Contents
Who is responsible for your data
The controller of your personal data on grabitmap.com and in the GRABIT apps is the operator named in the Legal notice (“we”). For any question about your data, or to use your rights, write to the address below; we answer within one month.
Data questions: privacy@grabitmap.com
The English version is the reference text; for users living in France the French version applies. Other languages are translations for convenience.
What we collect
- Account: e-mail address, password hash if you set a password (never the password itself), date and version of your acceptance of the terms, passkeys (public part only) and the hash of the app lock code if you enable them.
- Profile: first and last name, a nickname if you choose one (one word; everyone else then sees only the nickname instead of your first name and the first letter of your last name, while your full name is seen only by you, GRABIT moderators and the city helper who checks your verification request or work permit; a nickname can be set or changed once in 30 days, and you can go back to your real name at any time), username, “about”, professions, avatar, home city, interface language, languages you speak, availability, account type (person or company), when you were last online, verification requests and their outcome, what you are looking for on GRABIT (seen only by you). Name history: each change of your name or nickname (the old and the new value, the date) is kept for one year and seen only by GRABIT moderators and by you in “My data”, so that no one can hide behind new names after complaints; deleted together with the account.
- Work documents: the CV, cover letter and references you choose to upload (the file, its name, type, size and upload time); opened only as you choose under «Show on profile»: by everyone signed in, only by signed-in members you have written to, or by nobody — never by guests; deleted together with the account.
- Résumé: work experience, diplomas and certificates as text, permits and cards (name, number if you give it, validity; a scan you attach for the check is seen only by the helper of your city and deleted with the decision), when you can work, the desired rate, references as text, photos of work (re-encoded without metadata). For each part you choose under «Show on profile» who sees it on your profile: everyone, only people you have written to, or nobody. A part you fill in starts hidden (nobody); what was filled in before 9 October 2026 stays shown as it was until you change it. Skills as tags are one more such part. Only in the PDF or Word file you download, never on your profile: your e-mail unless you leave it out and, if you enter one, a phone number.
- Video card: a video of up to 15 seconds you add in «Photos of work»; we re-encode it without metadata (phones store the place of shooting there). It is shown to whom you show your work photos and deleted when you delete it or your account.
- Company pages: the name, field, city and website of a company you run, your role in it (owner or employee) and whether it shows on your profile. The page and the listings posted on its behalf are public, with a link to your profile; your résumé and goals never appear there. It is deleted when you delete the page or your account.
- Responses to listings: when you apply to a vacancy, invite someone who is looking for work or offer your price and term to someone looking for a specialist — your short message, the cover letter if you attach it, the price and term, when you sent it and the answer (seen, invited, declined, withdrawn). The author of that listing sees it with your profile card (name, profession, verification, languages, «available»). When you apply, you agree that this author — and only them — also sees your résumé and work documents, including the parts your profile hides; withdrawing the response takes this back. Kept while both accounts exist; deleted together with your account or the account of the listing's author.
- Agreements: when you and another person make an agreement in a chat — what, when, where and for how much, which of you is the customer, who proposed and who confirmed it, its status (waiting, agreed, done, cancelled), a reminder an hour before, and the ratings from 1 to 5 with a short comment you give each other once the work is done. Only the two of you see it. When the customer presses “Done”, the worker's work book records the customer's first name and the first letter of the last name (or the nickname, if set, or the company's name) and city — never contacts. Deleted together with the account of either of you. To protect confirmed skills from padding, when one of you confirms the agreement or presses “Done”, we check whether this is the other person's browser (by the device cookie) or the same IP address as their recent sign-ins; only the result is kept with the agreement. Work confirmed from one device does not count towards a confirmed skill; a match of the IP address alone still counts, and the GRABIT owner may review it.
- Booking by time: if you take bookings — your working hours for each day of the week, your days off, the length of one booking and the time zone of your phone when you saved them. Clients see only the free times on your profile, not the hours themselves. A booking is an agreement proposal in the chat (see Agreements) and keeps its length. Deleted together with your account.
- Work book: when the customer presses “Done”, a record goes into the worker's work book: what was done, the rubric and city of the listing, the month, and the customer's first name with the first letter of the last name (or the nickname, if set, or the company name) and city — no contacts. Records are never edited: a wrong one is cancelled by a new record. Each record is protected by a chain of hashes, so a silent change shows. The record stays in the worker's book when the customer deletes their account (the worker's legitimate interest in their work history). When the worker deletes their account, the contents of their records are erased; only technical fingerprints (hashes) that no longer lead to anyone remain. You get your work book in “My data”. Who sees it: by default everyone — guests who are not signed in see only the totals (number of works, rubrics, average rating), the list with the customers' names is shown only to signed-in members; on the work book page you can show it only to people you have written to, or to nobody.
