Alaga

Privacy Policy

Datenschutzerklarung -- Last updated: 6 April 2026

1. Controller / Verantwortlicher

IACy International FZCO, Dubai Airport Free Zone, Building 9W Block C Office 523, Dubai, UAE. Email: alaga@iacy.com

For EU users, IACy acts as data controller under the General Data Protection Regulation (GDPR). For UAE users, processing is governed by UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data.

2. Data We Collect / Erhobene Daten

We collect the following personal data when you use Alaga:

  • Account data: name, email address, phone number, profile photo
  • Profile data: location (city, country, address), service preferences, introductory text
  • Booking data: service requests, confirmed bookings, scheduling information, agreed rates
  • Payment data: processed via Stripe. We do not store full card details. Stripe's privacy policy applies.
  • Communication data: messages exchanged through the platform
  • Usage data: log data, IP address, browser type, pages visited

3. Legal Basis for Processing (GDPR) / Rechtsgrundlagen

  • Contract performance (Art. 6(1)(b) GDPR): processing necessary to provide the service
  • Legitimate interests (Art. 6(1)(f) GDPR): fraud prevention, platform security, service improvement
  • Legal obligation (Art. 6(1)(c) GDPR): compliance with applicable laws
  • Consent (Art. 6(1)(a) GDPR): where explicitly requested, e.g. marketing communications

4. How We Use Your Data / Datenverwendung

  • Providing and operating the Alaga platform
  • Processing bookings and payments
  • Communicating with users about their account and bookings
  • Verifying provider identities and trust scores
  • Improving platform features and user experience
  • Complying with legal obligations

5. Third-Party Services / Drittanbieter

  • Supabase (database and authentication) -- data stored in EU regions where applicable
  • Stripe (payment processing) -- subject to Stripe's own privacy policy
  • Mapbox (address autocomplete) -- location queries processed by Mapbox
  • Netlify (hosting) -- subject to Netlify's privacy policy

6. Data Retention / Datenspeicherung

We retain personal data for as long as your account is active or as needed to provide services. Booking and payment records are retained for a minimum of 7 years for legal and tax compliance purposes. You may request deletion of your account and associated data at any time (see Your Rights below), subject to legal retention obligations.

7. Your Rights (EU/EEA Users) / Ihre Rechte

Under the GDPR, you have the right to:

  • Access your personal data (Art. 15)
  • Rectify inaccurate data (Art. 16)
  • Request erasure (Art. 17)
  • Restrict processing (Art. 18)
  • Data portability (Art. 20)
  • Object to processing (Art. 21)
  • Lodge a complaint with your national data protection authority

To exercise any of these rights, contact us at alaga@iacy.com.

8. International Transfers / Internationale Datentransfers

As IACy is based in the UAE, data may be transferred outside the EU/EEA. Where this occurs, we ensure appropriate safeguards are in place, including standard contractual clauses (SCCs) where required by GDPR.

9. Cookies

Alaga uses only essential cookies necessary for authentication and session management. We do not use advertising or tracking cookies. No consent banner is required for essential cookies under the ePrivacy Directive.

10. Contact / Kontakt

For privacy-related enquiries: alaga@iacy.com