Privacy at Doorstep.

Information used for appointments

When you save a request, we store your account identifier, name, phone number, service details, preferred date and time, town, address or landmark, any notes, a request reference and creation time. We use these details to save your request and show it in your request history.

Accounts, profiles and reviews

We store your name, cell number, account role, a salted password hash and a session cookie for login. Phone ownership is not yet verified by SMS. Provider photos, work examples, introduction, services and working areas are stored for application review and published to signed-in users after approval. Uploaded photos are resized and stripped of metadata in the standard upload form. Quotes, reviews of completed services, reports and moderation reasons are kept to operate the marketplace. Review text and ratings are visible on provider profiles; do not include private contact details.

Optional location

Location is requested only when you tap “Use my current location” and your browser allows it. It captures a fixed position, not continuous live tracking. Coordinates and reported accuracy are saved only when you confirm the pin and submit the appointment request. You may remove the pin before submission and use a typed address instead.

Opening the map preview or a saved map link shares the relevant coordinates with OpenStreetMap so it can display the location. The preview does not load until you choose to review the map.

Contact messages

The contact form sends your name, email address and message through FormSubmit to doorstep@gmail.com. FormSubmit processes the submission and spam checks; the receiving email service processes the delivered email. Do not include passwords, payment details, identity documents or precise location information in a general enquiry.

Read FormSubmit’s privacy policy before using the form. You may instead email doorstep@gmail.com directly.

Storage and access

Appointment records and account information are stored in Supabase’s hosted database, and provider photos in private Supabase Storage. The application is prepared for hosting on Vercel. Request history is restricted by signed-in account. Hosting and authentication services process information needed to operate and secure the site. Doorstep’s operator may access records for administration and support. Approved providers see the service, preferred time and town on open requests. Only the chosen provider receives the customer’s name, phone, address, private notes and optional location pin. Suspended providers lose access to those contact and location details. Booking updates are shown in the app; SMS notifications are not connected.

Other services and browser data

Site hosting and sign-in may use cookies and technical logs. The home page loads an image from Unsplash, which receives the network information needed to serve that image. External map, email and form services have their own privacy practices. Processing may occur outside Eswatini; this page does not promise local-only storage.

Keeping and correcting records

You can delete your account under Account after resolving confirmed appointments. Deletion closes both customer and provider access, removes your profile and photos, clears personal booking details and location pins, and signs you out on every device. Unaccepted requests and offers are cancelled or withdrawn. Photo storage removal is retried if storage is temporarily unavailable; access is removed immediately. Booking references, service dates, prices, ratings and restricted reports and moderation history remain for history and dispute handling. Written reviews you posted are cleared. A hashed phone reference is retained with the deletion record; if you were suspended, it is used to prevent re-registration from bypassing that restriction. Deleting an account does not remove copies other people already downloaded. To request access, correction or deletion, email doorstep@gmail.com with your request reference. We may need to verify that you are the account holder. Do not send identity documents unless a suitable verification process has been agreed.

Changes and questions

We will update this notice as provider accounts, contact handling or other features change. For privacy questions, use the contact page.