Privacy Policy

Last updated: June 05, 2026

Darvodelec BG Ltd. (hereinafter "the Company", "we" or "us") respects the privacy of users of the REZVA platform, accessible via the website rezva.pro and the mobile applications for iOS and Android. This Privacy Policy describes how we collect, use, and protect your personal data.

1. Data Controller

2. What Data We Collect

2.1. Data provided directly by you:

• Upon registration: name, email address, phone number, password
• For Specialist profile: business name, address, service descriptions, photos, working hours
• When booking: selected service, date and time, notes
• For payments: payment data (processed by third party — Stripe)

2.2. Data collected automatically:

• IP address and approximate location
• Device type, operating system, and browser
• Platform usage data
• Cookies and similar technologies (web version)

2.3. Data from the mobile app:

• Push notifications: device token for delivering notifications (only with your consent)
• Device identifier: for session security and abuse prevention
• Camera and photo library: the app may request access to your device's camera or photo library to allow you to upload photos (e.g., profile picture, portfolio gallery, photos in chat messages). Photos are uploaded to our servers and stored in accordance with this policy. Camera/photo library access is granted only with your explicit permission and can be revoked at any time from your device settings.

The mobile app does not access your contacts, microphone, or location unless you explicitly grant permission for a specific feature.

3. How We Use Your Data

• Providing and maintaining the Platform
• Processing bookings and payments
• Communicating with users
• Improving our services
• Complying with legal obligations
• Preventing fraud and abuse

4. Data Sharing

Your personal data may be shared with:

• Specialists: when you make a booking (name, phone, notes)
• Service providers: for payment processing (Stripe), emails (Brevo), SMS (Twilio), hosting, analytics (Google Analytics)
• Push notifications: Expo Push Service for delivering mobile notifications
• Law enforcement: when legally required

We never sell your personal data to third parties.

5. Data Security

We implement industry-standard measures to protect your data, including:

• SSL encryption for data transmission
• Secure password storage (hashing)
• Restricted access to personal data
• Regular security reviews

6. Your Rights

Under GDPR and Bulgarian law, you have the right to:

• Access: obtain a copy of your data
• Rectification: correct inaccurate data
• Erasure: request deletion of your data
• Restriction: restrict processing
• Portability: receive your data in structured format
• Object: object to processing
• Withdraw consent: at any time

7. Data Retention

We retain your data while:

• Your account is active
• It is necessary to provide services
• There is a legal obligation to retain it

8. Cookies

We use cookies to improve Platform functionality. For more information, see our Cookie Policy.

9. Children

The Platform is not intended for persons under 16 years old. We do not knowingly collect data from children. If we learn that we have collected data from a person under 16, we will delete it immediately.

10. International Data Transfers

Your data is stored on servers within the European Union. Some of our service providers (Stripe, Expo, Google) may process data in the USA or other jurisdictions, subject to appropriate safeguards under GDPR (Standard Contractual Clauses).

11. Account Deletion

You can request deletion of your account at any time by emailing [email protected]. Upon deletion, all your personal data will be removed within 30 days, except for data we are legally required to retain (e.g., invoices).

12. Policy Changes

We may update this policy periodically. Significant changes will be communicated via email or notification in the Platform.

13. Contact

For questions about this policy or to exercise your rights: