Servio Hub Legal

Privacy Policy

This Privacy Policy explains how Servio Hub Services handles personal data when you use Servio, related web pages, payment flows, and support channels. It is written for a marketplace platform that connects customers with independent service providers.

Last updated: March 31, 2026 Effective date: April 30, 2026 Scope: Servio app, web pages, and support Draft baseline: Cyprus / EU GDPR

1. Who operates Servio Hub Services

The Servio mobile application and related services are operated by P.K. PROJECT-X VENUE-RESERVE LTD, registered at Aristonikou, Limassol. Unless we say otherwise in a separate notice, this entity is the controller of the personal data described in this Privacy Policy.

Servio Hub Services is a marketplace platform. Customers use it to discover, book, schedule, and pay for services. Providers use it to publish business profiles, manage bookings, receive communications, and, where enabled, manage subscriptions, payouts, teams, and related operational tools.

For privacy questions, rights requests, or complaints, contact us at support@mileline-cy.com. For general support, use the same inbox.

2. When this Privacy Policy applies

This Privacy Policy applies to:

  • the Servio mobile application;
  • public Servio Hub Services web pages and payment return pages;
  • account creation, login, customer bookings, provider profile and subscription management, support communications, and other connected platform operations.

This Privacy Policy does not replace any privacy notice that an independent provider may give you for their own business. When a provider receives booking, customer, job, or payment-related data through Servio Hub Services, that provider may also have separate legal obligations as an independent controller for its own business use of that data.

3. The data we collect

Account and identity data

  • name, email address, login credentials handled through Firebase Authentication, account role, verification status, and internal user identifiers;
  • profile image, phone number, and account timestamps;
  • support or account-management requests, including manual account deletion requests where applicable.

Provider business and workspace data

  • business name, business contact information, service areas, address or office location, time zone, availability, pricing, offered services, branding, and portfolio images;
  • provider subscription status, plan details, trial status, and Stripe-linked subscription or payout account references;
  • provider workspace member records, seat management data, device records, and device removal history where those features are in use.

Customer booking and job data

  • booking requests, selected services, quotes, schedules, preferred windows, job instructions, completion details, reviews, and related status history;
  • customer-entered service locations, location coordinates when available, and access information needed to arrange services;
  • accepted payment method choice, payment state, refund state, and related operational references.
  • loyalty program information where the feature is active, including point balances, available and reserved value, redemption selections, earning and reversal records, and loyalty activity tied to jobs or payment events.

Messages, uploads, and communications

  • in-app chat messages and chat metadata;
  • uploaded images, including profile photos, provider portfolio photos, service images, chat attachments, and job completion photos;
  • notification feed items, saved-provider or favorite-provider relationships, push notification settings, quiet hours, and favorited-provider promotion preferences.

Location, device, and session data

  • current device location when you grant location permission and choose to use location-dependent features such as map pinning, service-area setup, browsing nearby providers, or location pickers;
  • device-generated push notification tokens when notification access is enabled, app device IDs, device names, platform information, security or session records, and last-active timestamps;
  • technical device values exposed by the operating system may be used once to seed a stable app device identifier for provider device management, seat enforcement, and workspace security;
  • if a provider workspace enables team location tracking and the tracking policy allows it, foreground live worker location data while a team member is on shift, plus shift status, heading, speed, accuracy, and tracking timestamps.
  • server, error, and security logs generated by our infrastructure may include IP address, request metadata, timestamps, and similar technical details needed to operate, secure, and support the platform;
  • real-time connectivity checks may be performed locally before uploads or similar actions to improve reliability; we do not treat those checks as a separate analytics profile.

We do not currently use Firebase Analytics or Crashlytics in the app configuration described by this Privacy Policy. If that changes, we will update this Privacy Policy.

The current public legal pages are simple informational pages. We do not currently describe them here as using advertising cookies or web analytics tools. If that changes, we will update this Privacy Policy.

Payment and billing data

  • Stripe customer, subscription, checkout session, payout, charge, refund, and payment intent references needed to operate job payments and provider billing;
  • billing status, invoice-related references, subscription period dates, and payout onboarding status;
  • loyalty redemption reservation status, checkout-session or payment-intent references connected to a loyalty redemption, discount amounts, reserved or restored points, earned points, reversal records, and related anti-abuse or support history;
  • Servio Hub Services does not state here that it stores your full card number or card security code. Card details are collected and processed by Stripe under Stripe's own payment infrastructure.

4. How we collect data

We collect data in the following ways:

  • Directly from you when you create an account, complete a profile, send messages, upload content, manage services, request bookings, or contact support.
  • From your use of the platform when bookings are created or updated, messages are sent, devices are registered, notifications are delivered, payment actions occur, or service reliability and security events are recorded.
  • From your device or operating system when you grant location, photo-library, or notification permissions and then use those features.
  • From other users when providers send quotes, update schedules, upload completion photos, or when customers submit reviews and booking details.
  • From service providers we use such as Google/Firebase and Stripe, which return status and reference data needed to operate authentication, storage, notifications, and payments.

5. Why we use personal data and our GDPR legal bases

We use personal data only where we have a valid legal basis under applicable law. Depending on the context, that basis may be one or more of the following:

  • Contractual necessity. We use data to create accounts, authenticate users, publish provider profiles, manage bookings, send job-related messages, operate customer payments, manage provider subscriptions, and otherwise deliver the service you request.
  • Legitimate interests. We use data to secure the platform, prevent fraud or abuse, enforce device and workspace rules, manage disputes, keep records, improve reliability, maintain operational logs, and send in-app or push updates that are closely related to the service.
  • Consent. We rely on consent where required for location access, push notifications, photo-library access, and similar device-permission-based features. You can usually change these permissions in your device settings.
  • Legal obligations. We may process data to meet accounting, tax, compliance, consumer-protection, or lawful disclosure obligations.