- How you answer: from the responses to your listings and the chats about them over the last 90 days, including your replies in an ordinary chat, we count how many people you answered and how quickly — only counts and one typical time, no names or messages. Only you see it, in «My listings». Deleted together with your account.
- Listings: title, description, rubric, city, the contact details and address you enter (an address may contain map coordinates), photos; your ratings, favourites and saved searches.
- Communication: messages in private and group chats, attachments (photos, voice notes, videos, documents), reactions, pins, contact requests, group invitations, groups you create (name, description, avatar). Calls: only the fact and duration of a call; the content of a call is not recorded. In a private group the history also shows short service lines (who created the group, joined, left, was added or removed, role changes, and changes to the group's name, description and photo); the group's members see them, and they stay in the history while the group exists.
- Voice to text: when someone in a chat presses “Transcribe” under a voice message, our own server turns its first minute into text; neither the recording nor the text is sent anywhere. The text is kept with the message for the chat's participants and deleted together with it. Search by voice: the recording (up to 8 seconds) is turned into text on our server and deleted right away; only the search itself remains, as if typed.
- Notifications: what we sent you and push subscriptions.
- Security: IP address, browser and device type, time of sign-in, city derived from the IP address (for alerts about sign-in from a new device), sessions, known devices, sign-in codes (stored as a one-way hash).
- Moderation: reports you send or receive, moderation decisions, appeals, automated check scores.
- Visit counting: a daily anonymous count; to avoid counting you twice we keep for one day a short one-way hash of your IP address and browser mixed with a random value that changes every day. Searches are counted the same way: how many people looked for a trade in a city — only that number is kept, for 90 days. We also measure how fast pages open and answer a tap — only the type of screen, phone or computer and two times, nothing about you; kept 30 days.
- Technical server logs: address, requested page, time, browser.
- Problem reports: what you write with “Help” in Settings, the address of the page (without its parameters), app version, browser and interface language; a screenshot of the screen only if you tick the box — it shows whatever was on the screen.
We do not ask for a phone number or identity documents. If you write them in a listing or a message, they become part of that content. A work document you upload yourself (a CV usually contains a phone number and an address) is your own content too; it opens only to the signed-in members you choose under «Show on profile», never to guests.
Why, and on what legal basis
- To provide the service — sign-in, profile, listings, search, chats, calls, notifications: performance of our contract with you (GDPR art. 6(1)(b)).
- To keep the service safe — moderation, automated checks, the history of name changes, alerts about new devices, limits, logs, backups: our legitimate interest in protecting users and the service from fraud, abuse and attacks (art. 6(1)(f)).
- Push notifications and access to your location: your consent, given in the browser or on the phone and withdrawable there at any time (art. 6(1)(a)). Location is used once to find the nearest city and is not stored.
- To meet legal obligations — answering lawful requests from authorities, keeping accounting records for paid features (art. 6(1)(c)).
Automated checks (Jev)
Texts written on the service are checked by a machine-learning model we call Jev. It answers questions such as “does this look like a scam”, “which rubric is this”, “is this a duplicate”. Only text is sent to the model provider: a new listing (with up to five of your other listings in the same rubric), private messages that look risky (links, money, a first message to someone new), reports with the reported text, search queries without results, saved-search matching, questions in a city chat, new profession names, and — when you ask for profile verification — your name, username, “about”, professions and listing titles. Your e-mail, IP address and account number are not sent.
A score is only a mark: automation never hides, deletes or blocks anything by itself. Suspicious items go first in the moderators' queue, a person decides, and the decision can be appealed. There is no decision based solely on automated processing with legal or similarly significant effects (GDPR art. 22). Identical texts are not sent again for 24 hours (a cache in server memory).
Who receives data
We share data only with service providers who process it for us under a contract (GDPR art. 28), and with other users as the service intends (your public profile and listings are visible to everyone; messages to their recipients).
- The author of a listing you respond to: your response and profile card; your résumé and work documents only if you agreed when sending, until you withdraw the response.
- Hosting provider (Germany, EU): server, database, files and backups.
- E-mail delivery provider (USA): your address and the e-mail text (sign-in code, password reset, new-device alert). If you keep it on, it also sends you a daily digest of new listings for your saved searches; switch it off in Settings or with the link in the e-mail. If a chat message stays unread for 30 minutes and you have not opened the app since, it also sends you an e-mail with the sender's name and a link to the chat (not the message text); switch it off in Settings or with the link in the e-mail.
- Error monitoring provider (EU): error text, page address, browser type; e-mail addresses and IP addresses are masked before sending.
- AI model provider and gateway for automated checks (USA): text only, see above.
- Push services of your browser or phone (Google, Apple, Mozilla, Microsoft): the encrypted notification and the subscription address.
- Calls: devices connect directly. To find a route, your browser contacts a public connectivity (STUN) server (USA), which sees your IP address. When a direct route is impossible, the call goes encrypted through our own relay, which cannot decrypt it.
