Privacy Policy

Boris Saydakov, operator of Vivaqui

Bvd Hristo Botev 20

1000 Sofia

Bulgaria

Email: hello@vivaqui.app

We process only data needed to operate and protect the marketplace.

• Account and contact details, authentication records, locale, and preferences
• Provider profiles, listings, images, availability and, if submitted, verification and tax/business details
• Bookings, service requests, messages, reviews, favourites, support requests, disputes, moderation and fraud-prevention records
• Payment and payout references, amounts and status; Stripe handles card details
• Cookie choices and consent records
• Device, IP, security, audit, error and technical log data
• Optional analytics data after consent

Contract: to create accounts, publish listings, enable discovery, bookings, messages, reviews, payments, payouts, support, data export and account deletion.

Legal obligations: to keep records and respond to tax, accounting, payment, consumer-protection or authority requirements that apply.

Legitimate interests: to secure and improve the Platform, prevent fraud and misuse, moderate content, resolve disputes, protect Users and maintain reliable technical operations. We balance these interests against your rights.

Consent: for optional analytics or similar non-essential technologies. You may withdraw consent at any time through Cookie Settings without affecting earlier lawful processing.

Relevant profile, listing, booking and communication data is shared with the other party where necessary for a marketplace transaction. We also use payment and payout providers; hosting, database and realtime infrastructure; email and communication providers; image storage; security and error-monitoring providers; analytics providers where consented; and address or map providers where used. Professional advisers or public authorities receive data only where necessary or legally required.

Some service providers may process data outside the European Economic Area. Where this happens, the transfer must use a valid GDPR mechanism appropriate to the recipient and destination, such as an adequacy decision or approved standard contractual clauses. Contact us for information about the safeguard relevant to a particular transfer.

Account data is kept while the account is active. A deletion request currently has a 30-day restoration period; after that, identifying profile data is deleted or anonymised unless it must be retained.

Booking, payment, payout and accounting records are retained for the period required by applicable law. Messages are normally retained for up to two years. Support, dispute, moderation and security records are kept as long as needed for the issue, safety, limitation periods or legal claims. Consent records are kept as evidence of your choices. Optional analytics retention follows the configured provider settings and your consent.

Subject to GDPR conditions, you may request access, rectification, erasure, restriction, or portability of your data and object to processing based on legitimate interests. You may withdraw consent where consent is used. Account settings provide data export and account deletion tools; you may also contact hello@vivaqui.app.

You may complain to the competent data-protection authority, including the Bulgarian Commission for Personal Data Protection, or the authority where you live or work. These rights may be limited where retention or processing is legally required.

Vivaqui is not a medical-record platform. Do not put unnecessary medical, health, identity-document, or other sensitive information in booking notes, messages, reviews, or other free-text fields.