More specifically, Servio Hub Services uses personal data to:

  • create and maintain customer and provider accounts;
  • verify email addresses and secure access to the platform;
  • enable customers and providers to request, quote, schedule, and communicate about jobs;
  • process Stripe-based customer checkout flows, provider subscriptions, and provider payout onboarding;
  • operate loyalty points, promotional credits, discount codes, and redemption features, including calculating balances, reserving or applying discounts, reversing points after refunds or payment failures, preventing abuse, and resolving support requests;
  • store and deliver uploaded content such as profile images, portfolio images, and chat attachments;
  • operate maps, addresses, service-area tools, and optional live worker tracking;
  • send push notifications, reminders, billing updates, and favorited-provider promotion notifications where the feature is active and your settings allow it;
  • investigate misuse, maintain audit history, and protect users, providers, and Servio Hub Services.

6. How we share personal data

We do not sell your personal data. We share it only when needed to operate the platform, comply with law, or protect rights and safety.

With other users on the platform

  • Customers and providers can see the profile, booking, location, schedule, chat, and service information needed to arrange and perform jobs.
  • Providers may receive customer contact and job details necessary to review, quote, schedule, perform, and document booked services.
  • Customers may receive provider business, pricing, schedule, quote, review, and service-completion information.

Within provider workspaces

  • Provider owners and authorized managers may access workspace records, member access details, and device management data.
  • If team location tracking is enabled for a provider workspace, authorized workspace administrators may access foreground live worker location while workers are actively on shift, plus recent shift-status and last-active information available through that feature.

With service providers and processors

  • Google / Firebase for authentication, cloud hosting, databases, file storage, messaging, and backend operations.
  • Stripe for hosted checkout, subscription billing, payout onboarding, payment authorizations, captures, and refunds.
  • Map, geocoding, and location service providers used to support maps, address lookup, service-area tools, and location-based features. Depending on the feature and platform, this may include OpenStreetMap tile services and location services exposed through your device platform.

For legal, safety, or business reasons

  • We may disclose data to professional advisers, regulators, law enforcement, courts, or other third parties where required by law or reasonably necessary to protect rights, property, users, providers, or the platform.
  • If Servio Hub Services is involved in a merger, acquisition, restructuring, financing, or asset sale, personal data may be disclosed as part of that process subject to applicable law.

7. International data transfers

Servio Hub Services is intended to be operated from Cyprus / the European Union, but some of the service providers we use may process data in countries outside Cyprus or the EEA. When that happens, we aim to rely on appropriate safeguards available under applicable law, such as adequacy decisions, contractual commitments, or other recognized transfer mechanisms offered by the relevant provider.

8. How long we keep data

We keep personal data only for as long as reasonably necessary for the purpose for which it was collected, including to operate the platform, resolve disputes, comply with law, maintain security, and enforce agreements.

  • Account data is generally kept while your account remains active and for a reasonable period afterward for security, support, and record-keeping.
  • Job, payment, and billing records may be kept longer where required for accounting, tax, anti-fraud, dispute, or compliance reasons.
  • Messages and uploaded content may be retained while linked to active accounts, jobs, or support needs and may remain longer where needed to investigate abuse or resolve disputes.
  • Device, session, and workspace security data may be retained for ongoing access control, fraud prevention, and operational security.
  • Optional live worker tracking data may be kept while that feature is operating. Precise coordinates are cleared when foreground tracking becomes inactive, blocked, or stopped, while limited status and last-active metadata may be retained for operational or compliance needs.

9. Your privacy rights

Depending on where you are located and subject to applicable law, you may have the right to request access to, correction of, deletion of, restriction of, objection to, or portability of your personal data.

Servio Hub Services does not promise self-service data export or account deletion tools inside the app. If you want to exercise a privacy right, request account deletion, or ask a question about how your data is handled, contact support@mileline-cy.com.

If you believe we have handled your personal data unlawfully, you may also have the right to complain to the competent data protection authority, including the Cyprus Commissioner for Personal Data Protection where applicable.

10. Security

We use technical and organizational measures designed to protect personal data, including authenticated access controls, cloud storage and database rules, payment-provider segregation for card data, and access restrictions within the platform. No system is perfectly secure, and we cannot guarantee absolute security.

Access to messages, photos, location data, payment-related records, and similar job content is limited to authorized personnel and service providers who need that access to operate the platform, provide support, investigate fraud or abuse, resolve disputes, protect users or Servio Hub Services, comply with law, or establish, exercise, or defend legal claims. We do not routinely review this content unless one of those reasons applies.

11. Children

Servio Hub Services is not specifically directed to young children. Use of the platform should involve a parent or legal guardian where required by applicable law or where a user does not have the legal capacity to act alone. If we learn that we collected personal data from a child in circumstances where parental or guardian authorization was required and was not obtained, we will take appropriate steps, which may include deleting the data or seeking the required authorization where appropriate.

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in the platform, legal requirements, or operational practices. When we make material changes, we may update the date above and, where appropriate, provide additional notice through the app, website, or other reasonable means.

13. Contact

For privacy questions or rights requests, contact:

This policy should be reviewed again before publication to confirm final company details, production processors, and any live feature changes.