- When you paste a short Google Maps link, our server asks Google where it leads; only the link is sent.
- Your city by IP address is determined from a database on our own server; nothing is sent outside.
- Off-site backup (Backblaze B2): an encrypted copy of the database at a storage provider in the EU; the data is encrypted before it leaves our server and the provider cannot read it.
- Authorities, courts and parties entitled by law, when we are legally required to, or to protect someone's life or safety.
Coming with the features below, once they are launched:
- Mobile apps from Google Play, the App Store and the Microsoft Store: the store operator processes download and purchase data under its own privacy policy.
- Call notifications in the Android app: Google Firebase Cloud Messaging (USA) receives a device token and the call signal (who is calling, without the content of the call).
We do not sell your data, do not show advertising and do not use third-party analytics or tracking.
Transfers outside the EU
Where a provider is in the USA, the transfer is based on the EU–US Data Privacy Framework if the provider is certified, or otherwise on the European Commission's standard contractual clauses with additional safeguards. You can ask us for a copy of the safeguards at the address above.
How long we keep data
- Account, profile, listings and messages — while the account exists.
- Name and nickname history — one year from each change; deleted together with the account.
- A message you delete: its text and attached file are erased at once. If a moderator removes a group message after a report, its file is kept for 180 days as evidence for a possible appeal, visible only to the group's moderators, and then deleted automatically.
- When you delete your account: 30 days to change your mind (just sign in again), then within a day the account is irreversibly anonymised. Your e-mail, profile, the texts and photos of your listings and the texts and files of your messages are erased; sessions, devices, push subscriptions, passkeys, saved searches and settings are deleted.
- What remains after deletion: moderation and security records (your IP address and browser in security events are erased), the reasons you gave in reports about listings, groups you created (hand them over to another member or delete them before deleting your account), and records of paid features, which we must keep for accounting.
- Session — 30 days after your last visit or until you sign out; a revoked session is deleted within a day. A known device — 400 days after the last sign-in. Sign-in alerts — one day after they expire.
- A sign-in code is valid for 10 minutes (a password-reset code — 15 minutes, the “It wasn't me” link — 7 days); the record of a sent code is deleted one day after it expires.
- Content shared into the app from another app — one hour unless you publish it.
- Problem reports and their screenshots — 180 days; deleted together with the account.
- Reports about a person or a private message — 180 days; only the site owner sees them, with up to 300 characters of the reported message; those you sent are deleted with your account; if the reported person deletes their account, the report stays until the end of the term without the message text.
- Notifications you have read — 180 days.
- Moderation log and security events — kept as evidence; IP address, browser and event details in security events are erased after one year.
- Automated check scores — together with the listing or message they belong to.
- Visit-count hashes — one day.
- Server logs — overwritten in rotation as they fill up, usually within days or weeks.
- Backups — daily copies for 7 days, copies before updates — the last 5, copies made for checks — up to 30 days; off-site copies — 30 days.
Your rights
Under the GDPR you have the right to access your data, to correct it, to have it erased, to restrict or object to its processing, to data portability, and to withdraw consent at any time without affecting what was done before.
My data: download a file (JSON)
- Copy of your data: the “My data” links above (sign in first) give everything we hold about you: account and sign-in methods, profile and name history, listings and ratings, agreements and the ratings you gave and received, the messages and files you sent, groups you created, settings, notifications and push subscriptions, blocks, reports, verification and promotion requests, sessions and devices. Files are included as links that open while you are signed in.
- Correction: edit your profile and listings in the app.
- Deletion: Settings → “Delete account” (see “How long we keep data”).
- Withdrawing consent: notifications — in Settings or in the browser/phone settings; location — in the browser/phone settings.
- Objection, restriction and any other request — write to the address above.
- You have the right to lodge a complaint with a data-protection authority, in particular in the EU country where you live or work. In France this is the CNIL (cnil.fr).
Deleting your account
In the app or on the website: Settings → “Delete account”. If you cannot sign in, write from the e-mail address of your account to privacy@grabitmap.com with the subject “Delete my account”; we will confirm and delete it as described above.
Cookies
We use only cookies that the service needs to work and to remember your choices; there are no advertising or third-party cookies. Details are on the Cookies page.
Children
The service is for people aged 18 and over. If you learn that a minor has created an account, write to us and we will delete it.
Security
Connections are encrypted (HTTPS), passwords and codes are stored only as one-way hashes, access to production data is limited to the people who run the service, and backups are encrypted when they leave our server.
Changes
When this policy changes in substance we update the date at the top and tell you in the service. Earlier versions are available on request.
Regional additions
- European Union and France: this policy is written for the GDPR and the French Data Protection Act; the supervisory authority for our establishment is [FILL IN: CNIL or the authority of the operator's country].
- Other countries: additional provisions will be added here as the service launches there.
IP Geolocation by DB-IP (CC BY 4.0).