Privacy Policy

Last updated: 2 July 2026

1. Controller

The controller responsible for the processing of personal data in connection with the use of the Swipe platform is:

Swipe UG (haftungsbeschränkt)
Karl-Scheele-Straße 2
60320 Frankfurt am Main
Germany
Email: info@swipe-service.de
Represented by its managing director, Mousa Hilaneh

2. Data Protection Contact

If you have any questions about data protection, the exercise of your rights, or this Privacy Policy, you can contact us at any time at info@swipe-service.de or by mail at the address above.

3. Scope of this Privacy Policy

This Privacy Policy applies to the websites, mobile applications, and related services provided by Swipe, in particular to the use of the platform under the domain swipe-service.de, to web and app functions, to communication and support processes, and to related contractual, payment, and verification workflows.

4. What Personal Data We Process

Depending on how you use the platform, we process the following categories of personal data in particular:

4.1 Account and Profile Data

We process the data you provide when registering and maintaining your profile, including first name, last name, email address, phone number, password hash, user role, user status, preferred language, and, for providers, additional company details, service categories, service area, company description, profile picture, and portfolio files.

4.2 Request, Job, and Offer Data

When clients post requests or providers submit offers, we process project descriptions, scheduling preferences, location and address data, categories, photos or other uploaded files, offer amounts, offer notes, and status information for matching and execution purposes.

4.3 Communication and Support Data

We process messages and other communication content within the platform, support requests, follow-up questions about jobs, and the information you provide when submitting reports or complaints.

4.4 Provider Onboarding, Evidence, and Verification

For providers, we process company details, uploaded evidence such as trade licenses or similar documents, portfolio files, profile pictures, as well as status and session data from identity verification processes during registration and activation.

4.5 Payment and Billing Data

Where payments, fees, invoices, payouts, or billing processes are involved, we process billing address data, tax-related information, payment status, transaction references, Stripe customer or account identifiers, and billing-related documents.

4.6 Notification and Device Data

For notifications, we process push tokens, device identifiers, platform information, app versions, delivery and activity information, and your notification settings, such as email notifications, marketing emails, quiet hours, and time zone.

4.7 Technical Usage Data

When you use the platform, we process technical data such as IP address, timestamps of requests, request and response metadata, security and session information, authentication and refresh sessions, CSRF-related information, and browser-side storage values, for example for language settings or temporary drafts.

4.8 Legal Documents and Consents

We store which versions of privacy, cookie, or contractual documents you accepted and when such acceptance took place in order to meet our accountability and documentation obligations.

5. Purposes and Legal Bases of Processing

We process personal data only where permitted under the applicable data protection law.

Where the General Data Protection Regulation (GDPR) applies, we rely in particular on Article 6(1)(a), (b), (c), and (f) GDPR.

The processing serves the following purposes in particular:

• providing, operating, and securing the platform
• registration, login, session management, and account maintenance
• matching clients and providers
• submission, management, and acceptance of offers
• pre-contractual steps and job execution
• provider onboarding and verification
• payment processing, invoicing, and documentation
• communication between users and with our support team
• sending email and push notifications
• prevention of abuse, fraud, and circumvention
• handling reports, moderation actions, and legal defense
• publication and display of public provider profiles, ratings, and portfolio content where this is part of the platform function
• fulfillment of record-keeping, archiving, and accountability obligations

6. Matching, Job Execution, and Communication

Swipe’s core function is to connect clients and providers. For this purpose, we process the project and location information posted by clients as well as the offer and communication data submitted by providers.

Once a job is formed or approved for direct execution, we may share with the other contractual party those contact and job details that are necessary for the direct performance of the mediated job.

Communication within the platform may be stored and processed where required for service delivery, evidence, dispute handling, abuse prevention, or enforcement of our platform rules.

7. Provider Profiles, Public Content, Ratings, and Portfolio

Certain provider information is public or visible to other users because this is part of how the platform functions. This may include company name, company description, service area, ratings, profile picture, and portfolio files published by the provider.

Please do not upload any information to public profile areas that you do not want to be publicly visible.

Client project or job content may be shown to suitable providers where necessary for matching.

8. Location, Maps, and Search Functions

When you enter places, postal codes, cities, or addresses, or use map features, we process the related location and geodata in order to provide search results, service areas, map views, and location-based functions.

According to the current product setup, no permanent background location tracking takes place. Location and address data are processed in particular when you enter them yourself or where a map or search feature requires those details.

9. Notifications and Marketing

We use your contact details to send transactional messages, such as those relating to registration, login, security events, messages, jobs, offers, status changes, payments, or reviews.

