentry processes diagnostic reports. The data sent depends on the feature you use and the service configuration.

We do not sell your personal information. We may disclose information when required by law, to respond to lawful requests, or to protect users and the service against fraud, abuse, or threats. Our providers may process data in the United States or other countries where they operate.

How we protect information

We use safeguards such as access controls, authenticated sessions, and protected connections to reduce unauthorized access to personal information. Access to retained records is limited to the purposes for which they are kept. No online service or method of storage can guarantee complete security.

Retention and account deletion

We keep account and service information while your account is active and as needed to provide services, settle transactions, address disputes, protect the service, and meet legal obligations. Retention depends on the kind of information, these purposes, and applicable requirements.

You can request deletion in the app: in Mitora, open Profile and select Delete Account; in Mitora Pro, open Settings and select Delete Account. You can also request deletion of your account and associated data by emailing [email protected] without reinstalling either app.

In-app account-deletion requests are scheduled with a 30-day grace period. Signing back in during that period cancels the request. You may also contact support to request cancellation. Active services, payments, refunds, payouts, or other obligations may need to be resolved before a request can be completed. Deletion cannot be undone once completed.

Deletion requests can cover your profile and contact information, saved addresses, login credentials, device registrations, messages, location information, and uploaded files. Ask support about associated information held by service providers and any records that must be retained.

We may retain limited transaction, job, payout, refund, dispute, and audit records, including relevant transaction evidence submitted by another party, needed for accounting, legal compliance, fraud prevention, or security. Internal record identifiers can remain to preserve the integrity of those records without keeping an active account. Payment processors may retain records under their own legal obligations. Backup copies and retained records are not necessarily erased at the same time as your active account; they remain subject to applicable retention and access controls.

Your choices and privacy requests

You can update available profile and account settings in the app and change device permissions in your device settings. Contact [email protected] to request access, a data export, correction, deletion of particular data, or help with a privacy concern.

For an account-deletion request, identify whether you use Mitora or Mitora Pro and contact us from the email associated with your account where possible. We may need to verify that you control the account before acting. Do not email your password, payment-card details, government ID, or other sensitive documents. We will explain any additional information needed and any records that must be retained.

Policy updates and contact

We may update this policy as the service and its data practices change. The updated date identifies the current version. For privacy questions about Mitora or Mitora Pro, contact [email protected].