Privacy policy

For anything to do with personal data, write to that address with the subject “Data protection”: it goes straight to the data controller, with no one in between.

When you ask for a quote

• Your phone number — the only thing that is essential: without it we cannot call you or send you a professional.
• The description of the job — what you tell us needs fixing.
• Your name, the address or area, and photos, if you give them to us. Photos help us get the price right; they are not compulsory.

When you log in to your account

• Your phone number and the single-use code we send you to log in.
• The history of your requests, your messages with us and any reviews you leave.
• If you turn on browser notifications, we store that device’s technical subscription so we can send them to you. It is deleted as soon as you turn them off.

If you sign up as a professional

• First name and surname, phone number, town or area, trades and experience.
• Your prices and the jobs you accept, so we can pass on the work that suits you.

If you message us on WhatsApp

We keep your number and the conversation, as with any chat. WhatsApp belongs to Meta and has its own terms: if you would rather not use it, you have email and the form on the website.

Website usage data

Which pages are viewed, from what type of device and where you came from (search engine, link or campaign). With no name or phone number attached and no cookies or lasting identifiers: to know that two consecutive pages were seen by the same person we keep an anonymous hash that is calculated on the server and changes every 24 hours. Your IP address is not stored: it goes into that calculation and into the anti-abuse limits, and is discarded straight away. The next day there is no way to link one visit to another, or to you. More detail in the Cookie policy.

The articles cited are those of the General Data Protection Regulation (GDPR, known in Spain as RGPD).

• Handling your request (understanding it, finding you a professional, calling you, following up the job) — so that we can provide the service you ask for, art. 6.1.b GDPR.
• Preparing and organising the text and photos of your request with the help of artificial intelligence (classifying the category, summarising what is needed) — same reason: it is part of handling your request, art. 6.1.b.
• Keeping you updated on the status of your job by WhatsApp, SMS or browser notifications — art. 6.1.b.
• Taking payment, invoicing and keeping the accounts — legal obligation, art. 6.1.c.
• Security of the service: technical logs, limits against abuse and spam — legitimate interest in the website working and not being attacked, art. 6.1.f.
• Website usage analytics — knowing which pages work and which do not, with anonymous, aggregated data, without cookies and without storing your IP: legitimate interest in improving the site, art. 6.1.f. As no identifier of yours is kept, there is no need to ask for your consent or bother you with a banner.

We do not use your data to send you third-party advertising and we do not sell it to anyone. If one day we wanted to send you commercial news, we would ask you separately, with a box that you tick yourself.

When you send the request, the text and photos go through a model from OpenRouter, Inc. that suggests the job category and organises the information so the professional can understand it quickly. We do not send it your phone number or your address.

That suggestion decides nothing on its own: who takes on your job and on what terms is always decided by a person. We do not carry out automated profiling and we do not score customers.

• The professional who does the job: sees what is needed to turn up at your home — name, phone number, address, description and photos. They do not see the rest of your history.
• Hetzner Online GmbH — the servers where the website and the database live, in Germany (European Union). They are our machines, not a third-party platform that reuses your data.
• OpenRouter, Inc. (the United States) — processes the text and photos of the request, as explained above.
• WhatsApp (Meta) — only if you choose to talk to us there.
• Public authorities, banks or courts when a rule requires us to (for example, for invoicing).

With anyone who processes data on our behalf we sign the data processing agreement required by art. 28 GDPR.

The website and the database are in Germany (European Union), within the European Economic Area: with Hetzner Online GmbH there is no international transfer at all.

The only exception is the processing of the text and photos by OpenRouter, Inc., in the United States. That provider has not signed up to the EU–US Data Privacy Framework, so the transfer relies on the standard contractual clauses approved by the European Commission (Decision 2021/914), known as SCCs, with the additional safeguards required by Chapter V of the GDPR. If you would rather your request did not go through there, tell us when you ask for a quote and we will handle it manually.

• Requests and conversations: 2 years from our last contact with you.
• Photos: 1 year from when the job is marked as finished.
• Customer and professional accounts: while the account is active and for 1 year afterwards.
• Invoices and accounting records: 6 years (Spanish Commercial Code, Código de Comercio) and 4 years for tax purposes.
• Analytics data: 25 months.

Once the period is over, the data is deleted or anonymised, with no way of linking it to you.

• To know what data of yours we hold and ask for a copy.
• To correct anything that is wrong.
• To have it deleted, once there is no longer any need to keep it.
• To restrict or object to a particular use.
• To take it elsewhere in a readable format.

To exercise them, write to [email protected] from the email address or with the phone number you used to contact us, so we know it is you. We reply within one month at most, and it is free.

If you think we are not doing it properly, you can complain to the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD): www.aepd.es. We would appreciate it if you told us first: almost everything can be sorted out with one message.

The website always runs over an encrypted connection, access codes are single-use and only those who need the data for their work can get to it. Even so, no system is infallible: if anything serious happened, we would tell you and report it to the AEPD.

The service is for people aged 18 and over. We do not ask for or want data about minors.

If we change anything important, we update the date below and, if it really affects you, we let you know. The version that applies is always the one published in Spanish at octo-service.com/privacidad.