Privacy Policy

NearGig is a location-based marketplace operated by Orvion IT, Podgorica, Montenegro. This policy explains, in plain language, what we collect, how we use it, and the choices you have. NearGig works across several countries, so your local data-protection law may give you additional rights.

Information we collect

We collect the details you give us — your name, contact details, location, and the services or gigs you post — plus basic usage data needed to run the marketplace and keep it secure.

• Details you give us — name, email, password (stored hashed), the country and area you set during onboarding, an optional phone number, and anything you publish (services, gigs, applications, reviews, messages).
• Usage data — IP address, device and browser information, and basic activity needed to operate and protect the platform.
• Error reports — when something goes wrong, a technical report of the failure: the error message and where in our code it happened, the page or screen you were on, and your browser, device or app version. Personal details are stripped out of these reports before they leave our servers, and we never attach your message contents, address or contact details to them.
• Location — the approximate area you set and, if you opt in, your browser's location to speed up entering an address.
• Push notifications — if you allow notifications in the mobile app, a token that identifies that app install on your device, so a notification can reach it. The token is created for us by Expo (see "Service providers we use") and carries none of your content.

How we use it

To match you with local pros or clients, power search and messaging, process credit purchases, and prevent fraud and abuse.

We also use your data to send the notifications you expect (like a new message), keep a record of credit purchases and charges, and meet legal obligations such as accounting record-keeping. We don't run third-party advertising and we don't profile you for ads.

Legal bases we rely on

Under the GDPR and similar laws, every use of your data needs a legal basis. Here is ours, purpose by purpose:

• Performing our contract with you — creating and running your account, matching you with local pros or clients, search, messaging, bookings, reviews, credit purchases, and the notifications that come with them (like a new message or application).
• Legitimate interests — keeping the platform secure and working, diagnosing faults and crashes so we can fix them, preventing fraud, spam, and abuse, enforcing our terms, and handling disputes. We balance these interests against your rights, and you can object at any time (see "Your rights").
• Legal obligations — keeping accounting and tax records of purchases, and responding where the law requires us to.
• Your consent — anything optional, such as non-essential cookies (we don't use any today — see "Cookies") and any marketing emails you sign up for. You can withdraw consent at any time without it affecting your use of NearGig.

Sharing

We share only what a booking needs: your first name and approximate area are visible to the other party, and your exact address is shared only after you hire. We never sell your personal data.

To run the marketplace we rely on a small number of service providers (processors) who handle data only on our instructions, under data-processing agreements — see "Service providers we use" below. We may also share data where the law requires it.

Service providers we use

These are the companies that process personal data on our behalf today:

• Supabase — database, authentication, and file storage.
• Vercel — hosting and content delivery for the website.
• Resend — sending our emails (verification, notifications, receipts).
• Infobip — sending the one-time codes used for phone verification, by SMS or, if you choose it, WhatsApp; WhatsApp messages are delivered through WhatsApp's operator, Meta.
• Sentry — error and crash monitoring, so we can find and fix failures. Its servers are in the European Union, and the reports it receives are stripped of personal details first (see "Error reports" above).
• Expo — creating the notification token for the mobile app. It receives a token identifying your app install — not your account details, and not the content of any notification; its servers are in the United States. We don't send notifications through it yet, and we'll update this policy before we start.

When real-money payments launch, a payment processor will handle payments on our behalf — we'll name it here and update this policy before that happens. Each provider is bound by a data-processing agreement and may not use your data for its own purposes. If we change providers, we'll update this list.

International transfers

Our providers may store or process data outside Montenegro and the European Economic Area — for example in the EU or the United States. When that happens, the transfer is protected by recognised safeguards: an adequacy decision, or the EU Standard Contractual Clauses (with equivalent protections applied for Montenegro), built into each provider's data-processing agreement. Contact us if you'd like detail on the safeguard used for a specific provider.

Cookies

We only use essential cookies — the ones the site can't work without:

• Sign-in session — keeps you securely signed in (set by our authentication system).
• Preferences — remember your language and, once you've made it, your cookie-consent choice itself.

We do not use analytics, advertising, or any other non-essential cookies today. That's why the consent banner offers just two choices — accept, or reject non-essential; essential cookies are used either way, because the site can't function without them. If we ever introduce non-essential cookies, we'll update this policy and ask you again first. You can review or change your choice at any time in Settings → Privacy.

Your rights

You can access, correct, export or delete your data at any time from Settings, or by contacting us. We'll respond within the timeframes your local law requires.

Depending on where you live, you may also have the right to object to or restrict certain processing, to withdraw consent, and to complain to your local data-protection authority. In Montenegro that is the Agency for Personal Data Protection and Free Access to Information (AZLP, azlp.me).

Data retention

We keep your data only as long as we need it. Account data stays while your account is open and is removed a short time after you delete it. Records tied to payments are kept for as long as accounting and tax law require, and a limited amount of data may be kept longer where it's needed to resolve disputes or prevent fraud.

Error reports are diagnostic, not part of your account: we keep them for 30 days in our own systems, and for a limited period with our monitoring provider, after which they are deleted.

If there's a data breach

If a personal-data breach ever happens, we'll act quickly: contain it, assess the risk, notify the supervisory authority within 72 hours where required, and tell you directly, without undue delay, if the breach is likely to put your rights and freedoms at high risk.

Children

NearGig is for adults: you must be at least 18 to use it, and we don't knowingly collect children's data. If you believe a child has created an account, contact us and we'll delete it.

Automated decision-making

We don't make any decisions about you based solely on automated processing that would have legal or similarly significant effects. Search and browse results are ordered by simple, transparent criteria (like category, city, and recency), hiring decisions are always made by people, and we don't build behavioural profiles — the ratings you see are plain averages of the reviews other users leave.

Contact

For any privacy question, or to exercise your rights, email us at support@neargig.com. You can also access, export, or delete your data directly from Settings → Privacy. If we make material changes to this policy, we'll update the date above and let you know in the product or by email.