Legal
Privacy Policy
Draft 0.2, 28 September 2026. How FixIt handles your personal data.
1. Who is responsible
The operator of FixIt.App named in the impressum is responsible for your personal data. You can reach us at support@fixit.homes. This policy follows the Swiss Federal Act on Data Protection (FADP), and the EU General Data Protection Regulation (GDPR) where it applies.
2. What we collect
Everyone with an account: username, email address, a hashed password (we never store the password itself), your role (homeowner or professional), your language, and when you registered and confirmed your email.
Homeowners: phone number and address if you give them; the jobs you post, including the description, location, access and safety notes and photos; your conversations with the AI assistant; messages and photos exchanged with a professional; reviews; maintenance reminders; and records of bookings and payments.
Professionals: business description, trades, service address, radius and weekly availability; approximate coordinates of the service address; trade licence, insurance certificate and identity document; profile and portfolio photos; quotes; and records of bookings, payouts and reviews.
Payments: amount, commission, payout and status. We never receive or store card details: they go directly to Stripe.
Security data: your network (IP) address when a sign-in fails, when a new account is created, when a password reset is requested, and as a daily count of assistant messages. We use these only to stop password guessing, mass sign-ups and misuse of the assistant, and delete them automatically after 30 days. Our hosting provider also keeps short-lived technical server logs.
3. Why we use it
- To run the service: matching jobs to professionals, quotes, bookings, payments, and the emails that go with them (for example a new quote, a booking reminder the day before, or a new message).
- To check professionals: licence, insurance and identity, so that the person who comes to a home is who they say they are. Identity and licence documents are seen only by the operator.
- To keep FixIt safe: resolving disputes and preventing abuse and fraud.
- To meet legal duties: in particular bookkeeping and tax records.
We do not sell your data and do not use it for advertising or profiling. We make no automated decisions about you with legal or similarly significant effects: the assistant only makes suggestions, and a person decides on approvals and disputes.
4. Who else sees your data
We use a small number of service providers. Each receives only what it needs:
| Provider | What for | What it receives |
|---|---|---|
| Railway | Hosting and database | All data stored by FixIt (servers in the United States) |
| Stripe | Online payments | Email address, amount and a booking number; card details directly from you |
| Brevo | Sending emails | Email address and the content of the email |
| OpenAI | A first check of a professional's trade licence and liability insurance before a person at FixIt decides on their application (never their ID document) | The licence and insurance files, the name, business name and trades given at sign-up |
| OpenAI (Anthropic as backup) | The AI assistant | The text and photos you send to the assistant |
| OpenAI (Anthropic as backup) | Helping FixIt write to tradespeople outside FixIt when nobody has quoted on a job (see below) | The job's trade, town, timing and description, with contact details removed |
| OpenStreetMap (Nominatim) | Turning an address into approximate coordinates | The address text only |
| Google Fonts, jsDelivr | Fonts, styles and icons | Your IP address, because your browser loads them directly |
| Pexels | Photos on the home page | Your IP address, because your browser loads them directly |
| Cloudflare (when switched on) | Checking that sign-ups and sign-ins come from people | Your IP address and technical browser signals |
Do not send the assistant information you would not want processed this way. Under their terms for business customers, OpenAI and Anthropic do not use data sent through their programming interface to train their models by default.
Between users: when you post a job, invited professionals see the description, photos and an approximate location. Your full address is shared only with the professional whose quote you accept, and with any other approved professional they bring in to help; you are told by email when that happens. The booking chat is between you and your professional; FixIt reads it only if a problem is reported. A professional's public profile shows their name, trades, reviews and portfolio, not private contact details.
Finding a professional: if nobody on FixIt has quoted on a job, FixIt may contact tradespeople outside FixIt to find one. They are told the trade, the town, the timing and a description of the job, without your name, address or contact details.
5. Data outside Switzerland
Our hosting is in the United States and some providers process data in the EU or the US. Where data goes to a country without adequate protection, we rely on recognised safeguards such as the standard contractual clauses in our providers' data processing terms, or the Swiss-U.S. Data Privacy Framework where the provider is certified.
6. Cookies and browser storage
FixIt uses only cookies that are needed for the site to work. We use no advertising, analytics or tracking cookies, which is why there is no cookie consent pop-up. If that ever changes, we will ask first.
| Name | Purpose | How long |
|---|---|---|
sessionid | Keeps you signed in | 2 weeks, or until you sign out |
csrftoken | Protects forms against forged requests from other sites | 1 year |
django_language | Remembers the language you picked | Until you close the browser |
messages | Carries a one-time notice to the next page, such as "saved" | Until it is shown |
fixit-tz | Your browser's time zone (for example Europe/Oslo), to also show prices roughly in your own currency. No location service is asked | 1 year |
fixit-theme (browser storage, not a cookie) | Remembers light or dark mode | Until you clear it |
You can delete cookies in your browser settings at any time; you will then be signed out.
7. How long we keep it
- Account and profile data: until you delete your account.
- Jobs, messages and photos: while your account exists; removed or anonymised when you delete it. Reviews you wrote stay on the professional's profile, without your name. You can delete individual assistant conversations at any time.
- Financial records (payments, commission, invoices): 10 years, as Swiss bookkeeping law requires, even after account deletion.
- Verification documents: while the account exists. A replaced document is deleted when the new one is uploaded, and all are deleted with the account.
- Security data (network addresses): 30 days.
8. Your rights
You can ask for a copy of your data, have it corrected or deleted, restrict how we use it, and object to processing based on our legitimate interests.
Two of these are built in, on your profile page:
- Download my data: everything we hold about you, as a file.
- Delete my account: removes your account and personal data, apart from the financial records we must keep. Possible once no job is in progress and every finished job is paid and free of open problem reports.
For anything else, write to support@fixit.homes. If you think we have handled your data wrongly, you can complain to the Federal Data Protection and Information Commissioner (FDPIC), or in the EU to your local data protection authority.
9. Security
Traffic is encrypted (HTTPS), passwords are stored only as salted hashes, repeated wrong passwords are slowed down, identity and licence documents are never publicly reachable, and the admin area is restricted to the operator. No system is perfectly secure. If a breach is likely to put you at high risk, we will inform you and the FDPIC as the law requires.
10. Children
FixIt is not meant for anyone under 18, and we do not knowingly collect their data.
11. Changes
We post updates here with a new date, and tell account holders about material changes.
See also the terms of service and the impressum.