Serbiz Tech Pte. Ltd.

Privacy Policy

Effective Date: February 2026 | Last Updated: February 2026

Serbiz Tech Pte. Ltd. ("Serbiz," "we," "us," or "our") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, store, and protect your information when you use the Serbiz platform, including our mobile application, website, and all related services (collectively, the "Platform").

By accessing or using the Platform, you consent to the collection, use, and disclosure of your information as described in this Privacy Policy. If you do not agree with any part of this Privacy Policy, please do not use the Platform.

1. Data Controller

The data controller responsible for your personal data is:

Serbiz Tech Pte. Ltd.
32 Pekin Street, #05-01, Singapore 048762
Email: support@serbiz.app

2. Information We Collect

2.1. Information You Provide to Us

Account Registration Data: Name, email address, phone number, password, and country of residence.
Identity Verification Data: Government-issued identification documents (such as national ID, passport, or driver's license) submitted for identity verification purposes.
Payment Information: Payment method details required by our third-party payment processors (Stripe and 2C2P). Serbiz does not directly store your full payment card details; these are handled by our payment processing partners in accordance with applicable security standards (PCI-DSS).
Profile Information: Profile photo, bio, skills, service descriptions, and any other information you choose to include in your profile.
Transaction and Communication Data: Listings, Service Agreements, messages between Users, reviews, ratings, and dispute reports.
Support Communications: Information you provide when contacting our support team.

2.2. Information We Collect Automatically

Device Information: Device type, operating system, unique device identifiers, browser type, and mobile network information.
Usage Analytics: Information about how you interact with the Platform, including pages viewed, features used, search queries, click patterns, session duration, and frequency of use.
Location Data: Your country of residence as provided during registration. We do not collect precise GPS location data unless you explicitly grant permission through your device settings.
Log Data: IP address, access times, error logs, and referring URLs.
Cookies and Similar Technologies: We use cookies, pixels, and similar technologies to collect information about your browsing activities. Please see Section 8 for more details.

3. How We Use Your Information

We use the information we collect for the following purposes:

Platform Operation: To create and manage your Account, facilitate Transactions, process payments, and provide customer support.
AI-Assisted Matching: To power our automated matching features that recommend and connect Listers with Hustlers based on factors such as service category, user preferences, ratings, availability, and location. These automated systems assist in providing personalized recommendations but do not make binding decisions on your behalf.
Identity Verification: To verify your identity and prevent fraud, including compliance with anti-money laundering (AML) and know-your-customer (KYC) requirements where applicable.
Communication: To send you transaction-related notifications, service updates, security alerts, and administrative messages.
Analytics and Improvement: To analyze usage patterns, improve Platform features, develop new services, and enhance the user experience.
Safety and Security: To detect, prevent, and address fraud, abuse, security risks, and technical issues.
Legal Compliance: To comply with applicable laws, regulations, legal processes, or government requests.
Advertising: To display third-party advertisements on the Platform. We may use anonymized and aggregated usage data to deliver relevant advertising. We do not sell your personal data to advertisers.
Marketing: To send you promotional communications about Serbiz services, subject to your right to opt out at any time.

4. Legal Basis for Processing

We process your personal data based on the following legal grounds:

Contract Performance: Processing necessary to perform our contract with you (i.e., providing the Platform services).
Legitimate Interests: Processing necessary for our legitimate interests, including fraud prevention, platform security, service improvement, and analytics, where such interests are not overridden by your rights.
Consent: Where you have given consent for specific processing activities, such as marketing communications or optional data collection.
Legal Obligation: Processing necessary to comply with legal or regulatory obligations.

We may share your information with the following categories of recipients:

Other Users: When you engage in a Transaction, relevant information (such as your name, profile, ratings, and communication) is shared with the other party to facilitate the service.
Payment Processors: We share transaction and payment-related data with Stripe and 2C2P to process payments. These processors handle your data in accordance with their own privacy policies and applicable regulations.
Service Providers: We engage third-party service providers for hosting, analytics, customer support, and other operational functions. These providers process data on our behalf and are contractually obligated to protect your information.
Legal and Regulatory Authorities: We may disclose your information to law enforcement, regulators, or other government authorities when required by law, in response to valid legal process, or to protect the rights, safety, or property of Serbiz, our Users, or the public.
Business Transfers: In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred to the successor entity, subject to the same privacy protections described in this Policy.
Aggregated and Anonymized Data: We may share aggregated or anonymized data that cannot reasonably be used to identify you for analytics, advertising, research, or other purposes.

We do not sell your personal data to third parties.

6. International Data Transfers

Serbiz operates across multiple jurisdictions, including Singapore, the Philippines, Vietnam, and the United States. Your personal data may be transferred to and processed in countries other than the country in which you reside. These countries may have data protection laws that differ from those in your jurisdiction.

