Mistri Privacy Policy

1. Data We Collect

• Phone number: To create your account and securely identify you via an SMS code.
• First and last name: To identify you to other users of the platform.
• Profile photo (optional): To personalize your profile.
• Geographic location: To calculate the distance between the client and the provider and estimate arrival time. Used only during missions in "provider travels to client" mode.
• Identity documents (providers only): National identity card (front and back), required to verify your identity before activating your provider profile.
• Usage history: Missions, messages, payments, ratings, and reviews.

2. How We Use Your Data

• To connect clients with providers suited to their needs and location.
• To calculate distances and estimated arrival times.
• To verify the identity of providers to ensure the reliability of the platform.
• To prevent fraud and abuse (detection of suspicious login attempts).
• To send you notifications about the status of your missions, payments, and messages.

3. What Other Users See

• Providers see: The client's first name and approximate location (to estimate distance).
• Clients see: The provider's first and last name, biography, service categories, portfolio photos, ratings and reviews, and work zones.
• Our moderation team may access all data in the event of a dispute or report, including message history.

4. Third-Party Services

• Payments: Your payment information is processed by our payment provider for Easypaisa, JazzCash, and Bank Transfer transactions. We do not store your banking or mobile wallet information.
• SMS notifications: Your phone number is transmitted to our SMS provider for sending verification codes.
• Push notifications: An anonymous technical identifier is used to send notifications to your phone. No personal data is shared with this service.
• We never sell your personal data to third parties.

5. Storage and Security

• Your data is stored on secure servers in Europe (Germany).
• Communications between your phone and our servers are encrypted.
• Messaging content is encrypted before storage.
• Login sessions expire automatically to protect your account.
• Access to the administration interface is protected by mandatory two-factor authentication.
• Repeated fraudulent login attempts result in automatic temporary blocking.

6. Your Rights

• View your data: You may view your profile information at any time.
• Modify your data: You may update your first name, last name, and profile photo.
• Manage your notifications: You may choose which types of notifications you wish to receive.
• Delete your account: You may request the deletion of your account. Your active missions and pending payments must be finalized beforehand.
• For any request concerning your personal data, contact our support team.

7. Data Retention

• Your account data is retained as long as your account is active.
• Mission and payment history is retained for legal and accounting purposes, even after account deletion.
• Dispute messages are retained until final resolution.