Your data, in plain English.

1. What we collect

To run the Yahso marketplace we collect:

• Account info — name, email, phone, password (hashed), and account type (owner / provider / group admin).
• Property data (owners) — property name, address, unit type, notes you add.
• Business + credential data (providers) — business name, licence, insurance certificate, background-check result, references.
• Job data — service requests, photos, messages between owner and provider, quotes, receipts.
• Payment data — payment method details are handled by our PCI-compliant payment processor; we store only the last 4 digits and expiry.
• Usage data — logs of pages visited, device type, IP address, and interaction events (for analytics + fraud detection).

2. How we use it

• Match owners with verified providers for the specific service requested
• Process subscriptions, bookings, request history, and contractor matching
• Send notifications about your jobs (email, SMS if opted in, push if enabled)
• Detect and prevent fraud, abuse, and violations of our Terms
• Improve the product (aggregated + anonymized analytics only)
• Comply with legal obligations — tax records, dispute evidence, court orders

3. Who sees what

Address privacy is the core rule:

• Before a provider accepts your job, they see only the neighbourhood + distance from a search pin.
• After acceptance, the provider sees your full address + any access notes you added, for the duration of that job only.
• Provider licence, insurance, and background-check details are shown to owners as pass/fail badges — never the raw documents.
• Yahso staff access owner or provider data only for support, fraud, or dispute purposes, and every access is logged.

4. Sharing with third parties

We share the minimum data needed with:

• Payment processor (Stripe or equivalent) — for subscription billing and receipts.
• Background-check provider — for provider verification only, with the provider's explicit consent.
• Insurance-verification service — to validate provider insurance certificates.
• Cloud hosting + email providers — encrypted at rest, no cross-account sharing.

We do not sell your data. We do not share your info with marketers. We do not use owner property data to train AI models sold to third parties.

5. Retention

• Account data — kept while your account is active. On deletion, non-financial data is wiped within 30 days.
• Job + financial data — retained for 7 years (tax + regulatory compliance).
• Messages between owner and provider — kept for the duration of the job + 90 days for dispute windows, then deleted unless a dispute is open.
• Usage logs — anonymized after 12 months.

6. Your rights

Depending on your region (GDPR in the EU/UK, CCPA in California, PIPEDA in Canada, etc.), you have the right to:

• Access a copy of the personal data we hold about you
• Correct inaccurate data
• Delete your account and associated non-financial data
• Opt out of marketing emails at any time (notifications about active jobs are transactional and cannot be disabled while a job is open)
• Object to specific processing activities
• File a complaint with your local data-protection authority

Exercise any of these by emailing privacy@yahso.com. We reply within 30 days (usually much faster).

7. Contact

Privacy questions: privacy@yahso.com. Legal notices: legal@yahso.com. Yahso is a product of Coosysoft.