Privacy Policy
Last updated 12 October 2026
This Privacy Policy explains how SME Hub collects, uses, and protects personal information when you use our web app, mobile apps, and related services as a customer or provider.
1. Information we collect
Account data (name, email, phone if provided, role), authentication and device details, booking and payment metadata, business profile and portfolio content for providers, location when you allow it for discovery, communications with support, and usage analytics needed to operate and improve the product.
2. How we use information
We use your data to create and secure your account, process bookings and payments, send verification and transactional messages, personalize discovery, support provider operations (calendar, staff, earnings views), prevent fraud, meet legal obligations, and improve SME Hub.
3. Sharing
We share booking details between the customer and the provider so appointments can be fulfilled. We use processors for email/SMS, payments, hosting, and analytics under appropriate agreements. We do not sell your personal information.
4. Cookies and sessions (web)
On the web app we use httpOnly cookies to keep you signed in securely (session and refresh tokens). A small non-httpOnly presence cookie helps the app know whether to restore a session. You can end a session by signing out, which clears these cookies.
5. Retention
We keep account and booking records for as long as needed to provide the service and meet legal, tax, and dispute requirements. You may request account deletion; some records may remain where the law requires. Pending deletions may include a restore window before permanent purge.
6. Security
We use industry-standard measures such as encryption in transit, access controls, and secure storage for credentials (Keychain on mobile; httpOnly cookies on web). No method of transmission is 100% secure; please use a strong password and protect your devices.
7. Your choices
You can update profile details in the product, control location and notification permissions on your device, request access or correction where applicable, and request account deletion subject to our retention rules.
8. Children
SME Hub is not directed at children under the age required by local law to consent to data processing. We do not knowingly collect personal data from such children.
9. International transfers
If data is processed outside your country, we apply appropriate safeguards as required by applicable privacy law.
10. Contact
Privacy requests: privacy@smehub.app (placeholder). Replace with your production privacy contact before launch.