Privacy policy

Effective 4 November 2026

Servio is provided by Zoser Soft and helps people discover and request services in Dubai. This policy covers the Servio mobile app and the related service at zoser-soft.com/servio/. For privacy questions, corrections or deletion requests, contact info@zoser-soft.com.

Details you provide

When you submit a request, we collect your name, email, mobile number, Dubai community, service address, chosen service, preferred visit date and time, and any optional job notes. We use these details to respond, discuss the scope and quote, arrange the requested service and update its status. Do not include card details, identification documents or unrelated sensitive information in notes.

Customer accounts

You must create an account and log in before requesting a service. We store your name, email and a password hash, and link new requests to your account. Session tokens are stored hashed on the server and expire after 30 days. The website keeps its login token in tab session storage; the app uses secure device storage. Logout revokes the current session. Contact info@zoser-soft.com for account access help or verified account deletion. Customer accounts remain until deletion is requested.

Google and Apple sign-in

When available, you may sign in through Google or Apple instead of creating a Servio password. We request your provider account identifier, verified email and basic profile name. Apple may supply a private relay email. Your provider handles authentication; Servio does not receive your Google or Apple password. We store the provider identifier linked to your Servio account. Signing in with a provider does not automatically connect an existing password account. Authorization codes and temporary sign-in state expire within ten minutes; one-time return codes expire after two minutes. These temporary records are removed on the next sign-in start after expiry. Contact info@zoser-soft.com for account access or deletion assistance.

Linked customer and partner roles

Customers may add an Individual or Business partner profile to their existing login. We privately link the customer and partner records, retaining customer requests and partner service records. A new partner profile copies the customer mobile number and its verification state; later contact-number changes are managed separately. Linking an existing partner account with the same email requires its partner password and explicit consent. Linked partner profiles use the customer login and account recovery. Partner profile details and service prices are public; the account link and customer history are private.

Business accounts and marketplace listings

Business units can register with an email and password and publish a business name, description, base community, coordinates, coverage radius, services and starting prices. The business profile, base location and prices are public. Account email and password hashes are private. Business sessions expire after 30 minutes of inactivity. Business profiles remain until updated or removed following a verified deletion request to info@zoser-soft.com.

Partner ratings and reviews

After a completed partner booking, the customer who made the booking can publish one rating and written review. Ratings, review text, service category and publication date are public, labelled Verified customer. We do not publish your account name, email, mobile number, address or booking reference with the review. Please keep private information out of your text. Reviews remain until removed following a verified deletion or moderation request, including after the associated booking expires. Contact info@zoser-soft.com to report a review or request its removal.

Nearby search

If you choose Use my location, Servio requests foreground location permission and sends your current coordinates to its API to find businesses within your selected distance and their coverage radius. Search coordinates are held in memory and are not saved in the request database or device history. Hosting access logs may contain search URLs and coordinates. You can decline permission and search by community instead, or clear the location from the search. We do not track your location in the background. Businesses may also choose to use their current location to fill their public business base coordinates, or select their base on the map. The business location and search results maps load tiles from OpenStreetMap, which receives your IP address, the site origin and requests identifying the map area you view. Adjusting a pin updates the form; the business coordinates are saved when you publish or save your profile.

Device and network information

The app saves request references, private access tokens, service selections, preferred schedules and last-known statuses in secure storage on your device. These let you check requests from that device. Customer login is required for new requests. Saved references remain scoped to each account on that device. Signing in on a new device does not restore request history. Previous guest references remain accessible on their original device while logged out.

The service processes network information needed to deliver and protect it, including IP addresses for security and rate limiting. Our API hashes the direct client IP for rate limiting. Hosting and security systems may maintain separate access/error logs. Requests are sent over HTTPS and stored on our Hostinger-hosted server.

Who can access your details

Authorized Servio operators review requests through a protected dashboard. When you choose a marketplace business, your request, name, phone number, email, address and visit details are also available to that business through its protected inbox so it can respond and arrange service. Other businesses cannot view your request. The business name, starting price and price unit at submission are saved with your request. Information needed to arrange the requested service may be provided to staff or technicians handling it. Hostinger provides infrastructure and storage. Stock interior images load from Unsplash, which receives ordinary network requests, including IP/network information, when those images load. The website loads fonts from Google Fonts, which also receives font requests. The Android app uses system fonts.

