Privacy Policy — Serviz

Last updated: June 11, 2026 Version: 1.0

1. Data controller

The controller of your personal data is Godshot LLC, a company organized in the State of Delaware, United States of America, with its address at 600 N Broad Street, Suite 5 #364, Middletown, Delaware 19709, operator of the Serviz platform (mobile application and website https://serviz.lat).

For any privacy inquiry, request, or complaint: info@serviz.lat

This Policy describes what personal data we collect, for what purposes, with whom we share it, and what rights you have. It applies to all users of the Platform in any country where Serviz operates. By using the Platform, you acknowledge that you have read this Policy.

2. Data we collect

2.1. Data you provide to us

All users:

• First and last name.
• Date of birth (we verify that you are over 18).
• Email and/or phone number (verified by code).
• Addresses you save in order to book services.
• Content you post: reviews, photos, descriptions, chat messages, cancellation reasons, support tickets.

Providers and Operators (additionally, for identity verification — KYC):

• Profile photo.
• Nationality and gender.
• Government-issued ID: number and photos (front and back).
• Verification selfie.
• Proof of address.
• Professional license, registration, or certification (for trades that require it).
• Bank details for receiving payouts: these are registered and stored with our international payments provider (Wise); our systems keep only a reference and a masked summary (e.g., last 4 digits and bank name).

2.2. Data generated by your use of the Platform

• Location (GPS): when a job starts and ends, we verify that the traveling party is within 100 meters of the agreed location. We also use your approximate location to show nearby services, if you allow it on your device.
• Transactions: we record all payment, refund, penalty, coupon, subscription, and payout operations (successful, failed, or intermediate) for audit and security purposes.
• Booking history: statuses, dates, modifications, cancellations, and start/end verification codes.
• Chat messages within the Platform (see Section 4).
• Technical and usage data: device identifiers, operating system, language, in-app usage events (analytics), error logs, IP address.
• Notifications: push notification tokens and channel preferences (push, email, SMS).

2.3. Data from third parties

• If you sign up through an identity provider (e.g., Google or Apple), we receive the basic data that provider shares (name, email).
• Payment confirmations and statuses provided by payment processors.

We do not intentionally collect special categories of data (health, religion, political opinions, etc.). Please do not include them in chats, reviews, or descriptions.

3. Purposes and legal bases

We process your data to:

4. Automated chat monitoring (prominent notice)

Communications between users within the Platform are automatically processed by artificial intelligence systems in order to:

• Detect and block the exchange of personal contact details (phone numbers, emails, addresses, social media handles), to protect users and prevent off-platform dealing.
• Detect fraud, threats, harassment, or other content prohibited by the Terms.

When a message is blocked, the sender is notified. Serviz staff may manually review conversations only in cases of dispute, user report, suspected fraud, or legal requirement. Do not use the chat to share information you do not want subject to this processing.

5. Who we share your data with

We do not sell your personal data. We share data only with:

5.1. Service providers (data processors)

These providers process data under our instructions and their own security obligations.

5.2. Between users (the minimum necessary)

• The Client and the Provider/Operator of a booking see each other's: name, photo, ratings, and the operational information of the booking.
• The exact job address is shared with the traveling party only at the stage provided in the flow (confirmation/arrival), not before.
• Personal contact details (phone, email) are not shared between users; all communication takes place within the Platform.

5.3. Other cases

• Public authorities, where there is a legal obligation, a valid judicial or administrative order, or where necessary to protect rights and safety or prevent crime.
• Professional advisors (legal, accounting, audit) under confidentiality obligations.
• Corporate reorganization: in the event of a merger, acquisition, or sale of assets, data may be transferred to the successor, which will be bound by this Policy, with notice to users.

6. International transfers

Serviz operates from the United States and your data is hosted on servers located in the United States (and, depending on the provider, in other jurisdictions). If you reside outside the U.S., your data will be transferred internationally. We adopt reasonable safeguards (processor agreements, data protection clauses, technical security measures) so that your data receives an adequate level of protection under the applicable laws of your country.

7. Data retention

We keep your data while your account is active and, after closure, only for as long as necessary to:

• Comply with legal, accounting, tax, and regulatory obligations (transaction records are kept for the periods required by applicable law).
• Resolve ongoing disputes, claims, or investigations.
• Prevent fraud and enforce our Terms.

Identity verification (KYC) documents are kept while the Provider's account is active and for the subsequent period required by applicable law. Once those periods expire, data is securely deleted or anonymized.

8. Security

We apply reasonable technical and organizational measures, including:

• Encryption of data in transit (TLS) and at rest.
• Row-level access control in the database (each user can only access their own data).
• Identity documents stored in private repositories with access restricted to the owner and authorized staff.
• Card data held by the payment processor (PCI-DSS standard); Serviz does not store full card numbers.
• Bank details held by the payouts provider; Serviz keeps only masked references.
• Auditable logs of transactions and administrative actions.

No system is infallible. If we detect a security incident affecting your data, we will notify you as required by applicable law.

9. Your rights

Depending on the law of your country, you may have the following rights over your personal data:

• Access: know what data we process about you and obtain a copy.
• Rectification: correct inaccurate or incomplete data.
• Erasure / deletion: request deletion of your data (subject to the legal retention limits in Section 7).
• Objection: object to certain processing based on legitimate interest, including advertising.
• Portability: receive your data in a structured, commonly used format.
• Restriction of processing, where provided by law.
• Withdraw consent at any time, without retroactive effect.
• Not to be subject to solely automated decisions with significant effects: significant decisions (e.g., KYC verification approval) include human review. Automated message blocking (Section 4) can be challenged through support.

How to exercise them: write to info@serviz.lat from the email associated with your account, or use the options available in the app (profile editing, account deletion, notification preferences). We may request identity verification before responding. We will respond within the legally applicable timeframes. If you believe we have not properly handled your request, you may file a complaint with your country's data protection authority (see Section 13).

10. Minors

The Platform is intended exclusively for people over 18 years of age. We do not knowingly collect data from minors. If we detect a minor's account, it will be deleted. If you believe a minor has provided us data, write to info@serviz.lat.

11. Analytics, cookies, and similar technologies

• In the app: we use first-party analytics events to understand product usage and improve it (screens visited, actions, errors). This data is associated with technical identifiers and, where applicable, with your account.
• On the website: we may use strictly necessary and analytics cookies and similar technologies. You can manage them from your browser and, where required by law, through the consent banner.
• Promotional communications: you can opt out at any time from the app's notification preferences or the link included in each email.

12. Changes to this Policy

We may update this Policy. Material changes will be notified through the Platform or by email reasonably in advance. The current version is always available at https://serviz.lat/en/privacy, with its last-updated date.

13. Country legal frameworks and supervisory authorities

This Policy is drafted to comply with the data protection laws of the countries in the Americas where Serviz operates, including, among others:

Notice for California residents (CCPA/CPRA): we do not "sell" or "share" (as defined by the CPRA) personal information. You have the right to know, delete, correct, and limit the use of sensitive information, and not to be discriminated against for exercising your rights. Exercise these rights through the channels in Section 9.

Where local law grants rights additional to those described in this Policy, those rights prevail.

14. Contact

Godshot LLC — 600 N Broad Street, Suite 5 #364, Middletown, Delaware 19709, United States of America. Privacy email: info@serviz.lat Website: https://serviz.lat