MyStor ("we", "us", or "our") operates the MyStor mobile application (the "App"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our App. We are committed to protecting your privacy in accordance with the General Data Protection Regulation (GDPR) and applicable data protection laws of the Republic of Croatia.
Information We Collect
Personal Information
When you create an account or use the App, we may collect:
- Name, email address, and phone number
- Profile photo
- Physical address or location data
- Payment identifiers and platform-fee billing information
- Job details, offers, direct-payment method selections, messages, and evidence uploaded for bookings or disputes
- Government-issued identification (for provider verification/KYC)
Automatically Collected Information
- Device type, operating system, and unique device identifiers
- IP address and approximate location
- App usage data and analytics
- Push notification tokens
- Crash reports and performance data
Camera and Photos
The App requests camera access to allow you to take photos of jobs, upload identification documents, and set a profile picture. Photos are uploaded to our secure servers and are only used for the purposes you provide them. We do not use your photos for training, advertising, or any purpose beyond the specific feature you are using.
How We Use Your Information
- To create and manage your account
- To connect customers with service providers
- To process platform fees, paid site visits, and transaction records
- To record the payment model selected for a booking and support direct-payment coordination between customers and providers
- To verify provider identity (KYC)
- To send push notifications about job updates, messages, and offers
- To improve the App and our services
- To detect and prevent fraud or abuse
- To comply with legal obligations
Legal Bases for Processing
- Contract: To provide the App, create bookings, process platform fees, show transaction records, and enable communication between users
- Legal obligation: To retain records required for tax, accounting, KYC, fraud prevention, and regulatory compliance
- Legitimate interests: To keep the platform secure, prevent abuse, resolve disputes, improve services, and protect users and MyStor
- Consent: Where required for optional features such as marketing communications, certain analytics, location access, camera access, and push notifications
Data Storage and Security
Your data is stored on secure servers located within the European Union, with encryption in transit (TLS 1.2+) and at rest. We implement industry-standard security measures including access controls, audit logging, and regular security reviews to protect your personal information. However, no method of electronic storage is 100% secure, and we cannot guarantee absolute security.
Data Retention
We retain your personal information as long as your account is active or as needed to provide you with our services. Upon account deletion, we will remove your personal data within 30 days, except where we are required by law to retain certain records (e.g., transaction history for tax purposes). You may request deletion of your account and associated data at any time by contacting us or using the in-app account settings.
Your Rights
Under the GDPR and applicable Croatian data protection law, you have the following rights:
- Right of access: Obtain a copy of the personal data we hold about you
- Right to rectification: Request correction of inaccurate or incomplete data
- Right to erasure: Request deletion of your data ("right to be forgotten")
- Right to restrict processing: Limit how we use your data in certain circumstances
- Right to withdraw consent: Withdraw consent at any time where processing is based on consent
- Right to data portability: Receive your data in a structured, machine-readable format
- Right to object: Object to processing based on legitimate interests
- Right to lodge a complaint: File a complaint with the Croatian Personal Data Protection Agency (AZOP) or your local supervisory authority
To exercise any of these rights, please contact us at privacy@nailedlt.org. We will respond to your request within 30 days.
Children's Privacy
The App is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected personal data from a minor, we will take immediate steps to delete such information from our servers.
Third-Party Services
The App may contain links to or integrations with third-party services (e.g., Stripe for platform fee processing, Firebase for analytics and push notifications, Sentry for crash reporting). We are not responsible for the privacy practices of these services. We encourage you to review their privacy policies before providing any personal information.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes through the App via push notification or by email at least 14 days before the changes take effect. Continued use of the App after the effective date constitutes acceptance of the revised policy. Previous versions of this policy are available upon request.
Contact Us
If you have questions about this Privacy Policy, please contact us at: