← Back

Privacy Policy

Effective: May 1, 2026 | GDPR compliant

1. Data Controller

CMS SupaTrak s.r.o.
IČO: 28659121
Železárenská 636/4, Hulváky, 709 00 Ostrava
Email: privacy@mendoapp.eu

2. Data We Process

Category	Data	Purpose
Registration	Name, email, password (hash)	Account creation
Repairer profile	Company, address, specialization	Marketplace listing
Diagnostics	Appliance photos	AI fault analysis
Location	GPS (with consent)	Finding repairers
Communication	Chat messages	Customer–repairer chat
Payments	Payment data (Stripe)	Payment processing
Technical	IP, device, language	Security & localization

3. Legal Basis

• Contract performance (Art. 6(1)(b) GDPR)
• Legitimate interest (Art. 6(1)(f) GDPR)
• Consent (Art. 6(1)(a) GDPR)
• Legal obligation (Art. 6(1)(c) GDPR)

4. AI Photo Processing

Photos processed by AI (Google Gemini 2.5 Flash), transmitted encrypted (TLS 1.3), not used for training, retained 90 days.

5. Third-Party Data Sharing

Recipient	Purpose	Country
Supabase (PostgreSQL)	Database, auth	EU (Frankfurt)
Google Cloud (Gemini AI)	AI diagnostics	EU
Stripe	Payments	EU/US (SCC)
Firebase (FCM)	Push notifications	EU/US (SCC)

6. Data Retention

• Account: duration + 30 days.
• Photos: 90 days.
• Chat: 12 months.
• Billing: 10 years.

7. Your Rights (GDPR)

• Access
• Rectification
• Erasure
• Portability
• Objection
• Withdraw consent

To exercise your rights, contact us at privacy@mendoapp.eu. We will respond within 30 days.

8. Cookies

Only technically necessary cookies. No analytics/advertising cookies without consent.

9. Supervisory Authority

You have the right to file a complaint with a supervisory authority in your country.

10. Contact

CMS SupaTrak s.r.o.
Železárenská 636/4, Hulváky, 709 00 Ostrava
IČO: 28659121
Email: privacy@mendoapp.eu