Privacy Policy

Helpa ("we", "us") is the data controller for personal data processed through the Platform. For data protection queries, contact privacy@tryhelpa.com.

• Account data: name, email, phone number, city, profile photo, languages.
• Helpa verification data: government-issued identity document, selfie, and any information you choose to include in your profile.
• Task data: descriptions, messages, attachments, ratings and reviews you exchange with other users.
• Payment data: processed by Stripe. We do not store full card numbers.
• Technical data: device, browser, IP address, cookies and log data used to operate and secure the Platform.

• To operate the marketplace, match Customers with Helpas and process bookings.
• To verify Helpa identity and protect the safety of the community.
• To handle payments through Stripe and comply with tax and accounting law.
• To communicate with you about your account, bookings and support requests.
• To improve the Platform and detect fraud or abuse.

• Contract: to provide the Platform and complete your bookings.
• Legal obligation: tax, accounting, anti-fraud and identity checks.
• Legitimate interests: to secure the Platform, prevent abuse and improve our services.
• Consent: for optional communications and non-essential cookies, where required.

Government-issued IDs and selfies submitted by Helpas are stored in a restricted-access bucket, encrypted at rest, and reviewed only by our verification team.

We retain verification documents for the duration of the Helpa's active account plus a period required to meet legal obligations (typically up to 5 years after account closure for anti-fraud and accounting purposes). Documents are deleted or fully anonymised at the end of the retention period.

• With the other party to a booking, to the extent needed to complete the task.
• With service providers who help us run Helpa (hosting, payments, communications, analytics), under written agreements.
• With Stripe, our payment processor.
• With authorities where required by law.

Some service providers may process data outside the EEA. When they do, we rely on adequacy decisions or Standard Contractual Clauses and appropriate safeguards.

We keep account and task data for as long as your account is active, and for a limited period after closure to comply with legal obligations, resolve disputes and enforce our agreements.

Under the GDPR, you have the right to access, rectify, erase, restrict, port and object to processing of your personal data, and to lodge a complaint with a supervisory authority (in Portugal, the CNPD).

To exercise any of these rights, email privacy@tryhelpa.com. We aim to respond within 30 days.

We use industry-standard measures including encryption in transit and at rest, access controls and audit logging. No system is completely secure, and we cannot guarantee absolute security.

We use essential cookies to operate the Platform and, with your consent where required, analytics cookies to understand usage.

We may update this Policy. Material changes will be communicated in advance where required.

privacy@tryhelpa.com