We do not sell service-request data or use it for advertising. The app does not intentionally integrate advertising or analytics SDKs, collect payment-card details, or request access to your contacts, microphone, camera or photo library. Optional foreground location is used for nearby search as described above. Your service address is entered separately.

Payments and business payouts

When online payments are enabled, Stripe hosts checkout and collects card and eligible wallet details directly. Servio sends Stripe your email, request reference, confirmed total and business payment identifiers. Servio stores payment references, amounts, commission, transfer and refund status; it never receives full card numbers or security codes. Business onboarding and bank verification take place with Stripe. Servio charges no commission on requests with a final total of AED 100 or less, and a 15% commission on the full total for requests over AED 100. For newly completed services, the partner share is released automatically after customer confirmation or a 24-hour review period without a reported problem, subject to payment and account checks. Older completed bookings remain under manual review. Customers can report a problem in My requests to pause any unreleased share for Operations review; a report does not automatically refund a payment. We store completion confirmations, complaint details and resolution notes privately for service support and payment reconciliation. Stripe processing and banking schedules apply.

Payment records are retained separately from the service request for accounting, refunds and disputes. Clearing device history or deleting a request does not delete Stripe records. Contact info@zoser-soft.com to request review or deletion of retained payment records, subject to applicable accounting obligations.

Push notifications

Servio automatically registers request and inbox notifications when browser or device permission allows them. Your browser or installed app asks for notification permission when needed. Businesses and operators receive new-request and payment alerts. Customers receive request-status, quote and payment updates. Browser notifications use encrypted Web Push through your browser provider; app notifications use Expo, Google Firebase Cloud Messaging and Apple Push Notification service. These services process device tokens and notification payloads. Notifications omit customer contact details, addresses and job notes. Device tokens are stored privately and linked only to the business account or requests you can access. You can turn notifications off in your browser/device settings. Subscriptions expire after 90 days without renewal; queue records are removed after seven days. Clearing customer device history also removes its request notification subscriptions when the server is reachable. Signing out removes business/operator notification enrollment for that device.

Retention

Open requests are kept while the team handles them. Once a request is marked completed or cancelled, we retain its server record for 90 days, then remove it automatically on the next API or operator-dashboard access. If a closed request is reopened, that period restarts when it is closed again. Separate hosting logs and backups may follow the hosting provider’s schedules; any separately retained business records required for a specific legal obligation are handled outside this request database.

Your choices and deletion requests

To delete your customer or business account and associated personal data, use our Servio account deletion request page. You can make this request without the app installed.

You can browse without sending contact or address details. To request a service, the app asks for the information needed to respond and requires your affirmative agreement before submission.

To request deletion of server-held request data, or to correct details, email info@zoser-soft.com with your request reference when available. We may verify the request using relevant contact details before making changes. Do not send identity documents or payment details. Customers must log in to request services. Business owners can use the same contact to request verified account and listing deletion.

In the app, Help & your data provides contact and deletion links and a control to clear device history. Clearing history only removes saved references from that device. It does not cancel visits or erase server records. Contact the team separately for cancellation or server-data deletion.

Updates and contact

We will update this page and its effective date when these practices change. Contact info@zoser-soft.com for privacy or support questions.

Mobile verification

Customers must verify their mobile number by SMS before submitting a service request. Businesses must verify before appearing in searches or accessing their inbox. Google Firebase processes your mobile number for authentication, SMS delivery and abuse prevention. Google reCAPTCHA protects the security check. Servio accepts proof of SMS authentication only within five minutes and records a hash to prevent reuse. Verification records and rate limits help prevent abuse. Changing your contact number requires a new verification. Expired verification proofs are removed on the next API access.

Account access and request history

Your authenticated account can retrieve its service requests across devices. Browser and app storage keep a cache; clearing it does not delete account requests or cancel services. User-requested access links verify email ownership, expire after 15 minutes and work once. Password updates revoke existing account sessions. Appointment and quote changes are recorded for service coordination and payment reconciliation. An address is requested for on-site services; remote and drop-off services do not require your service address.