When we transfer personal data internationally, we implement appropriate safeguards to ensure your data is protected in accordance with applicable law, including:

Relying on the data protection frameworks and adequacy standards recognized by the relevant authorities in your jurisdiction.
Entering into data processing agreements with third-party service providers and payment processors that include standard contractual clauses or equivalent safeguards.
Ensuring that our payment processors (Stripe and 2C2P) maintain compliance with international data protection standards, including PCI-DSS for payment data.

By using the Platform, you acknowledge and consent to the transfer of your personal data to countries outside your country of residence for the purposes described in this Privacy Policy.

7. Data Retention

We retain your personal data for as long as necessary to fulfill the purposes for which it was collected, including to provide the Platform services, comply with legal obligations, resolve disputes, and enforce our agreements.

Account Data: Retained for the duration of your Account and for ninety (90) days following Account deletion to allow for account recovery and to resolve any outstanding obligations.
Transaction Records: Retained for a minimum of five (5) years following the completion of a Transaction, or as required by applicable tax, financial, or regulatory laws.
Identity Verification Documents: Retained for as long as necessary to maintain compliance with applicable KYC/AML requirements, and securely deleted thereafter.
Usage Analytics and Log Data: Retained in identifiable form for up to twenty-four (24) months, after which it is anonymized or deleted.

After the applicable retention period, your personal data will be securely deleted or anonymized in accordance with our data management practices.

8. Cookies and Similar Technologies

We use cookies and similar tracking technologies to enhance your experience on the Platform. Cookies are small data files stored on your device that help us recognize your browser and capture certain information.

Essential Cookies: Required for the Platform to function properly, including session management and security features. These cannot be disabled.
Analytics Cookies: Used to collect anonymized information about how you use the Platform, which helps us improve functionality and performance.
Advertising Cookies: Used by third-party advertising partners to deliver relevant advertisements. These cookies may track your browsing activity across different websites.

You can manage your cookie preferences through your browser settings. However, disabling certain cookies may affect the functionality of the Platform.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption of data in transit and at rest, access controls, regular security assessments, and employee training on data protection.

While we strive to protect your information, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee the absolute security of your data, and you acknowledge that you transmit data at your own risk.

10. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

Right of Access: You may request a copy of the personal data we hold about you.
Right to Rectification: You may request correction of inaccurate or incomplete personal data.
Right to Erasure: You may request deletion of your personal data, subject to our retention obligations and legitimate business needs.
Right to Restriction: You may request that we restrict the processing of your personal data in certain circumstances.
Right to Data Portability: You may request a copy of your personal data in a structured, commonly used, and machine-readable format.
Right to Object: You may object to the processing of your personal data for direct marketing or where we rely on legitimate interests.
Right to Withdraw Consent: Where processing is based on your consent, you may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of these rights, please contact us at support@serbiz.app. We will respond to your request within the timeframe required by applicable law.

11. Jurisdiction-Specific Provisions

Singapore

For Users in Singapore, we process personal data in compliance with the Personal Data Protection Act 2012 ("PDPA"). You may contact the Personal Data Protection Commission (PDPC) if you believe we have not adequately addressed your data protection concerns.

Philippines

For Users in the Philippines, we process personal data in compliance with the Data Privacy Act of 2012 (R.A. 10173) and its Implementing Rules and Regulations. You have rights under the DPA including the right to be informed, the right to access, the right to object, the right to erasure or blocking, the right to rectification, and the right to data portability. You may file a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

Vietnam

For Users in Vietnam, we process personal data in compliance with Decree No. 13/2023/ND-CP on personal data protection and the Cybersecurity Law 2018. We will obtain your consent before collecting and processing personal data as required by Vietnamese law. You have the right to know, consent, access, rectify, and delete your personal data.

United States

For Users in the United States, we process personal data in compliance with applicable federal and state privacy laws. Depending on your state of residence, you may have additional rights under state privacy laws such as the California Consumer Privacy Act (CCPA) / California Privacy Rights Act (CPRA), including the right to know what personal data is collected, the right to delete, the right to opt out of the sale of personal data, and the right to non-discrimination for exercising your rights. We do not sell personal data as defined under the CCPA/CPRA. To exercise your rights, please contact us at support@serbiz.app.

12. Children's Privacy

The Platform is not intended for use by individuals under the age of eighteen (18). We do not knowingly collect personal data from children under 18. If we become aware that we have collected personal data from a child under 18, we will take steps to promptly delete such data. If you believe that a child under 18 has provided us with personal data, please contact us at support@serbiz.app.

13. Third-Party Links and Services

The Platform may contain links to third-party websites, services, or advertisements. We are not responsible for the privacy practices or content of these third parties. We encourage you to review the privacy policies of any third-party services you access through the Platform.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. We will notify you of material changes through the Platform or via email. Your continued use of the Platform after such notification constitutes acceptance of the updated Privacy Policy.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Serbiz Tech Pte. Ltd.
32 Pekin Street, #05-01, Singapore 048762
Email: support@serbiz.app
Website: https://serbiz.app

For data protection inquiries specific to your jurisdiction, you may also contact the relevant data protection authority in your country.