Privacy Policy

1. Who We Are

Prson Network ("Prson", "we", "us", "our") is operated by Yumankind OU, a company registered in Estonia. We operate the Prson platform at prson.net, a lead generation and appointment booking service that connects customers with service providers.

For the purposes of the General Data Protection Regulation (GDPR) and applicable data protection laws, Yumankind OU is the data controller responsible for your personal data.

2. Data We Collect

We collect the following categories of personal data:

Information you provide

• Name and email address (during account creation or service requests)
• Phone number (when provided for booking coordination)
• Service request details (description of the service needed, preferences, and requirements)
• Location information (address or area where the service is needed)
• Payment information (processed securely through Stripe; we do not store full card details)
• Communication records (messages exchanged through the platform)

Information collected automatically

• Device and browser information (type, version, operating system)
• IP address and general location data
• Platform usage data (pages visited, features used, timestamps)
• Authentication session data (via Firebase)

3. How We Use Your Data

We use your personal data for the following purposes:

• To match your service requests with appropriate service providers
• To process and coordinate bookings and appointments
• To communicate with you about your requests, bookings, and account
• To process payments and platform fees
• To improve our platform, services, and matching algorithms
• To send service-related notifications (booking confirmations, reminders, status updates)
• To prevent fraud and ensure platform security
• To comply with legal obligations

The legal bases for processing under GDPR are: performance of a contract (providing our service), legitimate interest (improving our platform and preventing fraud), consent (where specifically requested), and legal obligation (regulatory compliance).

4. Data Sharing

We share your personal data with the following categories of recipients, only to the extent necessary for the stated purposes:

Service providers

When we match you with a service provider, we share the information necessary for the provider to deliver the service (such as your name, contact details, service location, and request details). We share only what is needed for the specific service.

Third-party service processors

• Stripe -- payment processing. Stripe handles all payment data under their own PCI-compliant privacy policy.
• Amazon Web Services (AWS) -- email delivery and infrastructure. Used for sending transactional emails related to your bookings and account.
• OpenAI -- service request analysis. We may use AI services to better understand and categorize your service requests. Data shared with OpenAI is anonymized and stripped of direct personal identifiers where possible.
• Google Maps -- location services. Used to geocode and display service locations for matching purposes.
• Firebase (Google) -- authentication and application infrastructure.

We do not sell your personal data to third parties. We do not share your data with advertisers or advertising networks.

5. Data Retention

We retain your personal data according to the following guidelines:

• Active account data is kept for as long as your account remains active and you continue to use our services.
• Service and booking records are retained for 3 years after the service date for legal, accounting, and dispute resolution purposes.
• Payment records are retained as required by applicable tax and financial regulations.

You may request deletion of your personal data at any time by contacting us at support@prson.net. We will process your request in accordance with GDPR requirements, subject to any legal obligations that require us to retain certain data.

6. Your Rights Under GDPR

If you are located in the European Economic Area, you have the following rights regarding your personal data:

• Right of access -- You may request a copy of the personal data we hold about you.
• Right to rectification -- You may request that we correct any inaccurate or incomplete personal data.
• Right to erasure -- You may request that we delete your personal data, subject to legal retention obligations.
• Right to data portability -- You may request your data in a structured, commonly used, machine-readable format.
• Right to restrict processing -- You may request that we limit how we process your data in certain circumstances.
• Right to object -- You may object to the processing of your personal data for certain purposes, including direct marketing.
• Right to withdraw consent -- Where processing is based on consent, you may withdraw that consent at any time.

To exercise any of these rights, contact us at support@prson.net. We will respond to your request within 30 days. You also have the right to lodge a complaint with a supervisory authority (the Estonian Data Protection Inspectorate or your local data protection authority).

7. Cookies

Prson uses minimal cookies, limited to what is necessary for the platform to function:

• Authentication session cookies -- Used by Firebase to maintain your signed-in session. These are strictly necessary for the platform to operate.

We do not use advertising cookies, tracking cookies, or third-party analytics cookies. We do not participate in any advertising networks or cross-site tracking.

8. Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• Encryption of data in transit (TLS/SSL) and at rest
• Firebase security rules to restrict unauthorized data access
• Stripe PCI DSS compliance for all payment data processing
• Access controls limiting employee access to personal data on a need-to-know basis
• Regular security reviews of our infrastructure and practices

While we take reasonable precautions, no method of transmission or storage is 100% secure. We cannot guarantee absolute security of your data.

9. International Data Transfers

Your personal data may be processed in countries outside the European Economic Area, including the United States, through our use of the following service providers:

• Amazon Web Services (AWS) -- EU and US data centers
• OpenAI -- United States
• Stripe -- United States and EU
• Google/Firebase -- United States and EU

Where data is transferred outside the EEA, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission, and reliance on adequacy decisions where applicable.

10. Children's Privacy

Prson is not intended for use by individuals under the age of 16. We do not knowingly collect personal data from children under 16. If we become aware that we have collected personal data from a child under 16, we will take steps to delete that information promptly.

If you believe a child under 16 has provided us with personal data, please contact us at support@prson.net.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. Changes will be posted on this page with an updated "Last updated" date.

For material changes that significantly affect how we handle your personal data, we will make reasonable efforts to notify you via email or through the platform before the changes take effect.

12. Contact

If you have any questions about this Privacy Policy or our data practices, or if you wish to exercise your data protection rights, please contact us at:

support@prson.net

Yumankind OU
Estonia