Where you give the relevant consent or enable the relevant setting, we may also use your email address for promotional information about our services. You can unsubscribe at any time with effect for the future.

10. Checks, Reports, and Moderation

To protect the platform and its users, we may process data in order to detect, review, and document abuse, fraud, harassment, unlawful content, circumvention attempts, security incidents, or other violations of our rules.

Where content, users, messages, ratings, or posts are reported, we process the report data, moderation decisions, reasons, and any other case-related information as required.

11. Recipients and Services Used

We use external service providers and technical platforms to provide our services. Personal data may be transferred to the following categories of recipients where necessary for the respective function:

11.1 Microsoft Azure

We use Microsoft Azure infrastructure and storage services, in particular for hosting, file storage, and serving uploaded content such as profile pictures, portfolio files, post files, and invoice documents.

11.2 Stripe

We use Stripe services for payment processing and identity-related verification processes. Depending on the process, Stripe may process data both as a processor and as an independent controller, in particular for payment processing, fraud prevention, regulatory review, and identity verification.

11.3 Firebase Cloud Messaging

We use Firebase Cloud Messaging for push notifications in the mobile apps. In this context, push tokens, device information, and delivery-related data are processed to the extent required for delivering notifications.

11.4 Mapping and Geocoding Services

Depending on the technical configuration, we use in particular Google Maps Platform as well as Nominatim and OpenStreetMap for address lookup, geocoding, and map-related functions. We also use OpenStreetMap map tiles to display maps.

11.5 Google Fonts and Material Icons in the Web Application

The web application loads fonts and icon resources from Google. As a technical consequence, connection data may be transmitted to Google.

11.6 Email Service Providers

For sending system and service emails, we use an email or SMTP service configured by us.

11.7 Other Recipients

In addition, data may be transferred to advisers, auditors, public authorities, courts, payment or debt collection service providers, or other recipients where this is legally required, contractually necessary, or necessary for the establishment, exercise, or defense of legal claims.

12. International Data Transfers

Depending on the market from which you use Swipe and on the services involved in the individual case, personal data may be processed in Germany, in other countries of the European Economic Area, or in other countries.

Where the applicable data protection law requires specific safeguards for cross-border transfers, we rely on appropriate safeguards or other legally permitted transfer mechanisms, in particular standard contractual clauses or comparable recognized safeguards.

13. Cookies, Similar Technologies, and Browser Storage

In the web application, we use required cookies and similar technologies in particular for authentication, session management, security, and CSRF protection.

We also use browser-side storage mechanisms such as Local Storage or Session Storage where this is necessary for language settings, market-related development functions, or temporary drafts.

Further information on cookies and similar technologies may be provided in a separate cookie notice.

14. Retention Periods

We store personal data only for as long as it is necessary for the respective purposes or where legal retention obligations apply.

We generally store account and profile data for the duration of the user relationship and beyond where necessary to handle open matters, defend legal claims, or comply with legal obligations.

Contract, payment, invoice, tax, and similar records are stored in accordance with applicable commercial, tax, or other statutory retention periods.

Notification, security, moderation, and evidence-related data are stored for as long as necessary for the relevant security, documentation, or legal purpose.

Publicly visible profile and portfolio content generally remains available until it is removed, replaced, or the relevant account is deleted.

15. Your Rights

Depending on the applicable data protection law, in particular under the GDPR, you may have the following rights, subject to the statutory requirements:

• the right to access information about the processing of your personal data
• the right to rectify inaccurate or incomplete data
• the right to erasure of your data, provided that no legal or contractual retention obligations prevent this
• the right to restrict or stop certain processing activities where provided by law
• the right to data portability where provided by law
• the right to object to certain processing activities or to withdraw any consent given with effect for the future
• the right to lodge a complaint with a competent data protection or supervisory authority

16. Data Security

We take appropriate technical and organizational measures to protect personal data against loss, misuse, unauthorized access, unauthorized disclosure, alteration, or destruction. These measures include, in particular, role-based access restrictions, security mechanisms for authentication and sessions, and technical measures to protect stored and transmitted data.

17. Links to Other Websites and Services

Our platform may contain links to third-party websites or services. Their respective providers are solely responsible for their content and privacy practices.

18. Currency and Changes to this Privacy Policy

We update this Privacy Policy if platform functions, data processing activities, or the legal framework change. The version published on the platform from time to time shall apply.

Where we are legally required to do so or where changes are material, we will also inform you in an appropriate manner.