Privacy Policy

1. Data controller

Petrach e.K., owner Wolfgang Petrach
Stolzenauerstraße 34, 28207 Bremen, Germany
Email: wolfgang@petrach.de
Phone: +49 (441) 55 979 565

Data controller within the meaning of the GDPR for spyps.com.

2. What SPYPS does

SPYPS is a marketplace for on-site inspection jobs. We process personal data to operate accounts, match customers with agents, coordinate jobs, and deliver inspection reports.

3. Who is affected

Customers (job posters), agents (on-site inspectors), website visitors, and people contacting support.

4. Data we process

Account data: Username, password (hashed), optional email and phone, optional Google account ID, role (customer, agent, admin), language and country.

Job data: Inspection description, location, listing or Maps links, budget, schedule, mission checklists, photos, videos, reports, job code and status.

Technical data: IP address, user agent, session cookie (spyps_session), language cookie (NEXT_LOCALE), localStorage (token, drafts), server logs, push endpoints (if enabled).

Proof data: Terms acceptance, login, job publication — including version, timestamp, IP and user agent.

5. Legal bases

Contract performance and pre-contractual measures (Art. 6(1)(b) GDPR) for the platform, accounts and jobs. Legitimate interests (Art. 6(1)(f)) for security, abuse prevention and audit logs. Consent (Art. 6(1)(a)) for push notifications where enabled. Legal obligation (Art. 6(1)(c)) for tax and commercial retention periods.

6. Privacy during agent matching

Before an agent is selected, agents typically do not see the customer's exact address, contact name or phone number. They usually see city, country, inspection type and budget range. After assignment, further data may be shared as needed to perform the job.

7. Cookies and local storage

spyps_session — login, approx. 7 days, strictly necessary.
NEXT_LOCALE — language preference, approx. 1 year.
localStorage — auth token and job drafts; can be cleared in browser settings; some features may then be limited.

SPYPS does not currently use analytics or advertising tracking.

8. Third-party services

Google Fonts (DM Sans, Syne) — IP may be transmitted to Google.
Google OAuth — only if login is enabled.
Google Maps / Places — processing of Maps links you enter for location detection.
Hosting and PostgreSQL database — with processors under Art. 28 GDPR.

9. Sharing

With agents and customers where needed for offers and inspections. With IT service providers as processors. With authorities only where legally required. We do not sell data for advertising.

10. Retention

User account until deletion or prolonged inactivity. Completed jobs according to commercial and tax retention rules (typically up to 6 years). Audit logs approx. 24 months. Server logs approx. 90 days.

11. Your rights

Access, rectification, erasure, restriction, portability, objection and withdrawal of consent — contact wolfgang@petrach.de.

12. Right to complain

Bremen Commissioner for Data Protection and Freedom of Information, Arndtstraße 1, 27570 Bremerhaven, Germany — www.datenschutz.bremen.de

13. Security

HTTPS, password hashing, httpOnly session cookies, role-based access, audit logging.

14. Minors

SPYPS is intended for users aged 18 and over.

15. Changes

Current version always at spyps.com/en/legal/privacy and spyps.com/de/legal/privacy.