Sign In

Privacy Policy

Last updated: March 2026

1. Data Controller

The data controller for your personal data is TuProfesional.xyz, a professional services marketplace that connects customers with home service providers in the Valencia region, Spain.

For any privacy-related inquiries, please contact us at: [email protected]

2. Data We Collect

We collect the following types of personal data:

  • Customer contact data (leads): name, phone number, email address, and message submitted through the contact form.
  • Provider profile data: name, phone number, email address, business description, logo, coverage area, and services offered.
  • Authentication data: managed through Clerk, including email address and session data.
  • Payment data: processed by Stripe. TuProfesional does not directly store credit card numbers or sensitive financial information.
  • Usage data: basic browsing information and website analytics.

3. Purpose of Data Processing

We process your personal data for the following purposes:

  • Connecting customers with professional service providers.
  • Managing provider registration and profiles on the platform.
  • Processing and managing provider subscriptions.
  • Sending notifications related to leads received and account status.
  • Improving the functionality and performance of the platform.

4. Legal Basis for Processing

We process your data based on the following legal grounds:

  • Consent: when a customer submits a contact form, they provide consent by checking the corresponding checkbox.
  • Performance of a contract: for providers with active subscriptions, processing is necessary to deliver the contracted service.
  • Legitimate interest: to improve and maintain the security of the platform.

5. Third-Party Data Processors

We share data with the following service providers who act as data processors:

  • Clerk — User authentication and session management.
  • Stripe — Payment processing and subscription management.
  • Resend — Transactional email delivery (lead notifications, confirmations).
  • Cloudflare — Hosting, CDN, web analytics, and DDoS protection.

All data processors comply with GDPR and maintain valid data processing agreements. We do not sell, rent, or share your personal data with third parties for marketing purposes.

6. Data Retention

  • Lead data (contacts): automatically deleted 90 days after creation.
  • Provider data: retained while the account remains active. After a deletion request, data is removed within 30 days.
  • Payment data: Stripe retains records according to its own policies and legal obligations.

7. Your Rights Under GDPR

Under the General Data Protection Regulation (GDPR), you have the following rights:

  • Right of access: request a copy of the personal data we hold about you.
  • Right to rectification: correct inaccurate or incomplete data.
  • Right to erasure: request the deletion of your personal data.
  • Right to data portability: receive your data in a structured, commonly used format.
  • Right to object: object to the processing of your data under certain circumstances.
  • Right to restriction of processing: request that we limit the use of your data.

To exercise any of these rights, send an email to [email protected]. We will respond to your request within 30 days.

8. Data Deletion

Providers can request complete data deletion through the My Profile section in the dashboard (/pro/perfil) or by sending an email to [email protected].

Deletion includes: provider record, all associated leads, subscriptions, and booked positions. This process is irreversible.

9. Cookies

By default, TuProfesional only uses essential cookies required for the website to function (session, authentication, and cookie preferences).

Analytics cookies are only activated if the user gives explicit consent through the cookie banner displayed on the first visit.

For more details, you can manage your cookie preferences at any time by clearing your browser's local storage data.

10. International Data Transfers

Some of our data processors (Clerk, Stripe, Resend) may process data on servers located outside the European Economic Area (EEA). In all cases, these providers have adequate safeguards in place as required by GDPR, such as Standard Contractual Clauses or equivalent certifications.

11. Security

We implement appropriate technical and organizational measures to protect your personal data, including encryption in transit (HTTPS/TLS), secure authentication, and role-based access control.

12. Changes to This Policy

We reserve the right to update this privacy policy. Any material changes will be communicated through the platform with 30 days' notice. We recommend that you review this page periodically.

13. Contact

If you have any questions about this privacy policy or the processing of your personal data, you can contact us at:

[email protected]

We use cookies to improve your experience. Learn more