Privacy Policy

The data controller for the CercaPros Platform (linda-poliv.ru) is its administrator. For any questions about personal data, write to denis20019@gmail.com.

At registration: name, email and/or phone number, password (stored as a hash, never in plain text).

Specialist profile data (optional): work categories and districts, service descriptions, tags, portfolio photos, and intro video.

An identity document — voluntarily uploaded by a Specialist to obtain the "Identity verified" badge.

The content of requests, responses, chat messages, and reviews you post on the Platform.

Technical data: a session cookie required to log in (details in the Cookie Policy), IP address, and browser data, kept in standard server logs for security purposes.

To provide the core features: registration and login, searching for specialists, posting requests and responses, messaging, reviews.

To send service notifications: a new response, a new message, a request expiring, email confirmation.

To maintain trust and safety: tag moderation, reviewing reports, verifying documents for the "Identity verified" badge, and preventing fraud and automated (spam) sign-ups.

With your separate consent — to send you news and promotions by email and, later on, by SMS.

Data necessary for the service to function (registration, requests, messages, service notifications) is processed to perform our contract with you — that is, to provide the Platform features you use.

Data for marketing emails and SMS is processed only with your explicit consent, which you can withdraw at any time without needing to justify it.

Security logs and anti-fraud/anti-spam measures are processed on the basis of the Platform's legitimate interest in protecting the service and other users.

We do not sell personal data or share it with ad networks for targeting.

To run the service we use the following processors, which handle data on our behalf: Vercel — hosting for the Platform, storage for uploaded files (avatars, portfolio photos, intro video, verification documents), and technical server logs; Prisma Data Platform — hosting for the database that holds all account and posting data; Resend — sending email notifications; Cloudflare — the "I'm not a robot" check on login and registration (it receives your IP address and technical browser data); Google — sign-in via a Google account (OAuth), if you choose that option.

An identity document is not published on the Platform, is not shown to other users, and is not shared with third parties beyond the processors listed above. Only the administrator views it, for verification purposes. Technically the file is stored with Vercel under a random, unguessable URL that is not linked from anywhere; once the request is decided, the file is deleted (see Section 8).

We may disclose data in response to a valid request from public authorities, where required by Paraguayan law.

Service (transactional) notifications — e.g., about a new response, a new message, a request expiring, or to confirm your email — are sent regardless of marketing consent, since they are part of the service's core functionality, and cannot be fully turned off without deleting your account.

Marketing and promotional messages are sent only to those who gave separate, explicit consent, either at registration or later in account settings. In line with Articles 21–23 and 30 of Law No. 4868/2013 on Electronic Commerce, every such message will be clearly labeled as advertising and include a simple, free way to unsubscribe.

Today these go out by email only: the SMS channel is planned but not live yet. Your consent covers both channels, so we won't ask again when SMS launches — but we will update this policy and name the SMS provider among the processors in Section 5. If you don't want to receive SMS, withdraw your consent by any of the means below.

You can unsubscribe at any time: via the link in the marketing message or SMS itself, on a dedicated unsubscribe page on the site, or from the "Account" section using the "Communications" toggle. Re-subscribing works the same way.

The Platform uses a technical session cookie required to log in. Details and how to opt out are in the separate Cookie Policy.

Account and profile data is kept while the account is active. If you deactivate your own account, the data is kept (hidden from search) since it may be part of other users' history — requests, conversations, reviews. Full data deletion is available on request — see "Your rights" below.

An identity document is kept only until the verification request is decided: as soon as the administrator approves or rejects it, the file is deleted automatically. Until then you may request its deletion by writing to denis20019@gmail.com.

Portfolio photos and video are kept until you delete them yourself from your specialist profile settings, or until the account is deleted.

You have the right to: access your personal data; correct inaccurate data; delete your data or your entire account; restrict or withdraw consent to processing (for marketing messages); receive a copy of your data in a machine-readable format.

To exercise any of these rights, write to denis20019@gmail.com. We will review your request and respond within 30 days.

These rights are grounded in the constitutional habeas data guarantee (Art. 135 of Paraguay's Constitution). We also align with the principles of the new Law No. 7593/2025 on Personal Data Protection — Paraguay's first general personal-data-protection law — which is coming into force in stages.

Passwords are stored as an irreversible hash (bcrypt), the connection to the site is protected with HTTPS/TLS, and access to administrative features requires an additional check (two-factor authentication). Uploaded photos have their metadata stripped, including capture coordinates. Identity verification documents are not published on any Platform page, are stored under an unguessable URL, and are deleted as soon as review is finished.

The processors listed in Section 5 (Vercel, Resend, Google) process data on servers outside Paraguay, including in the United States. By providing us your data, you consent to this transfer, which is necessary for the service to operate.

The Platform is intended for people 18 and older. We do not knowingly collect data from minors. If we learn that an account was created by someone under 18, we will delete that account and its associated data.

If you believe your data-protection rights have been violated, please write to us first at denis20019@gmail.com — we'll try to resolve it directly. You may also contact the Secretaría de Defensa del Consumidor y el Usuario (SEDECO) or the Defensoría del Pueblo of the Republic of Paraguay.

We may update this policy. For substantial changes, we try to give advance notice. The date at the top of the document reflects the latest update.

For any questions about personal data, write to denis20019@gmail.com.